Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Image build not including rechunk changes #2088

Closed
tbelway opened this issue Jan 7, 2025 · 1 comment
Closed

Image build not including rechunk changes #2088

tbelway opened this issue Jan 7, 2025 · 1 comment
Labels
bug Something isn't working upstream

Comments

@tbelway
Copy link

tbelway commented Jan 7, 2025

Describe the bug

It looks like rechunk is not applying the appropriate changes to the bazzite image, resulting in retained sssd failures.

hhd-dev/rechunk#9
Which should fix:
#2030

What did you expect to happen?

Changes applied in rechunk should be used in bazzite image generation.

Output of rpm-ostree status

N/A

Hardware

N/A

Extra information or context

sssd capabilities have changed. Please see upstream: https://sssd.io/release-notes/sssd-2.10.1.html

Capabilities in current image:

getcap /usr/libexec/sssd/*
/usr/libexec/sssd/krb5_child cap_chown,cap_dac_override,cap_setgid,cap_setuid=ep
/usr/libexec/sssd/ldap_child cap_chown,cap_dac_override,cap_setgid,cap_setuid=ep
/usr/libexec/sssd/selinux_child cap_setgid,cap_setuid=p
/usr/libexec/sssd/sssd_pam cap_dac_read_search=p

Expected caps:

/usr/libexec/sssd/krb5_child cap_dac_read_search,cap_setgid,cap_setuid=p
/usr/libexec/sssd/ldap_child cap_dac_read_search=p
/usr/libexec/sssd/selinux_child cap_setgid,cap_setuid=p 
/usr/libexec/sssd/sssd_pam cap_dac_read_search=p
@dosubot dosubot bot added bug Something isn't working upstream labels Jan 7, 2025
@tbelway
Copy link
Author

tbelway commented Jan 21, 2025

Latest testing and latest stable both address this issue.

@tbelway tbelway closed this as completed Jan 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working upstream
Projects
None yet
Development

No branches or pull requests

1 participant