Your message dated Wed, 20 Jul 2016 23:48:32 +0000
with message-id <[email protected]>
and subject line Bug#831324: fixed in docker.io 1.11.2~ds1-6
has caused the Debian Bug report #831324,
regarding docker.io: /etc/docker is not readable by the docker group
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
831324: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831324
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: docker.io
Severity: important
Control: tag -1 + patch
Control: block 806261 by -1
Dear Maintainers,
docker.io sets /etc/docker to be owned and only readable by root,
despite defining a “docker” group.
In particular, this is problematic for deamons such as docker-registry
that do not run as root and need to access data under /etc/docker.
I attached a patch that makes /etc/docker owned by 'root:docker' with
mode 0710. The matching fix in docker-registry is to make the user
docker-registry a member of the docker group (creating it if required),
and apply those permissions to /etc/docker.
Best,
nicoo
-- System Information:
Debian Release: stretch/sid
APT prefers testing
APT policy: (900, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.6.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
>From bd4355bce6ccea582bf01226060ac1bc53d34cf9 Mon Sep 17 00:00:00 2001
From: Nicolas Braud-Santoni <[email protected]>
Date: Thu, 14 Jul 2016 16:42:48 +0200
Subject: [PATCH] Fix /etc/docker permissions
---
debian/docker.io.postinst | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/debian/docker.io.postinst b/debian/docker.io.postinst
index 5fd8847..295a348 100644
--- a/debian/docker.io.postinst
+++ b/debian/docker.io.postinst
@@ -6,6 +6,14 @@ case "$1" in
if [ -z "$2" ]; then
addgroup --system docker
fi
+
+ # Ensure config directory permissions
+ # On a fresh install, $2 = '' and dpkg treat that as a
+ # lower version, so the permissions get fixed too.
+ if dpkg --compare-versions "$2" le '1.11.2~ds1-1'; then
+ chown 'root:docker' /etc/docker
+ chmod 0710 /etc/docker
+ fi
;;
abort-*)
# How'd we get here??
--
2.8.1
--- End Message ---
--- Begin Message ---
Source: docker.io
Source-Version: 1.11.2~ds1-6
We believe that the bug you reported is fixed in the latest version of
docker.io, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Tianon Gravi <[email protected]> (supplier of updated docker.io package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 20 Jul 2016 16:34:52 -0700
Source: docker.io
Binary: docker.io vim-syntax-docker golang-github-docker-docker-dev
golang-docker-dev docker-doc
Architecture: source
Version: 1.11.2~ds1-6
Distribution: unstable
Urgency: medium
Maintainer: Paul Tagliamonte <[email protected]>
Changed-By: Tianon Gravi <[email protected]>
Description:
docker-doc - Linux container runtime -- documentation
docker.io - Linux container runtime
golang-docker-dev - Transitional package for golang-github-docker-docker-dev
golang-github-docker-docker-dev - Externally reusable Go packages included
with Docker
vim-syntax-docker - Docker container engine - Vim highlighting syntax files
Closes: 831324 831748
Changes:
docker.io (1.11.2~ds1-6) unstable; urgency=medium
.
[ Tianon Gravi ]
* Add DEP-3 headers for "skip-racy-unit-tests.patch"
* Add a note about "check-config.sh" to README.Debian; thanks Tincho!
* Add "docker-doc" to Suggests (Closes: #831748); thanks Ben!
* Remove "lxc" from Suggests (no longer a supported execution backend)
.
[ Nicolas Braud-Santoni ]
* Fix /etc/docker permissions (Closes: #831324)
Checksums-Sha1:
6f0b14c9f609c3dccd55228557ba75f37537e0f9 6014 docker.io_1.11.2~ds1-6.dsc
8b546cc5b43873108099c57cfde750c1e91740d1 34552
docker.io_1.11.2~ds1-6.debian.tar.xz
Checksums-Sha256:
6bc4b62fe6779b0889a1120453ae9d25bf415c377bd925d857fafc69487bcd6e 6014
docker.io_1.11.2~ds1-6.dsc
ffadd69ef30d8cafb8861bfbfd289dea78aa9e28194fcdb6dac2b014856ba2c1 34552
docker.io_1.11.2~ds1-6.debian.tar.xz
Files:
d553250f98a5e192ce8881500a3aab3f 6014 admin optional docker.io_1.11.2~ds1-6.dsc
79d04962e2f4f6cfa06e681886f71213 34552 admin optional
docker.io_1.11.2~ds1-6.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=sxKX
-----END PGP SIGNATURE-----
--- End Message ---
