reproducible_builds: ensure that `umask` doesn't affect the container build
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 25/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- docker, dockerfile
- Domain
- build-system, devops
Research direction
The issue names no specific file or test; inspect the Dockerfile entry that uses ADD root / and the root/usr tree. First reproduce a container build under a restrictive umask, then verify that the resulting image permissions are unchanged by the builder's umask.
Written by the indexing model from the issue text.
Description
- git doesn't track file permissions, thus
- git clone initiates the permissions according the user's umask value
- docker build just copies the files as-is into container
- especial problems are with
root/usrdirectory created byADD root /command, this affects the whole image (/usrdirectory might be unreadable)
In RPMs' specfiles, we explicitly set the permissions in %install phase (or by %attr in %files), though there's no such way in Dockerfile.
- Dominant language
- Shell
- Stars
- 25
- Forks
- 45
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from sclorg/container-common-scripts
-
sclorg/container-common-scripts#425 · 1 assignee ·
-
Difficulty 3/5 1-2 days Newbie friendliness 38/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
sclorg/container-common-scripts#332 · 1 reaction ·
-
sclorg/container-common-scripts#264 · 1 assignee ·
All issues in sclorg/container-common-scripts
Similar issues
-
Bob Shell support Openenhancement
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
-
tooling
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
openSUSE/python-rpm-macros#219 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
YunoHost-Apps/adguardhome_ynh#258 ·
-
steam-short-session-tracker: incorrect registry backup path resets settings during automatic repair Open
Difficulty 2/5 1-3 hours Newbie friendliness 80/100
ValveSoftware/SteamOS#2829 ·