Skip to content

Conversation

@HariPalleti
Copy link
Contributor

@HariPalleti HariPalleti commented Nov 4, 2025

Description:

Skopeo fail when running the cli container as non root within an OCP cluster.
The problem is: # the cli container runs with a non root id but in the root group

skopeo tries to read from /opt/app-root/src/.config (as the home directory is /opt/app-root/src)
the directory /opt/app-root/src/.config exists but is not readable so skopeo erroring out root/src/.config/containers/registries.conf.d: permission denied'

Issue:

Test:

mascli$ ls -ld /opt/app-root/src/.config
drwxrwxr-x 3 root root 4096 Nov 4 14:50 /opt/app-root/src/.config

@HariPalleti HariPalleti marked this pull request as ready for review November 4, 2025 15:29
@HariPalleti HariPalleti requested a review from terenceq November 4, 2025 15:29
@terenceq terenceq merged commit 069b1b9 into stable Nov 4, 2025
5 checks passed
@terenceq terenceq deleted the remediation branch November 4, 2025 15:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants