podman image sign missing

[mikaeltw]

After upgrading from podman 3.4.2 to podman 4.0.2 when RHEL was upgraded from 8.5 to 8.6, some podman commands, among them podman image sign, are no longer available and have also been removed from the podman image --help list. I have scanned the release notes but cannot find any mentioning of this removal/change. Podman is installed via the container-tools:rhel8 module.

Is this expected behaviour and has the functionality been moved elsewhere or removed?

Kind regards
//Mikael

[vrothberg]

Thanks for reaching out @mikaeltw. Can you check whether you are using podman-remote or podman? podman image sign is only available on podman.

[mikaeltw]

Thanks for the quick reply. Both podman and podman-remote are installed. Nevertheless, there are no changes made before or after the upgrade except the yum -y update and I am using podman. which podman returns usr/bin/podman which is no symlink.

[vrothberg]

Can you share the output of podman info --debug?

[mikaeltw]

host:
  arch: amd64
  buildahVersion: 1.24.1
  cgroupControllers:
  - memory
  - pids
  cgroupManager: systemd
  cgroupVersion: v2
  conmon:
    package: conmon-2.1.0-1.module+el8.6.0+14877+f643d2d6.x86_64
    path: /usr/bin/conmon
    version: 'conmon version 2.1.0, commit: 87b7a9037cbd1d81288bdf2d6705dfda889f7cf9'
  cpus: 1
  distribution:
    distribution: '"rhel"'
    version: "8.6"
  eventLogger: file
  hostname: myhostnamedummy
  idMappings:
    gidmap:
    - container_id: 0
      host_id: 9574
      size: 1
    - container_id: 1
      host_id: 600000
      size: 65536
    uidmap:
    - container_id: 0
      host_id: 16962
      size: 1
    - container_id: 1
      host_id: 600000
      size: 65536
  kernel: 4.18.0-372.9.1.el8.x86_64
  linkmode: dynamic
  logDriver: k8s-file
  memFree: 31341248512
  memTotal: 33507676160
  networkBackend: cni
  ociRuntime:
    name: runc
    package: runc-1.0.3-2.module+el8.6.0+14877+f643d2d6.x86_64
    path: /usr/bin/runc
    version: |-
      runc version 1.0.3
      spec: 1.0.2-dev
      go: go1.17.7
      libseccomp: 2.5.2
  os: linux
  remoteSocket:
    exists: true
    path: /run/user/16962/podman/podman.sock
  security:
    apparmorEnabled: false
    capabilities: CAP_NET_RAW,CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
    rootless: true
    seccompEnabled: true
    seccompProfilePath: /usr/share/containers/seccomp.json
    selinuxEnabled: true
  serviceIsRemote: true
  slirp4netns:
    executable: /usr/bin/slirp4netns
    package: slirp4netns-1.1.8-2.module+el8.6.0+14877+f643d2d6.x86_64
    version: |-
      slirp4netns version 1.1.8
      commit: d361001f495417b880f20329121e3aa431a8f90f
      libslirp: 4.4.0
      SLIRP_CONFIG_VERSION_MAX: 3
      libseccomp: 2.5.2
  swapFree: 2147479552
  swapTotal: 2147479552
  uptime: 2h 39m 16.86s (Approximately 0.08 days)
plugins:
  log:
  - k8s-file
  - none
  - passthrough
  - journald
  network:
  - bridge
  - macvlan
  - ipvlan
  volume:
  - local
registries:
  docker.io:
    Blocked: false
    Insecure: false
    Location: mydummylocation
    MirrorByDigestOnly: false
    Mirrors: null
    Prefix: docker.io
  k8s.gcr.io:
    Blocked: false
    Insecure: false
    Location: mydummylocation
    MirrorByDigestOnly: false
    Mirrors: null
    Prefix: k8s.gcr.io
  quay.io:
    Blocked: false
    Insecure: false
    Location: mydummylocation
    MirrorByDigestOnly: false
    Mirrors: null
    Prefix: quay.io
  registry.access.redhat.com:
    Blocked: false
    Insecure: false
    Location: mydummylocation
    MirrorByDigestOnly: false
    Mirrors: null
    Prefix: registry.access.redhat.com
  search:
  - registry.fedoraproject.org
  - registry.access.redhat.com
  - registry.centos.org
  - docker.io
store:
  configFile: /<userpath>/.config/containers/storage.conf
  containerStore:
    number: 4
    paused: 0
    running: 0
    stopped: 4
  graphDriverName: overlay
  graphOptions:
    overlay.mount_program:
      Executable: /usr/bin/fuse-overlayfs
      Package: fuse-overlayfs-1.8.2-1.module+el8.6.0+14877+f643d2d6.x86_64
      Version: |-
        fusermount3 version: 3.3.0
        fuse-overlayfs: version 1.8.2
        FUSE library version 3.3.0
        using FUSE kernel interface version 7.26
    overlay.mountopt: noxattrs=1
  graphRoot: /<userhomedir>/.local/share/containers/storage
  graphStatus:
    Backing Filesystem: xfs
    Native Overlay Diff: "false"
    Supports d_type: "true"
    Using metacopy: "false"
  imageCopyTmpDir: /var/tmp
  imageStore:
    number: 637
  runRoot: /run/user/16962/containers
  volumePath: /<userhomedir>/.local/share/containers/storage/volumes
version:
  APIVersion: 4.0.2
  Built: 1650363392
  BuiltTime: Tue Apr 19 12:16:32 2022
  GitCommit: ""
  GoVersion: go1.17.7
  OsArch: linux/amd64
  Version: 4.0.2

[vrothberg]

That is quite curious. The best way to resolve the issue is to reach out to Red Hat support. There is nothing we can do upstream.

[mikaeltw]

Indeed. Thanks @vrothberg for the insights that this is not a podman issue per see.