adjust to docker-distribution 3.0.0 update #12905
Labels
No labels
announcement
anubis
authentication
aws
backlog
blocked
bodhi
ci
cloud
communishift
copr
database
day-to-day
dc-move
deprecated
dev
discourse
dns
downloads
easyfix
epel
firmitas
forgejo_migration
Gain
High
Gain
Low
Gain
Medium
gitlab
greenwave
hardware
help wanted
high-trouble
koji
koschei
lists
low-trouble
medium-trouble
mirrorlists
monitoring
Needs investigation
odcs
OpenShift
ops
outage
packager_workflow_blocker
pagure
permissions
Priority
Needs Review
Priority
Next Meeting
Priority
🔥 URGENT 🔥
Priority
Waiting on Assignee
Priority
Waiting on External
Priority
Waiting on Reporter
rabbitmq
release-monitoring
releng
request-for-resources
s390x
security
SMTP
sprint-0
sprint-1
src.fp.o
staging
unfreeze
waiverdb
websites-general
wiki
Backlog Status
Needs Review
Backlog Status
Ready
chore
documentation
points
01
points
02
points
03
points
05
points
08
points
13
Priority
High
Priority
Low
Priority
Medium
Sprint Status
Blocked
Sprint Status
Done
Sprint Status
In Progress
Sprint Status
Review
Sprint Status
To Do
Technical Debt
Work Item
Bug
Work Item
Epic
Work Item
Spike
Work Item
Task
Work Item
User Story
No milestone
No project
No assignees
3 participants
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
infra/tickets#12905
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
docker-distribution 3.3.0 was pushed to f42 a few weeks ago.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-c96923c947
This change makes it run as the 'registry' group and user.
Before it ran as root.
It now has no permissions to write to the registry.
We should either add a systemd unit drop in to override it, or (ugh) chown all the files on the very very very large volume.
Metadata Update from @james:
We have a quick fix, that's working now ... but a longer term solution would be much better.
Also we're NOT sure what chown'ing all the data will do with netapp snapshots etc.
Metadata Update from @phsmoura:
The quick fix I did was just to remove the user and group lines from the systemd unit file, ie:
https://src.fedoraproject.org/rpms/docker-distribution/blob/rawhide/f/docker-distribution.service#_12
So, it's 'fixed' for now, but it would be nice to have a proper override in ansible in case we rebuild these hosts or docker-distribution ever gets upgraded.
This might be a good easy issue for someone new. :)