Describe the bug
Tried bringing up a confidential container via peer-pods approach, with an encrypted workload/image and the confidential container failed to start with a ImagePullBackOff error.
Looks like the changes discussed in #1473 and in PR #1474 is causing this issue.
How to reproduce
Create a confidential container with the new guest components version v0.21.0 via the peer pod approach with an encrypted workload with TEE=amd
CoCo version information
guest-components v0.21.0
What TEE are you seeing the problem on
None
Failing command and relevant log output
failed to create containerd task: failed to create shim task: rpc status:
Status { code: INTERNAL, message: "[CDH] [ERROR]:
Image Pull error: Failed to pull image <image_name> from all mirror/mapping
locations or original location: image: <image_name> , error: Errors happened
when pulling image: Failed to decode layer data stream: Failed to unpack layer:
Failed to set permissions for path: /run/kata-containers/image/layers/0/etc/group",
details: [], special_fields: SpecialFields { unknown_fields:
UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } }
Describe the bug
Tried bringing up a confidential container via peer-pods approach, with an encrypted workload/image and the confidential container failed to start with a ImagePullBackOff error.
Looks like the changes discussed in #1473 and in PR #1474 is causing this issue.
How to reproduce
Create a confidential container with the new guest components version v0.21.0 via the peer pod approach with an encrypted workload with TEE=amd
CoCo version information
guest-components v0.21.0
What TEE are you seeing the problem on
None
Failing command and relevant log output
failed to create containerd task: failed to create shim task: rpc status: Status { code: INTERNAL, message: "[CDH] [ERROR]: Image Pull error: Failed to pull image <image_name> from all mirror/mapping locations or original location: image: <image_name> , error: Errors happened when pulling image: Failed to decode layer data stream: Failed to unpack layer: Failed to set permissions for path: /run/kata-containers/image/layers/0/etc/group", details: [], special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } }