MCR Rust Image - Ensure Correct Permissions - Breaks User-level Usage of `cargo build`

[CodeMan99]

devcontainer.json

// For format details, see https://aka.ms/devcontainer.json. For config options, see the
// README at: https://github.com/devcontainers/templates/tree/main/src/rust
{
	"name": "Rust",
	// Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
	"image": "mcr.microsoft.com/devcontainers/rust:0-1-bullseye",

	// Use 'mounts' to make the cargo cache persistent in a Docker Volume.
	// "mounts": [
	// 	{
	// 		"source": "devcontainer-cargo-cache-${devcontainerId}",
	// 		"target": "/usr/local/cargo",
	// 		"type": "volume"
	// 	}
	// ]

	// Use 'forwardPorts' to make a list of ports inside the container available locally.
	// "forwardPorts": [],

	// Use 'postCreateCommand' to run commands after the container is created.
	// "postCreateCommand": "rustc --version",

	// Configure tool-specific properties.
	"customizations": {
		"vscode": {
			"extensions": [
				"bierner.github-markdown-preview",
				"DavidAnson.vscode-markdownlint",
				"GitHub.vscode-github-actions"
			]
		}
	},

	// Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
	"remoteUser": "vscode",

	// Features to add to the dev container. More info: https://containers.dev/features.
	"features": {
		"ghcr.io/devcontainers/features/git:1": {},
		"ghcr.io/devcontainers/features/github-cli:1": {},
		"ghcr.io/dhoeric/features/oras:1": {},
		"ghcr.io/lee-orr/rusty-dev-containers/bacon:0": {},
		"ghcr.io/lee-orr/rusty-dev-containers/cargo-binstall:0": {},
		"ghcr.io/lee-orr/rusty-dev-containers/cargo-watch:0": {}
		// "ghcr.io/lee-orr/rusty-dev-containers/sscache:0": {}
	}
}

Broken Build

This is after re-building my devcontainer.

vscode ➜ /workspaces/devconf (main) $ cargo build
    Updating crates.io index
  Downloaded fnv v1.0.7
error: failed to download replaced source registry `crates-io`

Caused by:
  failed to open `/usr/local/cargo/registry/cache/index.crates.io-6f17d22bba15001f/fnv-1.0.7.crate`

Caused by:
  Permission denied (os error 13)
vscode ➜ /workspaces/devconf (main) $ ll /usr/local/cargo/ 
total 24K
drwxrwxrwx 1 root   root     4.0K Oct 20 23:44 bin
drwxr-sr-x 1 root   rustlang 4.0K Oct 20 23:42 binstall
-rw-rw-rw- 1 root   root      308 Jun  4 18:13 env
drwxr-sr-x 4 vscode rustlang 4.0K Oct 26 05:34 git
drwxr-sr-x 5 root   rustlang 4.0K Oct 20 23:42 registry

I am pretty sure that the registry folder should have write permission for the group.

[lee-orr]

Thanks for reporting this!

I will see if I can resolve it - but wanted to note that a known workaround is to use rust:bullseye instead of mcr.microsoft.com/devcontainers/rust:0-1-bullseye as the root image, until I get a chance figure it out.

[CodeMan99]

It's probably a matter of setting the permissions mask or substituting the group. Which is (umask 002; <command>) and sg rustlang <command> respectively where command is whatever creates the files in question.

[lee-orr]

Thanks for pointing me in a direction!

I don't have the capacity to get into this right now, but if you can resolve it before I can, I'll happily accept a PR

[CodeMan99]

After digging in some more it seems that the microsoft images are part of the problem.

[lee-orr]

Thanks for digging into this! I really appreciate it. At the time I set things up I didn't have a chance to get into detail with this particular issue, I just chose images that worked.

Did you open an issue upstream you can link here/refer me to? I'd like to keep track of that so that when upstream is resolved we can add the mcr images here.

[CodeMan99]

Did you open an issue upstream

Not yet. I will keep you in the loop when that is done.

[CodeMan99]

So I was being way too strict with my testing. Created PR #23 to hopefully solve this exact issue.

[CodeMan99]

Upstream issue opened: devcontainers/images#851

[CodeMan99]

@lee-orr Reminder to hit the release's Run workflow when you are ready.

[lee-orr]

Sorry for the delay! released