nlewo / nix2container

An archive-less dockerTools.buildImage implementation
Apache License 2.0
501 stars 45 forks source link

Fix failing Skopeo pullImage with `/run/containers` not readable #122

Open norpol opened 6 months ago

norpol commented 6 months ago

I've just debugged for someone why Skopeo fails with reading JSON file "/run/containers/1001/auth.json": open /run/containers/1001/auth.json: permission denied inside GitHub actions.

I think that is something also true for nix2container.pullImage, though I'm not sure how/where you would like me to add this change. Needs probably some further investigation.

To test this run mkdir /run/containers; chmod 000 /run/containers and see Skopeo pull failing.

https://github.com/NixOS/nixpkgs/pull/294849