Description of problem:
Normal use failed to run the oc-mirror command with permission denied
Version-Release number of selected component (if applicable):
./oc-mirror.rhel8 version WARNING: This version information is deprecated and will be replaced with the output from --short. Use --output=yaml|json to get the full version. Client Version: version.Info{Major:"", Minor:"", GitVersion:"4.18.0-202410251041.p0.g95f0611.assembly.stream.el9-95f0611", GitCommit:"95f0611c1dc9584a4a9e857912b9eaa539234bbc", GitTreeState:"clean", BuildDate:"2024-10-25T11:28:19Z", GoVersion:"go1.22.7 (Red Hat 1.22.7-1.module+el8.10.0+22325+dc584f75) X:strictfipsruntime", Compiler:"gc", Platform:"linux/amd64"}
How reproducible:
Always
Steps to Reproduce:
1. download latest oc-mirror from 4.18 payload; 2. use `adduser` and `passwd` to add a new system user; 3. switch to new user, run oc-mirror command
Actual results:
3. hit privilege issue for normal user: ./oc-mirror.rhel8 version ERRO[0000] opening /proc/1411217/setgroups: open /proc/1411217/setgroups: permission denied ERRO[0000] (Unable to determine exit status) Error: error opening setgroups: open /proc/1411217/setgroups: permission denied
Expected results:
3. no permission issue.
Additional info:
compared with 4.17 oc-mirror, no such issue : [yinzhou@preserve-fedora-yinzhou tmp]$ ./oc-mirror.rhel8 version WARNING: This version information is deprecated and will be replaced with the output from --short. Use --output=yaml|json to get the full version. Client Version: version.Info{Major:"", Minor:"", GitVersion:"4.17.0-202410241236.p0.g07714b7.assembly.stream.el9-07714b7", GitCommit:"07714b7c836ec3ad1b776f25b44c3b2c2f083aa2", GitTreeState:"clean", BuildDate:"2024-10-25T04:45:05Z", GoVersion:"go1.22.7 (Red Hat 1.22.7-1.module+el8.10.0+22325+dc584f75) X:strictfipsruntime", Compiler:"gc", Platform:"linux/amd64"} [yinzhou@preserve-fedora-yinzhou tmp]$ ./oc-mirror.rhel8.18 version Error: error opening setgroups: open /proc/362007/setgroups: permission denied ERRO[0000] opening /proc/362007/setgroups: open /proc/362007/setgroups: permission denied
- clones
-
OCPBUGS-43831 The catalog rendered images created by v1 can't be aware of v2 and will remain
- New
- is cloned by
-
OCPBUGS-44033 Failed to mirror ocp payload when use digest not the tag
- New
-
OCPBUGS-44222 `--secure-policy=false` not work when use --alpha-ctlg-filter
- New
- is related to
-
CLID-256 Rebuild catalog refactorings
- In Progress