Description of problem:
Normal use failed to run the oc-mirror command with permission denied
Version-Release number of selected component (if applicable):
./oc-mirror.rhel8 version
WARNING: This version information is deprecated and will be replaced with the output from --short. Use --output=yaml|json to get the full version.
Client Version: version.Info{Major:"", Minor:"", GitVersion:"4.18.0-202410251041.p0.g95f0611.assembly.stream.el9-95f0611", GitCommit:"95f0611c1dc9584a4a9e857912b9eaa539234bbc", GitTreeState:"clean", BuildDate:"2024-10-25T11:28:19Z", GoVersion:"go1.22.7 (Red Hat 1.22.7-1.module+el8.10.0+22325+dc584f75) X:strictfipsruntime", Compiler:"gc", Platform:"linux/amd64"}
How reproducible:
Always
Steps to Reproduce:
1. download latest oc-mirror from 4.18 payload; 2. use `adduser` and `passwd` to add a new system user; 3. switch to new user, run oc-mirror command
Actual results:
3. hit privilege issue for normal user: ./oc-mirror.rhel8 version ERRO[0000] opening /proc/1411217/setgroups: open /proc/1411217/setgroups: permission denied ERRO[0000] (Unable to determine exit status) Error: error opening setgroups: open /proc/1411217/setgroups: permission denied
Expected results:
3. no permission issue.
Additional info:
compared with 4.17 oc-mirror, no such issue :
[yinzhou@preserve-fedora-yinzhou tmp]$ ./oc-mirror.rhel8 version
WARNING: This version information is deprecated and will be replaced with the output from --short. Use --output=yaml|json to get the full version.
Client Version: version.Info{Major:"", Minor:"", GitVersion:"4.17.0-202410241236.p0.g07714b7.assembly.stream.el9-07714b7", GitCommit:"07714b7c836ec3ad1b776f25b44c3b2c2f083aa2", GitTreeState:"clean", BuildDate:"2024-10-25T04:45:05Z", GoVersion:"go1.22.7 (Red Hat 1.22.7-1.module+el8.10.0+22325+dc584f75) X:strictfipsruntime", Compiler:"gc", Platform:"linux/amd64"}
[yinzhou@preserve-fedora-yinzhou tmp]$ ./oc-mirror.rhel8.18 version
Error: error opening setgroups: open /proc/362007/setgroups: permission denied
ERRO[0000] opening /proc/362007/setgroups: open /proc/362007/setgroups: permission denied
- clones
-
OCPBUGS-43831 The catalog rendered images created by v1 can't be aware of v2 and will remain
-
- ASSIGNED
-
- is caused by
-
CLID-199 As a oc-mirror user, I would like mirrored operator catalogs to reflect the mirrored operators only
-
- Dev Complete
-
- is cloned by
-
-
- Closed
-
