Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixes anonymous auth when analyze/export run as root #292

Merged
merged 1 commit into from
May 8, 2020

Conversation

ekcasey
Copy link
Member

@ekcasey ekcasey commented May 8, 2020

  • Uses DefaultKeychain if CNB_REGISTRY_AUTH is not set
  • Uses EnvKeychain if CNB_REGISTRY_AUTH is set
  • Doesn't fallback on the default keychain if the EnvKeychain returns anonymous
  • This fixes an error caused by the lifecycle attempting to read in root's home dir after dropping privileges
  • Generally platforms use either CNB_REGISTRY_AUTH or a docker config.json, not both

Signed-off-by: Natalie Arellano [email protected]
Signed-off-by: Emily Casey [email protected]

* Uses DefaultKeychain if CNB_REGISTRY_AUTH is not set
* Uses EnvKeychain if CNB_REGISTRY_AUTH is set
* Doesn't fallback on the default keychain if the EnvKeychain returns anonymous
* This fixes an error caused by the lifecycle attempting to read  in root's home dir after dropping privileges
* Generally platforms use either CNB_REGISTRY_AUTH or a docker config.json, not both

Signed-off-by: Natalie Arellano <[email protected]>
Signed-off-by: Emily Casey <[email protected]>
@ekcasey ekcasey requested a review from a team as a code owner May 8, 2020 21:45
@ekcasey ekcasey merged commit 1ddb7d5 into master May 8, 2020
@ekcasey ekcasey deleted the bugfix/290-anonymous-auth branch May 8, 2020 22:14
@ekcasey ekcasey linked an issue May 8, 2020 that may be closed by this pull request
@ekcasey ekcasey added this to the lifecycle-0.7.5 milestone May 8, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

stat /root/.docker/config.json: permission denied
3 participants