Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use EXT2 for the rootfs images instead of CPIO #8

Open
JJL772 opened this issue Apr 11, 2024 · 0 comments
Open

Use EXT2 for the rootfs images instead of CPIO #8

JJL772 opened this issue Apr 11, 2024 · 0 comments

Comments

@JJL772
Copy link
Member

JJL772 commented Apr 11, 2024

It seems like CPIO doesn't support xattrs and thus loses capabilities set on files via setcap. ping, for example, currently yields Operation not permitted unless you set sudo sysctl net.ipv4.ping_group_range="0 2147483647", even though it was properly setcap'ed before being packed into the CPIO rootfs.

Before packing the CPIO rootfs, getcap centos7-builder/diskless-root/bin/ping (from inside the build container) shows: centos7-builder/diskless-root/bin/ping = cap_net_admin,cap_net_raw+p

After booting the image in Qemu, I see: Failed to get capabilities of file /bin/ping' (Operation not supported)`

It's worth noting that our linuxRT images do not have this issue because they already use EXT2 rootfs images.

Linux docs about initrd images: https://docs.kernel.org/admin-guide/initrd.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant