Skip to content

container: no enable does not stop container #1105

@mattiaswal

Description

@mattiaswal

Current Behavior

admin@failed-00-00-00:/config/container/doom/> no enabled
admin@failed-00-00-00:/config/container/doom/> leave
admin@failed-00-00-00:/>

Doom continues on display

then:
admin@failed-00-00-00:/config/container/doom/> no privileged
admin@failed-00-00-00:/config/container/doom/> leave

container stops

Expected Behavior

Container stops when disabled

Steps To Reproduce

This is seen when working on DSI support on a RPI4 running standard DSI touchscreen

statup.cfg

{
  "ieee802-dot1ab-lldp:lldp": {
    "infix-lldp:enabled": true
  },
  "ietf-interfaces:interfaces": {
    "interface": [
      {
        "name": "eth0",
        "type": "infix-if-type:ethernet",
        "ietf-ip:ipv6": {}
      },
      {
        "name": "lo",
        "type": "infix-if-type:loopback",
        "ietf-ip:ipv4": {
          "address": [
            {
              "ip": "127.0.0.1",
              "prefix-length": 8
            }
          ]
        },
        "ietf-ip:ipv6": {
          "address": [
            {
              "ip": "::1",
              "prefix-length": 128
            }
          ]
        }
      },
      {
        "name": "wifi0",
        "type": "infix-if-type:wifi",
        "ietf-ip:ipv6": {},
        "infix-interfaces:wifi": {
          "country-code": "SE",
          "encryption": "auto",
          "ssid": "laserlanet",
          "secret": "hemma"
        }
      }
    ]
  },
  "ietf-keystore:keystore": {
    "asymmetric-keys": {
      "asymmetric-key": [
        {
          "name": "genkey",
          "public-key-format": "infix-crypto-types:ssh-public-key-format",
          "public-key": "MIIBCgKCAQEAvUU6wdzmJpxy+1dvCfNKvzGHirup2vJU9WgdLMsBRnVDLocVs65ePJ8HU4fdS8V0LGOOTRgUanx6o36qWXPjf+1mHcthH2fHe86Qo37uSdvXIFrepqyzWWv3lFjQn2Ee7+ias6eHXrmwZeFqbLdie97u+eyO0+ASIYqfPLqaBuFb5Z9t5iKyLQIa8OYuz6zuTfCX+rxVMTi42PIkQ5Oy0/WKvtu039a7BvNnH3+NAgIOxMuPtPZeY3U5o77wdy1jTBhaB8yvgz9eKeyLAzj0xQ1NYtfWkb9uxS5GRYbAJNPKxnL5il4q4r4jXYGVc31CR8etF7+DAgbuCLEZHkzMHwIDAQAB",
          "private-key-format": "infix-crypto-types:rsa-private-key-format",
          "cleartext-private-key": "MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQC9RTrB3OYmnHL7V28J80q/MYeKu6na8lT1aB0sywFGdUMuhxWzrl48nwdTh91LxXQsY45NGBRqfHqjfqpZc+N/7WYdy2EfZ8d7zpCjfu5J29cgWt6mrLNZa/eUWNCfYR7v6Jqzp4deubBl4Wpst2J73u757I7T4BIhip88upoG4Vvln23mIrItAhrw5i7PrO5N8Jf6vFUxOLjY8iRDk7LT9Yq+27Tf1rsG82cff40CAg7Ey4+09l5jdTmjvvB3LWNMGFoHzK+DP14p7IsDOPTFDU1i19aRv27FLkZFhsAk08rGcvmKXiriviNdgZVzfUJHx60Xv4MCBu4IsRkeTMwfAgMBAAECggEAC06e+cl/PhlpUWI44enL4CczRPdF1mOeN0tFpcgM7/PZSx2mIVOp7Nx9SqD/LxqTgIOopSrYUWSMORBgoeneQEEH1e6MlZym7LYyYbxglz8iKcDhtHGG8tW4wBFlZKpo5WE4PVSlUnZ127Fs/EizgkcXJw1Hv2I0AxbSeBeqCv4UkGyOHV6yTkikX6DQE0E9vdMebnyAcDJm8R0cWt/EcMHszpw9j5N7c8iZoevXGUoJLp3ERHqo/xxf4DblvOGMeNusDn8Sgpae7fCcIl2MQlQKKIDgV3TfMkTWogxqUyqsRURujZYn8HxPDONMdg4Btapaaz0vbgkFEVqCJmcjhQKBgQDl4KsfGgsjIpKP+3jSnM41DDVQ67vFcTEiWDBu9qVaDfTVh1qYEgEsW5wkM9jdLrZDdlSVdyBaSUyp9h/JVc53LgXYyLsiFYEmgyReaeEGlS4BdVK0t5hmAIHuCHpMpP2ZAuiO/WG/gbl0Uxv0n3zakjcrJMXTWWoOkCFvdy5jnQKBgQDSx0OkS1TXiB7JGYbXu1CBOd3I21oGFfBDmhS47jAqSX5M/BC+spft317iZTvAX6IvVRc8mf9fzWFjHdWJ1LcNswHjblfwpC/clpd3V2di1GHn6Zqd8mpWzngxGS5opQShwVPjASPLSnjQ8cLSilZKfAaBSz1Tg/LVr3KcyEFX6wKBgDxgVvGTSIuQ4Ae7F8/RaYObUkGPuMCx6yLHIOl0FJfjhIO0ykGYsQAyi38isvnc8/giEzMyl6e/Csi1IUIjLFg3GUgH6MaZ+VLhLOMzUewFsJCnfPKEKh3YUkfvqBeLWiQfFG/B8zN2YfxAe94zKXrK3nyRavgIywdKKc358pAtAoGAIE2htEBHVHDsJu3emJmAkQ2JTAsyFNSv6exnWKBIiXKSBMJs3o0Ic9BT/mZ9bdI6TP7BfOwtE0Wqs0ITQ/hxxYu1smFq4NqI60m5FPU0RxU9nAlVRPeuDHfAO+YcErWXrCKw9I1sKu/S7FLhBNtmtiuj45TgZThHszAcZKLcQNkCgYAhzZqnTBvz76pgyBS1bbNzDk4odhvUVrgQSiKqHGpP12jn4/hYBFmcMRRzpFPMHPvmZvtrpxnyHGbRhyh2c5Fo/tA4c1m3rLFOP6Y3xOxNs95YDzV22pmqpNHakwjZEbvoIVf0NO6ilrJm8cMfpm4A/RV+2JTRyy5gyeuq5fMjFQ=="
        }
      ]
    },
    "symmetric-keys": {
      "symmetric-key": [
        {
          "name": "hemma",
          "infix-keystore:cleartext-key": "xxxxxxxxxxxxxxxxxx",
          "infix-keystore:key-format": "infix-crypto-types:wifi-preshared-key-format"
        }
      ]
    }
  },
  "ietf-netconf-acm:nacm": {
    "enable-nacm": true,
    "groups": {
      "group": [
        {
          "name": "admin",
          "user-name": [
            "admin"
          ]
        }
      ]
    },
    "rule-list": [
      {
        "name": "admin-acl",
        "group": [
          "admin"
        ],
        "rule": [
          {
            "name": "permit-all",
            "module-name": "*",
            "access-operations": "*",
            "action": "permit",
            "comment": "Allow 'admin' group complete access to all operations and data."
          }
        ]
      },
      {
        "name": "default-deny-all",
        "group": [
          "*"
        ],
        "rule": [
          {
            "name": "deny-password-read",
            "module-name": "ietf-system",
            "path": "/ietf-system:system/authentication/user/password",
            "access-operations": "*",
            "action": "deny"
          }
        ]
      }
    ]
  },
  "ietf-netconf-server:netconf-server": {
    "listen": {
      "endpoints": {
        "endpoint": [
          {
            "name": "default-ssh",
            "ssh": {
              "tcp-server-parameters": {
                "local-address": "::"
              },
              "ssh-server-parameters": {
                "server-identity": {
                  "host-key": [
                    {
                      "name": "default-key",
                      "public-key": {
                        "central-keystore-reference": "genkey"
                      }
                    }
                  ]
                }
              }
            }
          }
        ]
      }
    }
  },
  "ietf-system:system": {
    "hostname": "failed-00-00-00",
    "authentication": {
      "user": [
        {
          "name": "admin",
          "password": "$factory$",
          "infix-system:shell": "bash"
        }
      ]
    }
  },
  "infix-containers:containers": {
    "container": [
      {
        "name": "doom",
        "enabled": true,
        "image": "docker://mattiaswal/alpine-doom:latest",
        "privileged": true,
        "mount": [
          {
            "name": "udev",
            "type": "bind",
            "source": "/run/udev",
            "target": "/run/udev"
          },
          {
            "name": "xorg.conf",
            "content": "U2VjdGlvbiAiU2VydmVyTGF5b3V0IgogICAgSWRlbnRpZmllciAiRGVmYXVsdExheW91dCIKICAgIFNjcmVlbiAwICJTY3JlZW4wIiAwIDAKRW5kU2VjdGlvbgpTZWN0aW9uICJEZXZpY2UiCiAgICBJZGVudGlmaWVyICJpTVggTENEIgogICAgRHJpdmVyICJtb2Rlc2V0dGluZyIKICAgIEJ1c0lEICJwbGF0Zm9ybTozMmZjNjAwMC5kaXNwbGF5LWNvbnRyb2xsZXIiCiAgICBPcHRpb24gImttc2RldiIgIi9kZXYvZHJpL2NhcmQxIgpFbmRTZWN0aW9uCgpTZWN0aW9uICJTY3JlZW4iCiAgICBJZGVudGlmaWVyICJTY3JlZW4wIgogICAgRGV2aWNlICJpTVggTENEIgogICAgRGVmYXVsdERlcHRoIDI0CkVuZFNlY3Rpb24KCg==",
            "target": "/etc/X11/xorg.conf"
          }
        ],
        "volume": [
          {
            "name": "var",
            "target": "/var"
          }
        ]
      }
    ]
  },
  "infix-dhcp-client:dhcp-client": {
    "client-if": [
      {
        "if-name": "wifi0",
        "option": [
          {
            "id": "ntp-server"
          },
          {
            "id": "broadcast"
          },
          {
            "id": "domain"
          },
          {
            "id": "hostname"
          },
          {
            "id": "dns-server"
          },
          {
            "id": "router"
          },
          {
            "id": "netmask"
          }
        ]
      }
    ]
  },
  "infix-meta:meta": {
    "version": "1.5"
  },
  "infix-services:mdns": {
    "enabled": true
  },
  "infix-services:ssh": {
    "enabled": true,
    "hostkey": [
      "genkey"
    ],
    "listen": [
      {
        "name": "ipv4",
        "address": "0.0.0.0",
        "port": 22
      },
      {
        "name": "ipv6",
        "address": "::",
        "port": 22
      }
    ]
  },
  "infix-services:web": {
    "enabled": true,
    "restconf": {
      "enabled": true
    }
  }
}

Additional information

No response

Metadata

Metadata

Assignees

Labels

cn:styxCommon Name: Styx ProjectenhancementNew feature or request

Type

No type

Projects

Status

Done

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions