openshift-ci-robot
commented
5 months ago @jianlinliu: This pull request references OCPQE-22684 which is a valid jira issue.
In response to [this](https://github.com/openshift/verification-tests/pull/3615):
>Since https://github.com/openshift/verification-tests/pull/3613, several cucushift-upgrade prow ci steps hit such issues:
>```
>Extracting oc
>error: reading registries.conf.d: lstat /opt/app-root/src/.config/containers/registries.conf.d: permission denied
>```
>Manually reproduce it locally.
>```
>$ podman run --rm -ti --entrypoint /bin/bash --user 1001:1001 registry.ci.openshift.org/ci/verification-tests:latest
>bash-4.4$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.16.0-rc.3-x86_64
>error: reading registries.conf.d: lstat /opt/app-root/src/.config/containers/registries.conf.d: permission denied
>bash-4.4$ ls .config/
>ls: cannot open directory '.config/': Permission denied
>bash-4.4$ ls -ld .config
>drwx------. 3 root root 25 Jun 11 09:34 .config
>```
>If run the container using root user, will not hit such issue, but in prow ci build farm, the containers using the image is not running as root user.
>
>Per https://github.com/containers/image/blob/main/docs/containers-registries.conf.d.5.md#configuration-precedence, once `/etc/containers/registries.conf` exists, the conf files in `$HOME/.config/containers/registries.conf.d` are being loaded, so the permission issue happened. The fix is removing `containers-common` package to ensure `/etc/containers/registries.conf` not installed.
Instructions for interacting with me using PR comments are available [here](https://prow.ci.openshift.org/command-help?repo=openshift%2Fverification-tests). If you have questions or suggestions related to my behavior, please file an issue against the [openshift-eng/jira-lifecycle-plugin](https://github.com/openshift-eng/jira-lifecycle-plugin/issues/new) repository.
liangxia
jianlinliu
openshift-ci[bot]
Since https://github.com/openshift/verification-tests/pull/3613, several cucushift-upgrade prow ci steps hit such issues:
Manually reproduce it locally.
If run the container using root user, will not hit such issue, but in prow ci build farm, the containers using the image is not running as root user.
Per https://github.com/containers/image/blob/main/docs/containers-registries.conf.d.5.md#configuration-precedence, once
/etc/containers/registries.confexists, the conf files in$HOME/.config/containers/registries.conf.dare being loaded, so the permission issue happened./etc/containers/registries.confis installed bycontainers-commonpackage as a dependency of skopeo which is installed when runningtools/install_os_deps.sh.