adjust to docker-distribution 3.0.0 update #12905

Open
opened 2025-11-10 19:26:43 +00:00 by kevin · 4 comments
Owner

docker-distribution 3.3.0 was pushed to f42 a few weeks ago.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-c96923c947

This change makes it run as the 'registry' group and user.

Before it ran as root.

It now has no permissions to write to the registry.

We should either add a systemd unit drop in to override it, or (ugh) chown all the files on the very very very large volume.

docker-distribution 3.3.0 was pushed to f42 a few weeks ago. https://bodhi.fedoraproject.org/updates/FEDORA-2025-c96923c947 This change makes it run as the 'registry' group and user. Before it ran as root. It now has no permissions to write to the registry. We should either add a systemd unit drop in to override it, or (ugh) chown all the files on the very very very large volume.
Member

Metadata Update from @james:

  • Issue tagged with: low-gain, low-trouble
**Metadata Update from @james**: - Issue tagged with: low-gain, low-trouble
Member

We have a quick fix, that's working now ... but a longer term solution would be much better.

Also we're NOT sure what chown'ing all the data will do with netapp snapshots etc.

We have a quick fix, that's working now ... but a longer term solution would be much better. Also we're NOT sure what chown'ing all the data will do with netapp snapshots etc.
Member

Metadata Update from @phsmoura:

  • Issue priority set to: Waiting on Assignee (was: Needs Review)
**Metadata Update from @phsmoura**: - Issue priority set to: Waiting on Assignee (was: Needs Review)
Author
Owner

The quick fix I did was just to remove the user and group lines from the systemd unit file, ie:

https://src.fedoraproject.org/rpms/docker-distribution/blob/rawhide/f/docker-distribution.service#_12

So, it's 'fixed' for now, but it would be nice to have a proper override in ansible in case we rebuild these hosts or docker-distribution ever gets upgraded.

This might be a good easy issue for someone new. :)

The quick fix I did was just to remove the user and group lines from the systemd unit file, ie: https://src.fedoraproject.org/rpms/docker-distribution/blob/rawhide/f/docker-distribution.service#_12 So, it's 'fixed' for now, but it would be nice to have a proper override in ansible in case we rebuild these hosts or docker-distribution ever gets upgraded. This might be a good easy issue for someone new. :)
Sign in to join this conversation.
No milestone
No project
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
infra/tickets#12905
No description provided.