Your message dated Mon, 14 Nov 2022 00:34:40 +0000
with message-id <e1ounqu-0087wl...@fasolo.debian.org>
and subject line Bug#1019929: fixed in libpod 4.3.1+ds1-1
has caused the Debian Bug report #1019929,
regarding podman: Subordinate UID/GID ranges not fetched from libsubid
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1019929: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1019929
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: podman
Version: 4.2.0+ds1-3
Severity: normal
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
I've not got anything in /etc/subuid or /etc/subgid because subordinate
id range info is stored in LDAP.
$ grep ^subid: /etc/nsswitch.conf
subid: sss
This is transparent to clients using libsubid:
$ getsubids sam
0: sam 2147483648 65536
... but it looks like podman doesn't use this library yet:
$ podman system info
ERRO[0000] cannot find UID/GID for user sam: no subuid ranges found for
user "sam" in /etc/subuid - check rootless mode in man pages.
WARN[0000] Using rootless single mapping into the namespace. This might
break some images. Check /etc/subuid and /etc/subgid for adding sub*ids if not
using a network user
[...]
idMappings:
gidmap:
- container_id: 0
host_id: 1000
size: 1
uidmap:
- container_id: 0
host_id: 1000
size: 1
[...]
- -- System Information:
Debian Release: bookworm/sid
APT prefers testing
APT policy: (530, 'testing'), (520, 'unstable'), (1, 'experimental')
merged-usr: no
Architecture: amd64 (x86_64)
Kernel: Linux 5.19.0-1-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages podman depends on:
ii conmon 2.1.3+ds1-1
ii crun 1.5+dfsg-1+b1
ii golang-github-containers-common 0.48.0+ds1-1
ii libc6 2.34-7
ii libdevmapper1.02.1 2:1.02.185-1
ii libgpgme11 1.17.1-4.1
ii libseccomp2 2.5.4-1+b1
ii systemd [systemd-tmpfiles] 251.4-3
Versions of packages podman recommends:
ii buildah 1.26.1+ds1-1
ii catatonit 0.1.7-1
ii dbus-user-session 1.14.0-2
ii fuse-overlayfs 1.9-1
ii slirp4netns 1.2.0-1
ii uidmap 1:4.11.1+dfsg1-2
Versions of packages podman suggests:
ii containers-storage 1.37.2+ds1-1+b2
pn docker-compose <none>
ii iptables 1.8.8-1
- -- no debconf information
-----BEGIN PGP SIGNATURE-----
iIgEARYIADAWIQTWOGqGn6HETecdzqZOEaKLhlAYigUCYyRZrhIcc2FtQHJvYm90
cy5vcmcudWsACgkQThGii4ZQGIra+wEA9cSULDer04xzpg1djBcsaxdK78eH6avT
szoQ8hl2ERMA/08sN17EOvYQOLB8WwleW1kPCQZdDztMiapcY5Ep7CYI
=DI3R
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
Source: libpod
Source-Version: 4.3.1+ds1-1
Done: Reinhard Tartler <siret...@tauware.de>
We believe that the bug you reported is fixed in the latest version of
libpod, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1019...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Reinhard Tartler <siret...@tauware.de> (supplier of updated libpod package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 13 Nov 2022 12:27:53 -0500
Source: libpod
Architecture: source
Version: 4.3.1+ds1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Go Packaging Team
<pkg-go-maintain...@lists.alioth.debian.org>
Changed-By: Reinhard Tartler <siret...@tauware.de>
Closes: 1019591 1019929
Changes:
libpod (4.3.1+ds1-1) experimental; urgency=medium
.
* New upstream release
- Add container GID to additional groups,
fixes CVE-2022-2989, closes: #1019591
* Bugfix: Subordinate UID/GID ranges not fetched from libsubid,
Thanks to Sam Morris <s...@robots.org.uk> for the patch, closes: #1019929
Checksums-Sha1:
f39b8551302423f2a0414de8e4e95ca741b1f229 5179 libpod_4.3.1+ds1-1.dsc
764647a82cb895c1e747f27f1c43d6225cabbbdb 2590124 libpod_4.3.1+ds1.orig.tar.xz
4ca18f53f4bdd47f0e28d131556bc20274ba1fb0 15612 libpod_4.3.1+ds1-1.debian.tar.xz
Checksums-Sha256:
cad710c3732b42c3b16557470589942eb6d94e95dbc33a428c470f8e7275a2b7 5179
libpod_4.3.1+ds1-1.dsc
2785fcade807395d6d1bf2a31a910cf051f2b3e723e98109dfe1803236a76e50 2590124
libpod_4.3.1+ds1.orig.tar.xz
f2ac5a76303f3720464e7662de7697e2e0b242c205c684af7c28c060ddcf0685 15612
libpod_4.3.1+ds1-1.debian.tar.xz
Files:
98a5cad2333e908c32b0168c44c91609 5179 admin optional libpod_4.3.1+ds1-1.dsc
6d4a8334d17a2465bfec731cab83e473 2590124 admin optional
libpod_4.3.1+ds1.orig.tar.xz
281b0ac29c3d57cc4f7d79c1cd9cb7d4 15612 admin optional
libpod_4.3.1+ds1-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=sxF3
-----END PGP SIGNATURE-----
--- End Message ---
