[Bug 1690046] Review Request: Charliecloud - unprivileged container runtime

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.redhat.com/show_bug.cgi?id=1690046



--- Comment #27 from jogas@xxxxxxxx ---
(In reply to Dave Love from comment #25)
> More fundamentally, I tried the tests according to the instructions (in a
> centos7.1810 x86_64 vm).
> make test-run fails, with several other errors after this:
> 
>  - ch-run as root: run image (skipped: standard scope)
>  [sudo] password for vagrant: on-zero gid refused                       
> 74/120
>  ✗ ch-run as root: root with non-zero gid refused
>    (in test file run/ch-run_escalated.bats, line 70)
>      `[[ $output = *'error ('* ]]' failed
>    Sorry, user vagrant is not allowed to execute '/usr/bin/ch-run -v
> --version' as root:vagrant on localhost.localdomain.
> 
> (I have password-less sudo in the vm.)

This particular error occurs because the user who runs the test suite needs
to be a member of two groups and has a sudoer config that allows the secondary
group to sudo without a password. This requirement isn't covered very well
in section 2.2.2 (https://hpc.github.io/charliecloud/test.html#run).

The error message doesn't convey the issue. I've seen this error trip people up
enough times now to realize we need to file a bug; this test should skip if
the group requirements aren't met (bug filed:
https://github.com/hpc/charliecloud/issues/485).

You mentioned you had more errors after this one, would you mind posting
them? There could be subtle things like this I should mention in the test
readme.


Best,
Jordan

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
_______________________________________________
package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite Conditions]     [KDE Users]

  Powered by Linux