Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Image build not including rechunk changes #2088

Open
tbelway opened this issue Jan 7, 2025 · 0 comments
Open

Image build not including rechunk changes #2088

tbelway opened this issue Jan 7, 2025 · 0 comments
Labels
bug Something isn't working upstream

Comments

@tbelway
Copy link

tbelway commented Jan 7, 2025

Describe the bug

It looks like rechunk is not applying the appropriate changes to the bazzite image, resulting in retained sssd failures.

hhd-dev/rechunk#9
Which should fix:
#2030

What did you expect to happen?

Changes applied in rechunk should be used in bazzite image generation.

Output of rpm-ostree status

N/A

Hardware

N/A

Extra information or context

sssd capabilities have changed. Please see upstream: https://sssd.io/release-notes/sssd-2.10.1.html

Capabilities in current image:

getcap /usr/libexec/sssd/*
/usr/libexec/sssd/krb5_child cap_chown,cap_dac_override,cap_setgid,cap_setuid=ep
/usr/libexec/sssd/ldap_child cap_chown,cap_dac_override,cap_setgid,cap_setuid=ep
/usr/libexec/sssd/selinux_child cap_setgid,cap_setuid=p
/usr/libexec/sssd/sssd_pam cap_dac_read_search=p

Expected caps:

/usr/libexec/sssd/krb5_child cap_dac_read_search,cap_setgid,cap_setuid=p
/usr/libexec/sssd/ldap_child cap_dac_read_search=p
/usr/libexec/sssd/selinux_child cap_setgid,cap_setuid=p 
/usr/libexec/sssd/sssd_pam cap_dac_read_search=p
@dosubot dosubot bot added bug Something isn't working upstream labels Jan 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working upstream
Projects
None yet
Development

No branches or pull requests

1 participant