Owner and group of few files and folders from Bind directory visible as nobody/nogroup within nspawn container

Bug #1688689 reported by RussianNeuroMancer
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
systemd
Fix Released
Unknown
systemd (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Owner and group of few files and folders from Bind directory visible as nobody/nogroup when I check permission from within nspawn container.

Create testing.nspawn:

[Files]
Bind=/patch/to/folder
Use some folder with many subfolders, to expand the test coverage. Check if owners of all subfolders and files in Bind directory inside container is the same as on host.

Issue is reproducible in Ubuntu Server 17.04 (systemd 232) and Ubuntu Server 17.10 (systemd 233).

Revision history for this message
RussianNeuroMancer (russianneuromancer) wrote :

Issue is also reproducible for files and folder within container, if container is btrfs subvolume instead of disk image.

Revision history for this message
RussianNeuroMancer (russianneuromancer) wrote :

Example:

~$ LANG=C sudo whoami
sudo: /usr/bin/sudo must be owned by uid 0 and have the setuid bit set
~$ LANG=C ls -l /usr/bin/sudo
-rwsr-xr-x 1 nobody nogroup 140944 Jan 14 07:41 /usr/bin/sudo
~$ LANG=C ls -l /var/lib/machines/builder/usr/bin/sudo
-rwsr-xr-x 1 root root 140944 Jan 14 07:41 /var/lib/machines/builder/usr/bin/sudo

summary: - Owner and group of few folders from Bind directory visible as
+ Owner and group of few files and folders from Bind directory visible as
nobody/nogroup within nspawn container
description: updated
Changed in systemd:
status: Unknown → New
Revision history for this message
RussianNeuroMancer (russianneuromancer) wrote :
Changed in systemd (Ubuntu):
status: New → Invalid
Changed in systemd:
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.