[Libguestfs] [libnbd PATCH v4 0/2] lib/utils: introduce async-signal-safe execvpe()

[Laszlo Ersek]

On 3/22/23 12:42, Daniel P. Berrangé wrote:
> On Wed, Mar 22, 2023 at 12:13:49PM +0100, Laszlo Ersek wrote:
>> On 3/22/23 11:42, Laszlo Ersek wrote:
>>
>>> Now the "podman build -f ci/containers/alpine-edge.Dockerfile -t
>>> libnbd-alpine-edge" command is failing with a different error message --
>>> the download completes, but the internal relinking etc fails due to
>>> permission errors, which I don't understand. I've asked Martin for comments.
>>>
>>> Meanwhile, your other email (= just download the prebuilt container from
>>> gitlab) could help!
>>
>> Unfortunately, I got the same failure:
>>
>> podman run -it --rm --userns=keep-id -v .:/repo:z -w /repo \
>>     registry.gitlab.com/nbdkit/libnbd/ci-alpine-edge:latest \
>>     bash
>>
>>> Trying to pull registry.gitlab.com/nbdkit/libnbd/ci-alpine-edge:latest...
>>> Getting image source signatures
>>> Copying blob 88ecf269dec3 done
>>> Copying blob 0ded2f83af0e done
>>> Copying config a3b4bffb18 done
>>> Writing manifest to image destination
>>> Storing signatures
>>> Error relocating /usr/lib/libreadline.so.8: RELRO protection failed: Permission denied
>>> Error relocating /lib/ld-musl-x86_64.so.1: RELRO protection failed: Permission denied
>>> Error relocating /usr/lib/libncursesw.so.6: RELRO protection failed: Permission denied
>>> Error relocating /bin/bash: RELRO protection failed: Permission denied
> 
> This looks relevant:
> 
>   https://bugzilla.redhat.com/show_bug.cgi?id=2019324
> 
> and suggests
> 
>   restorecon -R ~/.local/share/containers/storage/overlay*

Yes, I've tried that (via some other links); it does not help. (In the
first place, I started with a nonexistent ~/.local/share/containers
directory, so I'm unsure why I'm responsible for setting the labels on
new contents... but anyway, I tried it and it does not help.) I'll check
with setenforce 0 next...

Thanks!
Laszlo