{"action":"created","issue":{"url":"https://api.github.com/repos/cyphar/umoci/issues/49","repository_url":"https://api.github.com/repos/cyphar/umoci","labels_url":"https://api.github.com/repos/cyphar/umoci/issues/49/labels{/name}","comments_url":"https://api.github.com/repos/cyphar/umoci/issues/49/comments","events_url":"https://api.github.com/repos/cyphar/umoci/issues/49/events","html_url":"https://github.com/cyphar/umoci/issues/49","id":196064045,"number":49,"title":"layer: Xattr unpack code is broken on Fedora/RHEL","user":{"login":"runcom","id":849915,"avatar_url":"https://avatars.githubusercontent.com/u/849915?v=3","gravatar_id":"","url":"https://api.github.com/users/runcom","html_url":"https://github.com/runcom","followers_url":"https://api.github.com/users/runcom/followers","following_url":"https://api.github.com/users/runcom/following{/other_user}","gists_url":"https://api.github.com/users/runcom/gists{/gist_id}","starred_url":"https://api.github.com/users/runcom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/runcom/subscriptions","organizations_url":"https://api.github.com/users/runcom/orgs","repos_url":"https://api.github.com/users/runcom/repos","events_url":"https://api.github.com/users/runcom/events{/privacy}","received_events_url":"https://api.github.com/users/runcom/received_events","type":"User","site_admin":false},"labels":[{"id":476002481,"url":"https://api.github.com/repos/cyphar/umoci/labels/cmd/unpack","name":"cmd/unpack","color":"d64937","default":false},{"id":476003075,"url":"https://api.github.com/repos/cyphar/umoci/labels/oci/layer","name":"oci/layer","color":"3775d6","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/cyphar/umoci/milestones/2","html_url":"https://github.com/cyphar/umoci/milestone/2","labels_url":"https://api.github.com/repos/cyphar/umoci/milestones/2/labels","id":2116963,"number":2,"title":"0.0.0","description":"The first beta release of `umoci` which has all of the required basic functionality, has unit and integration tests, and works well enough that we can start to look into proper KIWI integration. It should be noted that the UX probably won't be stable at this point, but the general layout will be pretty much completed. It also will have `man` pages.\r\n\r\nBasically, this is the point at which it will be practical to package `umoci` for openSUSE, meaning that it is useful and well-tested enough that it can be merged into `Virtualization:containers`.","creator":{"login":"cyphar","id":2888411,"avatar_url":"https://avatars.githubusercontent.com/u/2888411?v=3","gravatar_id":"","url":"https://api.github.com/users/cyphar","html_url":"https://github.com/cyphar","followers_url":"https://api.github.com/users/cyphar/followers","following_url":"https://api.github.com/users/cyphar/following{/other_user}","gists_url":"https://api.github.com/users/cyphar/gists{/gist_id}","starred_url":"https://api.github.com/users/cyphar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cyphar/subscriptions","organizations_url":"https://api.github.com/users/cyphar/orgs","repos_url":"https://api.github.com/users/cyphar/repos","events_url":"https://api.github.com/users/cyphar/events{/privacy}","received_events_url":"https://api.github.com/users/cyphar/received_events","type":"User","site_admin":false},"open_issues":5,"closed_issues":25,"state":"open","created_at":"2016-11-06T07:16:52Z","updated_at":"2016-12-16T14:27:09Z","due_on":"2016-12-23T00:00:00Z","closed_at":null},"comments":5,"created_at":"2016-12-16T13:52:38Z","updated_at":"2016-12-16T14:28:45Z","closed_at":null,"body":"just have a busybox image copied with skopeo to OCI format, then:\r\n```sh\r\n$ umoci unpack --image busybox bundle\r\nINFO[0000] parsed mappings                               map.gid=[] map.uid=[]\r\nFATA[0000] create runtime bundle: chown rootfs: lchown bundle/rootfs: operation not permitted\r\n\r\n$ sudo $GOPATH/bin/umoci unpack --image busybox bundle\r\nINFO[0000] parsed mappings                               map.gid=[] map.uid=[]\r\nINFO[0000] unpack manifest: unpacking layer sha256:56bec22e355981d8ba0878c6c2f23b21f422f30ab0aba188b54f1ffeff59c190  diffid=\"sha256:e88b3f82283bc59d5e0df427c824e9f95557e661fcb0ea15fb0fb6f97760f9d9\"\r\nFATA[0000] create runtime bundle: unpack layer: unpack entry: bin: apply hdr metadata: clear xattr metadata: /home/amurdaca/go/src/github.com/docker/containerd/bundle/rootfs/bin: lclearxattrs: lremovexattr(/home/amurdaca/go/src/github.com/docker/containerd/bundle/rootfs/bin, security.selinux): permission denied\r\n```"},"comment":{"url":"https://api.github.com/repos/cyphar/umoci/issues/comments/267605312","html_url":"https://github.com/cyphar/umoci/issues/49#issuecomment-267605312","issue_url":"https://api.github.com/repos/cyphar/umoci/issues/49","id":267605312,"user":{"login":"runcom","id":849915,"avatar_url":"https://avatars.githubusercontent.com/u/849915?v=3","gravatar_id":"","url":"https://api.github.com/users/runcom","html_url":"https://github.com/runcom","followers_url":"https://api.github.com/users/runcom/followers","following_url":"https://api.github.com/users/runcom/following{/other_user}","gists_url":"https://api.github.com/users/runcom/gists{/gist_id}","starred_url":"https://api.github.com/users/runcom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/runcom/subscriptions","organizations_url":"https://api.github.com/users/runcom/orgs","repos_url":"https://api.github.com/users/runcom/repos","events_url":"https://api.github.com/users/runcom/events{/privacy}","received_events_url":"https://api.github.com/users/runcom/received_events","type":"User","site_admin":false},"created_at":"2016-12-16T14:28:45Z","updated_at":"2016-12-16T14:28:45Z","body":"> It probably does. I will try it out, but is there a nice environment I can use to test SELinux? Will a Fedora VM work out-of-the box with SELinux in enforcing mode?\r\n\r\nI usually spin up fedora vms out of qcow2 images (fedora cloud images) and everything works great with Selinux and the rest"}}
{"actor":{"display_login":"runcom"}}