Uploaded image for project: 'OpenShift Virtualization'
  1. OpenShift Virtualization
  2. CNV-46725

CDI builder image's bazel binary is missing executable permissions for unprivilieged users

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Undefined Undefined
    • CNV v4.17.0
    • CNV v4.17.0
    • Storage Platform
    • None
    • 3
    • False
    • Hide

      None

      Show
      None
    • False
    • CNV v4.99.0.rhel9-1121
    • ---
    • ---
    • Storage Core Sprint 258, Storage Core Sprint 259
    • None

      Description of problem:

      bazel binary from latest CDI builder image is missing execution permissions for unprivileged users:

ls -l /usr/bin/bazel 
-rwxr--r--. 1 root root 51849045 Aug 16 08:43 /usr/bin/bazel

      Version-Release number of selected component (if applicable):

      CDI builder image: quay.io/kubevirt/kubevirt-cdi-bazel-builder:2408160841-626901083

      Steps to Reproduce:

      1. Create a Pod using latest CDI builder image on OpenShift with an unprivileged SCC
2. Try to compile the func tests: make build-functest

      Actual results:

      Since the Pod is using an arbitrary unprivileged user on OpenShift, the command is failing to execute bazel binary:

./hack/build/build-ginkgo.sh: line 10: /usr/bin/bazel: Permission denied

      Expected results:

      CDI builder image should be able to run as an unprivileged user.

              akalenyu Alex Kalenyuk
              dollierp@redhat.com Denis Ollier Pinas
              Natalie Gavrielov Natalie Gavrielov
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: