Upgrade from 20.10.21-0ubuntu1~22.04.3 to 20.10.25-0ubuntu1~22.04.1 introduces overlayfs permission issues

[Christoph Kindl]

I upgraded from 20.10.21-0ubuntu1~22.04.3 to 20.10.25-0ubuntu1~22.04.1 today, rebooted my machine and noticed that some of my containers did no longer start successfully after re-creating them. Somehow, the upgrade messed with permissions of overlayfs files such that I got "Permission denied" errors although the process inside the container runs as root.

Docker containers are managed with docker-compose

# lsb_release output #

Description: Ubuntu 22.04.3 LTS
Release: 22.04

# apt-cache policy output #

* docker.io

  Installed: 20.10.21-0ubuntu1~22.04.3
  Candidate: 20.10.25-0ubuntu1~22.04.1
  Version table:
     20.10.25-0ubuntu1~22.04.1 500
        500 http://de.archive.ubuntu.com/ubuntu jammy-updates/universe amd64 Packages
 *** 20.10.21-0ubuntu1~22.04.3 500
        500 http://security.ubuntu.com/ubuntu jammy-security/universe amd64 Packages
        100 /var/lib/dpkg/status
     20.10.12-0ubuntu4 500
        500 http://de.archive.ubuntu.com/ubuntu jammy/universe amd64 Packages

* docker-compose

docker-compose:
  Installed: 1.29.2-1
  Candidate: 1.29.2-1
  Version table:
 *** 1.29.2-1 500
        500 http://de.archive.ubuntu.com/ubuntu jammy/universe amd64 Packages
        500 http://de.archive.ubuntu.com/ubuntu jammy/universe i386 Packages
        100 /var/lib/dpkg/status

[Christoph Kindl (ckristo)]

As indicated by the apt-cache policy output, I downgraded to 20.10.21-0ubuntu1~22.04.3, restarted the machine, and re-build my containers - afterwards everything worked again.

[Christoph Kindl (ckristo)]

Also raised for docker.io-app package, as it seems the target version that causes issues (20.10.25-0ubuntu1~22.04.1) is associated with that one instead. See https://bugs.launchpad.net/ubuntu/+source/docker.io-app/+bug/2030780

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Max Gaukler (mgmax)]

A fix is on the way, see https://bugs.launchpad.net/ubuntu/+source/docker.io-app/+bug/2029523

[Eero-t-tamminen (eero-t-tamminen)]

Upgrade caused also "chown" command to have no effect, which broke all my container builds (as my base containers use "chown" so they can use something else than root user for builds).

[Eero-t-tamminen (eero-t-tamminen)]

^That was on 22.04, where "docker.io" got updated during upgrade.