Comments (5)
baude
commented on June 28, 2024
1
Ill assign myself this one though probably wont be until next week (bug week) that I get to it. We can do a digest verification but I am concerned about the cost and how often we do it (i.e. reaching out to the registry (each time would be two different requests) and then actually checksum'ing the local file. Perhaps it can be done on download only and if that does not match, we throw away the downloaded file and error out?
the current approach does show a weakness in how we determine the local cached file though. in the sense that if, as is pointed out by the person who wrote this issue, the downloaded file is corrupt, we get stuck in this loop of sorts. podman machine reset would get you out of that, but many people dont know about that command or use it yet.
from podman.
jeffmaury
commented on June 28, 2024
I think it's an upstream issue (Podman)
from podman.
baude
commented on June 28, 2024
please submit the results of podman info; from this, i cannot tell if you are using hyperv or wsl and that is a relevant detail.
from podman.
baude
commented on June 28, 2024
also, when you said you exit, is this a control-c
from podman.
Peyman-Borhani
commented on June 28, 2024
please submit the results of
podman info; from this, i cannot tell if you are using hyperv or wsl and that is a relevant detail.
@baude
WSL is used
podman info log::
$ podman info
host:
arch: amd64
buildahVersion: 1.35.4
cgroupControllers:
- cpuset
- cpu
- cpuacct
- blkio
- memory
- devices
- freezer
- net_cls
- perf_event
- net_prio
- hugetlb
- pids
- rdma
- misc
cgroupManager: cgroupfs
cgroupVersion: v1
conmon:
package: conmon-2.1.10-1.fc40.x86_64
path: /usr/bin/conmon
version: 'conmon version 2.1.10, commit: '
cpuUtilization:
idlePercent: 99.78
systemPercent: 0.13
userPercent: 0.09
cpus: 12
databaseBackend: sqlite
distribution:
distribution: fedora
variant: container
version: "40"
eventLogger: journald
freeLocks: 2048
hostname: ___
idMappings:
gidmap: null
uidmap: null
kernel: 5.15.146.1-microsoft-standard-WSL2
linkmode: dynamic
logDriver: journald
memFree: 7281381376
memTotal: 8247300096
networkBackend: netavark
networkBackendInfo:
backend: netavark
dns:
package: aardvark-dns-1.10.0-1.fc40.x86_64
path: /usr/libexec/podman/aardvark-dns
version: aardvark-dns 1.10.0
package: netavark-1.10.3-3.fc40.x86_64
path: /usr/libexec/podman/netavark
version: netavark 1.10.3
ociRuntime:
name: crun
package: crun-1.15-1.fc40.x86_64
path: /usr/bin/crun
version: |-
crun version 1.15
commit: e6eacaf4034e84185fd8780ac9262bbf57082278
rundir: /run/crun
spec: 1.0.0
+SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +LIBKRUN +WASM:wasmedge +YAJL
os: linux
pasta:
executable: /usr/bin/pasta
package: passt-0^20240510.g7288448-1.fc40.x86_64
version: |
pasta 0^20240510.g7288448-1.fc40.x86_64
Copyright Red Hat
GNU General Public License, version 2 or later
https://www.gnu.org/licenses/old-licenses/gpl-2.0.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
remoteSocket:
exists: true
path: /run/podman/podman.sock
security:
apparmorEnabled: false
capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
rootless: false
seccompEnabled: true
seccompProfilePath: /usr/share/containers/seccomp.json
selinuxEnabled: false
serviceIsRemote: true
slirp4netns:
executable: ""
package: ""
version: ""
swapFree: 2147483648
swapTotal: 2147483648
uptime: 4h 41m 32.00s (Approximately 0.17 days)
variant: ""
plugins:
authorization: null
log:
- k8s-file
- none
- passthrough
- journald
network:
- bridge
- macvlan
- ipvlan
volume:
- local
registries:
search:
- docker.io
store:
configFile: /usr/share/containers/storage.conf
containerStore:
number: 0
paused: 0
running: 0
stopped: 0
graphDriverName: overlay
graphOptions:
overlay.imagestore: /usr/lib/containers/storage
overlay.mountopt: nodev,metacopy=on
graphRoot: /var/lib/containers/storage
graphRootAllocated: 1081101176832
graphRootUsed: 848224256
graphStatus:
Backing Filesystem: extfs
Native Overlay Diff: "false"
Supports d_type: "true"
Supports shifting: "false"
Supports volatile: "true"
Using metacopy: "true"
imageCopyTmpDir: /var/tmp
imageStore:
number: 0
runRoot: /run/containers/storage
transientStore: false
volumePath: /var/lib/containers/storage/volumes
version:
APIVersion: 5.0.3
Built: 1715299200
BuiltTime: Fri May 10 03:30:00 2024
GitCommit: ""
GoVersion: go1.22.2
Os: linux
OsArch: linux/amd64
Version: 5.0.3
Exit by ctrl-c ? no, was in Podman-desktop app: 1st time canceled, retry... next end task, retry... then restart system, retry. had same issue.
Further I searched the podman folders, couldn't find a log on the event, but tracked the downloading file: wslv20240520154143-5.0-rootfs-amd64.tar.zst
deleting it fixed the problem, setup completes and works well.
My reason (assumption): podman desktop in-app install of machine-default stuck on extraction... in CLI: podman machine init gave unexpected EOF error.
I locate the file and noticed its size was incorrect (incomplete/damaged...) then as podman-cli/desktop-app didn't remove or overwrite it on retry, I delete the file, and issue fixed, machine setup completed in desktop app, and the downloaded file size was correct.
So I thought it might be useful to share my findings, and suggest adding a function to check the downloaded file, to verify completion, file size, checksum...etc before it proceeds to extraction.
from podman.
Related Issues (20)
- Permission denied extracting to etc.defaults/shadow within a bind mount on MacOS, works with Docker HOT 6
- Changing system time during pod creation causes init containers to run in incorrect order HOT 2
- unlinkat directory not empty on commit (rootless) HOT 5
- Rootless fails to receive systemd slice shortly after boot HOT 5
- podman tries to make user-executable directory world-executable (rootless) HOT 3
- [Podman man] --no-hosts and base_hosts_file semantics HOT 1
- remote: usability: "diff" with no args makes nonsensical suggestion (--latest)
- Containerfile.in not automatically pre-processed HOT 2
- Swagger docs mismatch for /images/{name}/push and libpod endpoint HOT 2
- newuidmap Fails with “Operation not permitted” When Running Podman Inside amd64 Podman container on macOS with Rosetta HOT 5
- podman : Depends: containers-common (>= 4:1) but it is not going to be installed HOT 1
- cannot remove images on MacOS HOT 5
- Podman v5 no longer builds Dockerfiles with build args used as --platform in FROM instruction HOT 4
- quadlet: add Container-spec StopSignal mapping to podman --stop-signal HOT 1
- podman system renumber fails if a volume exists
- Podman doesn't use a local image in `FROM` in Dockerfile/Containerfile HOT 2
- `podman-catatonit` cannot be installed in a UBI9 based container image HOT 1
- macOS vm virtiofs concurrency issue HOT 8
- Podman creates a rundir with insufficient permissions HOT 6
- podman build -o type=tar,dest=- mixes tar and messages HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from podman.