umask设置为0077时，podman拉起postgres容器失败

【标题描述】umask设置为0077时，podman拉起postgres容器失败，显示docker-entrypoint.sh执行无权限（需要注意的是使用docker-engine执行本动作运行正常）
【环境信息】
虚拟机：
软件信息：
1）openEuler-22.03-LTS
2）5.10.0-54.0.0.27.oe1
3）podman-0.10.1-11.oe1.x86_64
如果有特殊组网，请提供网络拓扑图
【问题复现步骤】
1.安装podman podman-docker
2.配置/etc/containers/registries.conf文件：
    [registries.search]
    registries = ['docker.io']

[registries.insecure]
    registries = []

[registries.block]
    registries = []
3.docker pull postgres:alpine
4.umask 0077（默认umask值为0022）
5.docker run -ti --name postgres -e POSTGRES_PASSWORD=secret   postgres:alpine
出现概率：必现
【预期结果】
容器成功拉起，docker ps -a显示postgres容器Up
【实际结果】
容器拉起失败，docker ps -a显示postgres容器状态为Exited (1) 7 minutes ago
【附件信息】
[root@localhost ~]# umask
0022
[root@localhost ~]# docker run -ti --name postgres -e POSTGRES_PASSWORD=secret -d  postgres:alpine
Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg.
82c7cc30c5346845ea1cb02b06b6d16a200b1ac587f8cfd47b2b5607cdf9ef66
[root@localhost ~]# umask 0077
[root@localhost ~]# docker run -ti --name postgres1 -e POSTGRES_PASSWORD=secret   postgres:alpine
Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg.
su-exec: /usr/local/bin/docker-entrypoint.sh: Permission denied
[root@localhost ~]# cat /etc/openEuler-latest
openeulerversion=openEuler-22.03-LTS
compiletime=2022-02-13-12-01-39
gccversion=10.3.1-20210914.5.oe1
kernelversion=5.10.0-54.0.0.27.oe1
openjdkversion=1.8.0.312.b07-11.oe1
[root@localhost ~]# docker ps -a
Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg.
CONTAINER ID   IMAGE                               COMMAND                  CREATED              STATUS                      PORTS   NAMES       IS INFRA
f17b7e322c74   docker.io/library/postgres:alpine   docker-entrypoint.s...   49 seconds ago       Exited (1) 48 seconds ago           postgres1   false
82c7cc30c534   docker.io/library/postgres:alpine   docker-entrypoint.s...   About a minute ago   Up About a minute ago               postgres    false

src-openEuler/podman
关闭

内容风险标识

评论 (3)

src-openEuler/podman关闭 .gitee-modal { width: 500px !important; }

内容风险标识