-
Notifications
You must be signed in to change notification settings - Fork 228
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
error: unpacking of archive failed on file /usr/bin/newgidmap;64f6dd7f: cpio: cap_set_file failed - Inappropriate ioctl for device #803
Comments
The newgidmap and newuidmap binaries need to have CAP_SETGID and CAP_SETUID respectively to work with user namespaces. Those capabilities are set at install time and they haven't been changed in a while. From my point of view this issue comes from the software package manager, that is unable to set those capabilities. |
I did a new test where the SETGID and SETUID are declared part of the SecurityContext of the serviceAccount but that fails too using dnf (= registry.access.redhat.com/ubi8/ubi) or microdnf (= registry.access.redhat.com/ubi8/ubi-minimal)
|
File capabilities are stored as extended attributes, so the filesystem where |
The Red Hat UBI8 or UBI9 image don't include the tools that you are asking to use to make a test. See list of packages available here: https://catalog.redhat.com/software/containers/ubi8/5c647760bed8bd28d0e38f9f?container-tabs=packages |
Issue
Installation of shadow-utils fails when it is executed using an ocp4's container
How to reproduce
The text was updated successfully, but these errors were encountered: