0018157: Cannot Access Container Metadata File After Upgrading Docker to docker-1.13.1-204.git0be3e21.el7.x86_64.rpm

ID	Project	Category	View Status	Date Submitted	Last Update

0018157	CentOS-7	docker	public	2021-04-12 19:53	2021-04-12 20:07

Reporter	tyler.perdue	Assigned To
Priority	high	Severity	major	Reproducibility	always
Status	new	Resolution	open
Product Version	7.0-1406

Summary	0018157: Cannot Access Container Metadata File After Upgrading Docker to docker-1.13.1-204.git0be3e21.el7.x86_64.rpm
Description	After upgrading from docker-1.13.1-161.git64e9980.el7_8.x86_64.rpm to docker-1.13.1-204.git0be3e21.el7.x86_64.rpm, docker container can no longer access the container metadata file located at $ECS_CONTAINER_METADATA_FILE on an AWS ECS Cluster. The observed error is "permission denied" despite the directories and file having read and execute permissions for all users.
Tags	No tags attached.

abrt_hash
URL

Date Modified	Username	Field	Change
2021-04-12 19:53	tyler.perdue	New Issue
2021-04-12 20:07	TrevorH	Note Added: 0038377

TrevorH 2021-04-12 20:07 manager ~0038377	Check the output from `aureport -a` to see if selinux is denying the access. Check with ls -laZ against the file in question to see what context it has. Also, 7.0.1406 is hopefully a typo since that's 6 and a bit _years_ out of date.