Public bug reported:

Using Ubuntu 24.04.2, upgraded to latest available upgrades at time of
writing.  Skopeo version is `1.13.3+ds1-2ubuntu0.24.04.2`.

Running skopeo actions against containers-storage transport (e.g.
`skopeo inspect containers-storage:localhost/image-name:latest`) fails
on Ubuntu 24.04 with the following error:

```
Error during unshare(...): Operation not permitted
```

I'd expect to be able to run skopeo actions against containers-storage.
Rootless Podman works as intended on the same system.

There are some bug reports on GitHub related to this, e.g.

- https://github.com/containers/skopeo/issues/2377
- https://github.com/containers/skopeo/issues/2559
- https://github.com/actions/runner-images/issues/10443

Copying `/etc/apparmor.d/podman` to `/etc/apparmor.d/skopeo`, changing
the path to `/usr/bin/skopeo` and reloading AppArmor seems to fix this.
I'm not sure though if the permissions given by `podman` profile are too
much for Skopeo.

** Affects: skopeo (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2115789

Title:
  AppArmor profile for Skopeo missing

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/skopeo/+bug/2115789/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to