On 3/22/23 12:42, Daniel P. Berrangé wrote:
On Wed, Mar 22, 2023 at 12:13:49PM +0100, Laszlo Ersek wrote:
> On 3/22/23 11:42, Laszlo Ersek wrote:
>
>> Now the "podman build -f ci/containers/alpine-edge.Dockerfile -t
>> libnbd-alpine-edge" command is failing with a different error message --
>> the download completes, but the internal relinking etc fails due to
>> permission errors, which I don't understand. I've asked Martin for
comments.
>>
>> Meanwhile, your other email (= just download the prebuilt container from
>> gitlab) could help!
>
> Unfortunately, I got the same failure:
>
> podman run -it --rm --userns=keep-id -v .:/repo:z -w /repo \
>
registry.gitlab.com/nbdkit/libnbd/ci-alpine-edge:latest \
> bash
>
>> Trying to pull
registry.gitlab.com/nbdkit/libnbd/ci-alpine-edge:latest...
>> Getting image source signatures
>> Copying blob 88ecf269dec3 done
>> Copying blob 0ded2f83af0e done
>> Copying config a3b4bffb18 done
>> Writing manifest to image destination
>> Storing signatures
>> Error relocating /usr/lib/libreadline.so.8: RELRO protection failed: Permission
denied
>> Error relocating /lib/ld-musl-x86_64.so.1: RELRO protection failed: Permission
denied
>> Error relocating /usr/lib/libncursesw.so.6: RELRO protection failed: Permission
denied
>> Error relocating /bin/bash: RELRO protection failed: Permission denied
This looks relevant:
https://bugzilla.redhat.com/show_bug.cgi?id=2019324
and suggests
restorecon -R ~/.local/share/containers/storage/overlay*
Yes, I've tried that (via some other links); it does not help. (In the
first place, I started with a nonexistent ~/.local/share/containers
directory, so I'm unsure why I'm responsible for setting the labels on
new contents... but anyway, I tried it and it does not help.) I'll check
with setenforce 0 next...
Thanks!
Laszlo