128 Star 0 Fork 34

src-openEuler / podman

 / 详情

umask设置为0077时,podman拉起postgres容器失败

已完成
缺陷
创建于  
2022-03-16 20:44

【标题描述】umask设置为0077时,podman拉起postgres容器失败,显示docker-entrypoint.sh执行无权限(需要注意的是使用docker-engine执行本动作运行正常)
【环境信息】
虚拟机:
软件信息:
1)openEuler-22.03-LTS
2)5.10.0-54.0.0.27.oe1
3)podman-0.10.1-11.oe1.x86_64
如果有特殊组网,请提供网络拓扑图
【问题复现步骤】
1.安装podman podman-docker
2.配置/etc/containers/registries.conf文件:
[registries.search]
registries = ['docker.io']

[registries.insecure]
registries = []

[registries.block]
registries = []

3.docker pull postgres:alpine
4.umask 0077(默认umask值为0022)
5.docker run -ti --name postgres -e POSTGRES_PASSWORD=secret postgres:alpine
出现概率:必现
【预期结果】
容器成功拉起,docker ps -a显示postgres容器Up
【实际结果】
容器拉起失败,docker ps -a显示postgres容器状态为Exited (1) 7 minutes ago
【附件信息】
[root@localhost ~]# umask
0022
[root@localhost ~]# docker run -ti --name postgres -e POSTGRES_PASSWORD=secret -d postgres:alpine
Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg.
82c7cc30c5346845ea1cb02b06b6d16a200b1ac587f8cfd47b2b5607cdf9ef66
[root@localhost ~]# umask 0077
[root@localhost ~]# docker run -ti --name postgres1 -e POSTGRES_PASSWORD=secret postgres:alpine
Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg.
su-exec: /usr/local/bin/docker-entrypoint.sh: Permission denied
[root@localhost ~]# cat /etc/openEuler-latest
openeulerversion=openEuler-22.03-LTS
compiletime=2022-02-13-12-01-39
gccversion=10.3.1-20210914.5.oe1
kernelversion=5.10.0-54.0.0.27.oe1
openjdkversion=1.8.0.312.b07-11.oe1
[root@localhost ~]# docker ps -a
Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg.
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES IS INFRA
f17b7e322c74 docker.io/library/postgres:alpine docker-entrypoint.s... 49 seconds ago Exited (1) 48 seconds ago postgres1 false
82c7cc30c534 docker.io/library/postgres:alpine docker-entrypoint.s... About a minute ago Up About a minute ago postgres false

评论 (3)

chenmaodong 创建了缺陷

Hi chenmaodong, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at Here.
If you have any questions, please contact the SIG: sig-CloudNative, and any of the maintainers: @weibaohui , @biannm , @pixiake , @haozi007 , @haomintsai , @yangzhao_kl , @Jianmin

openeuler-ci-bot 添加了
 
sig/sig-CloudNative
标签
chenmaodong 优先级设置为主要
ltx 负责人设置为jingxiaolu
jingxiaolu 负责人jingxiaolu 修改为未设置
haozi007 任务状态待办的 修改为已挂起

@haozi007 issue被设置为挂起,请问是有什么暂时的结论了么?

登录 后才可以发表评论

状态
负责人
项目
里程碑
Pull Requests
关联的 Pull Requests 被合并后可能会关闭此 issue
分支
开始日期   -   截止日期
-
置顶选项
优先级
预计工期 (小时)
参与者(2)
5329419 openeuler ci bot 1632792936
1
https://gitee.com/src-openeuler/podman.git
git@gitee.com:src-openeuler/podman.git
src-openeuler
podman
podman

搜索帮助