You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The converted image runs the getcap output is different for /usr/bin/ping than in the non-converted image.
This causes ping to run into a permission denied issue when the container starts.
Linux supports associating capability sets with an executable file. The file capability sets are stored in an extended attribute named security.capability.
For images, security.capability is stored by pax format with prefix SCHILY.xattr. in a tarball.
Userspace convertor omits these extend attributes.
What happened in your environment?
The converted image runs the getcap output is different for /usr/bin/ping than in the non-converted image.
This causes ping to run into a permission denied issue when the container starts.
Non converted image:
Converted image:
What did you expect to happen?
No response
How can we reproduce it?
Convert a centos image by userspace convertor.
What is the version of your Accelerated Container Image?
accelerated-container-image: v1.0.2
overlaybd: v1.0.7
What is your OS environment?
Centos 8
Are you willing to submit PRs to fix it?
The text was updated successfully, but these errors were encountered: