reproducible_builds: ensure that `umask` doesn't affect the container build
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 25/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- docker, dockerfile
- Domain
- build-system, devops
Research direction
The issue names no specific file or test; inspect the Dockerfile entry that uses ADD root / and the root/usr tree. First reproduce a container build under a restrictive umask, then verify that the resulting image permissions are unchanged by the builder's umask.
Written by the indexing model from the issue text.
Description
- git doesn't track file permissions, thus
- git clone initiates the permissions according the user's umask value
- docker build just copies the files as-is into container
- especial problems are with
root/usrdirectory created byADD root /command, this affects the whole image (/usrdirectory might be unreadable)
In RPMs' specfiles, we explicitly set the permissions in %install phase (or by %attr in %files), though there's no such way in Dockerfile.
- Dominant language
- Shell
- Stars
- 25
- Forks
- 45
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from sclorg/container-common-scripts
-
sclorg/container-common-scripts#425 · 1 assignee ·
-
Difficulty 3/5 1-2 days Newbie friendliness 38/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
sclorg/container-common-scripts#332 · 1 reaction ·
-
sclorg/container-common-scripts#264 · 1 assignee ·
All issues in sclorg/container-common-scripts
Similar issues
-
Update Vish to 1.1.5 Openpackage-update
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
oSoWoSo/vOid_Community_repOsitory#144 · 1 comment ·
-
help wanted new command
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
tldr-pages/tldr#24151 ·
-
PacReq: Rune IDE Openpackage request
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
pacstall/pacstall-programs#9402 ·
-
[BUG] ci: the first prefetch-images.sh call runs before shard.txt exists, so it is always a no-op Openbug github-actions
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
-
update-request
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
msys2/MINGW-packages#31768 ·