no one's familiar with podmansh, it just landed. We might be the first outside of the podman team pl
no one's familiar with podmansh, it just landed. We might be the first outside of the podman team playing with it
id -Z and ls -lZ /etc/sudoers /etc/shadowpodman exec -it -u 0:0 into the container and then do passwd $youruserincontainer$ id -Z
unconfined_u:unconfined_r:spc_t:s0$ ls -lZ /etc/sudoers /etc/shadow
-rw-r-----. 1 root shadow system_u:object_r:container_file_t:s0:c1022,c1023 729 Jul 31 01:17 /etc/shadow
-r--r-----. 1 root root system_u:object_r:container_file_t:s0:c1022,c1023 1671 Aug 3 2022 /etc/sudoerspodman exec since it's a rootless container running as the fullu user, who has podmansh set as the shell. so I don't know how to do any podman things in the context of that user$ ls -la /etc/passwd
-rw-r--r--. 1 root root 1417 Aug 3 17:00 /etc/passwd
$ sudo su
sudo: /etc/sudoers is owned by uid 65534, should be 0
sudo: no valid sudoers sources found, quitting
sudo: error initializing audit plugin sudoers_auditsudo -u $user podman may still work?nsenter -t 1 to get real rootpodman exec -it -u 0:0 into the container and then do passwd $youruserincontainer <- that worked--privileged and removed the /etc/selinux mountRunInit=true which would execute /sbin/init, and there's the Exec= which runs sleep just to get the container goingid -Zls -lZ /etc/sudoers /etc/shadowpodman exec -it -u 0:0podman exec -it -u 0:0passwd $youruserincontainerpasswd $youruserincontainer$ id -Z
unconfined_u:unconfined_r:spc_t:s0$ ls -lZ /etc/sudoers /etc/shadow
-rw-r-----. 1 root shadow system_u:object_r:container_file_t:s0:c1022,c1023 729 Jul 31 01:17 /etc/shadow
-r--r-----. 1 root root system_u:object_r:container_file_t:s0:c1022,c1023 1671 Aug 3 2022 /etc/sudoerspodman execfullupodmansh$ ls -la /etc/passwd
-rw-r--r--. 1 root root 1417 Aug 3 17:00 /etc/passwd
$ sudo su
sudo: /etc/sudoers is owned by uid 65534, should be 0
sudo: no valid sudoers sources found, quitting
sudo: error initializing audit plugin sudoers_auditsudo -u $user podmannsenter -t 1bash-5.2# sudo -u fullu podman exec -it cf7 passwd
Changing password for fullu.
Current password:
passwd: Authentication token manipulation error$ sudo su
[sudo] password for fullu:
fullu is not in the sudoers file. This incident will be reported.
$ dpkg: error processing archive /var/cache/apt/archives/libpython3.10-minimal_3.1
0.12-1~22.04.2_amd64.deb (--unpack):
new libpython3.10-minimal:amd64 package pre-removal script subprocess returned
error exit status 2
dpkg (subprocess): cannot set security execution context for maintainer script:
Invalid argument--privilegedRunInit=trueExec=