podman machine: image override files need user-write access · containers/podman#27576

(7 评论) (0 反应) (1 负责人)Go (31,686 star) (3,107 fork)batch import

Good First Issuekind/bugmachinetriaged

描述

Issue Description

While doing some testing today, I learned that at least for qemu machines, qemu-img requires user write access or we get an error. This is probably true for all providers but we need to check that.

❯ podman machine init --image builds/latest/x86_64/rhcos-10.1.20251017-0-qemu.x86_64.qcow2 test
Extracting compressed file: test-amd64.qcow2: done  
qemu-img: Could not open '/home/baude/.local/share/containers/podman/machine/qemu/test-amd64.qcow2': Could not open '/home/baude/.local/share/containers/podman/machine/qemu/test-amd64.qcow2': Permission denied
Error: resizing image: "exit status 1"

and

❯ ls -l builds/latest/x86_64/rhcos-10.1.20251017-0-qemu.x86_64.qcow2
-r--r--r--. 1 baude baude 1950744576 Nov 20 15:21 builds/latest/x86_64/rhcos-10.1.20251017-0-qemu.x86_64.qcow2

Steps to reproduce the issue

Steps to reproduce the issue 1. 2. 3.

Describe the results you received

Describe the results you expected

podman info output

If you are unable to run podman info for any reason, please provide the podman version, operating system and its version and the architecture you are running.

Podman in a container

Privileged Or Rootless

None

Upstream Latest Release

Yes

Additional environment details

Additional information

Additional information like issue happens only occasionally or issue happens with a particular architecture or on a particular setting

贡献者指南

技术栈: go
领域: cli
议题类型: bug
难度: 3
预计时间: 1-3 hours
活动状态: blocked
清晰度: clear
前置要求: Go basicsUnderstanding of file permissionsPodman machine concepts
新手友好度: 25
研究方向: Investigate how podman machine handles image override files, specifically in the qemu provider. The issue is that qemu img requires user write access, so the file permission should be changed before resizing. Look at the code in pkg/machine/qemu to see where the file is opened or copied, and ensure that the file is made writable if necessary. Also check other providers (e.g., HyperV, WSL) to see if they have similar requirements.