April 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1029961] [META] Finalize /bin -> /usr/bin merge
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

https://bugzilla.suse.com/show_bug.cgi?id=1029961 https://bugzilla.suse.com/show_bug.cgi?id=1029961#c72 --- Comment #72 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1029961) was mentioned in https://build.opensuse.org/request/show/884011 Factory / rpm-config-SUSE -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171883] VUL-0: CVE-2020-8025: pcp: outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

https://bugzilla.suse.com/show_bug.cgi?id=1171883 Matthias Gerstner <matthias.gerstner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks|1172227 | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184549] New: GIMP startup asks for root permission
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1184549 Bug ID: 1184549 Summary: GIMP startup asks for root permission Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: P.Suetterlin(a)royac.iac.es QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Since one of the updates the last weeks, when starting GIMP (as user) for the first time after booting, I am confronted with a popup that some systemd service requires root privileges: https://paste.opensuse.org/65474487 (from org.freedesktop.systemd1.manage-units, in case the paste link expires) It's not clear what this is trying to do, but as it is a rpm package, anything needing root access should have been done when installing, no? It seems somewhat similar to an old bug, https://bugzilla.opensuse.org/show_bug.cgi?id=860633, though this time there's no mention what is supposed to be changed... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184326] zypper dup from Leap 15.2 to 15.3 beta: rpm verification keys not installed, rpms installed unverified
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

https://bugzilla.suse.com/show_bug.cgi?id=1184326 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |zypp-maintainers(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184545] New: GNOME Live image: gnome-shell[4841]: Modifiers specified, but DRI is too old
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1184545 Bug ID: 1184545 Summary: GNOME Live image: gnome-shell[4841]: Modifiers specified, but DRI is too old Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs(a)suse.de Reporter: Ulrich.Windl(a)rz.uni-regensburg.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- In the journal of the GNOME live image there are quite a lot of these messages: pr 08 21:10:05 linux.fritz.box systemd[4698]: Started GNOME Terminal Server. Apr 08 21:10:05 linux.fritz.box bijiben-shell-s[5561]: g_object_unref: assertion 'G_IS_OBJECT (object)' failed Apr 08 21:10:05 linux.fritz.box bijiben-shell-s[5561]: g_object_unref: assertion 'G_IS_OBJECT (object)' failed Apr 08 21:10:06 linux.fritz.box bijiben-shell-s[5561]: g_object_unref: assertion 'G_IS_OBJECT (object)' failed Apr 08 21:10:09 linux.fritz.box gnome-shell[4841]: Modifiers specified, but DRI is too old Apr 08 21:10:09 linux.fritz.box systemd[4698]: Started Application launched by gnome-shell. Apr 08 21:10:09 linux.fritz.box gnome-shell[4841]: Modifiers specified, but DRI is too old Apr 08 21:10:09 linux.fritz.box gnome-shell[4841]: Modifiers specified, but DRI is too old Apr 08 21:10:09 linux.fritz.box gnome-shell[4841]: Modifiers specified, but DRI is too old Apr 08 21:10:09 linux.fritz.box gnome-shell[4841]: Modifiers specified, but DRI is too old Apr 08 21:10:09 linux.fritz.box gnome-shell[4841]: Modifiers specified, but DRI is too old Apr 08 21:10:09 linux.fritz.box gnome-shell[4841]: Modifiers specified, but DRI is too old ... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184544] New: GNOME live image: sd-media-keys[2814]: libgnome-volume-control running against PulseAudio 34, but compiled against older 33, ...
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1184544 Bug ID: 1184544 Summary: GNOME live image: sd-media-keys[2814]: libgnome-volume-control running against PulseAudio 34, but compiled against older 33, ... Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs(a)suse.de Reporter: Ulrich.Windl(a)rz.uni-regensburg.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- In journal: Apr 08 21:00:22 localhost gsd-media-keys[2814]: libgnome-volume-control running against PulseAudio 34, but compiled against older 33, report a bug to your distribution Done ;-) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184541] VUL-0: CVE-2021-30184: gnuchess: allows to execute arbitrary code via crafted PGN data via cmd_pgnload() and cmd_pgnreplay()
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

https://bugzilla.suse.com/show_bug.cgi?id=1184541 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184525] container-registry - # reg ls localhost - connect: connection refused
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

https://bugzilla.suse.com/show_bug.cgi?id=1184525 https://bugzilla.suse.com/show_bug.cgi?id=1184525#c1 Thorsten Kukuk <kukuk(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |colony.three(a)protonmail.ch Flags| |needinfo?(colony.three@prot | |onmail.ch) --- Comment #1 from Thorsten Kukuk <kukuk(a)suse.com> --- So your firewall forbids traffic to/between the containers? In this case reg can of course not work if you forbid the communication. Disable your firewall, reload the podman network and try it again. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175826] suitesparse s390x build failure "Illegal instruction" on s390p21 workers
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

https://bugzilla.suse.com/show_bug.cgi?id=1175826 https://bugzilla.suse.com/show_bug.cgi?id=1175826#c8 Ihno Krumreich <ihno(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(pmonrealgonzalez@ | |suse.com) --- Comment #8 from Ihno Krumreich <ihno(a)suse.com> --- Hi Pedro, does the problem still exists? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184525] New: container-registry - # reg ls localhost - connect: connection refused
by bugzilla_noreply＠suse.com 09 Apr '21

09 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1184525 Bug ID: 1184525 Summary: container-registry - # reg ls localhost - connect: connection refused Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Containers Assignee: containers-bugowner(a)suse.de Reporter: colony.three(a)protonmail.ch QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0 Build Identifier: After installing container-registry-systemd and reg as per https://kubic.opensuse.org/blog/2019-11-15-private-registry/ ... cannot connect to the registry, even locally. # systemctl status container-registry �� container-registry.service - Container Registry Loaded: loaded (/usr/lib/systemd/system/container-registry.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2021-04-08 10:04:58 PDT; 10min ago Docs: https://docs.docker.com/registry/ Process: 2243 ExecStartPre=/usr/bin/podman stop container-registry (code=exited, status=125) Process: 2270 ExecStartPre=/usr/bin/podman rm container-registry (code=exited, status=1/FAILURE) Process: 2296 ExecStartPre=/usr/bin/podman pull ${REGISTRY_IMAGE_PATH} (code=exited, status=0/SUCCESS) Process: 2326 ExecStartPre=/bin/bash -c rm -rf /var/lib/container-registry/*; mkdir -p /var/lib/container-registry; if [ -d /usr/etc/registry ]; then cp -a /usr/etc/registry/* /var/lib/container-registry/; fi; cp -a /etc/registry/* /var/lib/container-registry/ (code> Process: 2330 ExecStart=/usr/bin/podman run -d --conmon-pidfile //run/container-registry.service-pid --rm -v /var/lib/container-registry:/etc/registry -p ${EXTERNAL_PORT}:5000 -v ${STORAGE_DIR}:/var/lib/registry --name container-registry ${REGISTRY_IMAGE_PATH} (code> Main PID: 2431 (conmon) Tasks: 2 (limit: 2338) CGroup: /system.slice/container-registry.service ��2431 /usr/bin/conmon --api-version 1 -c f037b1c865dc40c87bdec35c7be2bb3e51d76e23b8c8184ad6c2ccd357752507 -u f037b1c865dc40c87bdec35c7be2bb3e51d76e23b8c8184ad6c2ccd357752507 -r /usr/bin/runc -b /var/lib/containers/storage/btrfs-containers/f037b1c865dc40c87> Apr 08 10:04:57 aquarius.darkmtter.org podman[2296]: Copying config sha256:dae66e5d66772b3e97f1402e060da4c7328b71095a1540b8a44b808bf216056e Apr 08 10:04:57 aquarius.darkmtter.org podman[2296]: Writing manifest to image destination Apr 08 10:04:57 aquarius.darkmtter.org podman[2296]: Storing signatures Apr 08 10:04:57 aquarius.darkmtter.org podman[2296]: 2021-04-08 10:04:57.676419895 -0700 PDT m=+2.559463220 image pull Apr 08 10:04:57 aquarius.darkmtter.org podman[2296]: dae66e5d66772b3e97f1402e060da4c7328b71095a1540b8a44b808bf216056e Apr 08 10:04:57 aquarius.darkmtter.org podman[2330]: 2021-04-08 10:04:57.873739511 -0700 PDT m=+0.150194062 container create f037b1c865dc40c87bdec35c7be2bb3e51d76e23b8c8184ad6c2ccd357752507 (image=registry.opensuse.org/opensuse/registry:latest, name=container-registry, > Apr 08 10:04:58 aquarius.darkmtter.org podman[2330]: 2021-04-08 10:04:58.200936038 -0700 PDT m=+0.477390639 container init f037b1c865dc40c87bdec35c7be2bb3e51d76e23b8c8184ad6c2ccd357752507 (image=registry.opensuse.org/opensuse/registry:latest, name=container-registry, or> Apr 08 10:04:58 aquarius.darkmtter.org podman[2330]: 2021-04-08 10:04:58.265545323 -0700 PDT m=+0.541999899 container start f037b1c865dc40c87bdec35c7be2bb3e51d76e23b8c8184ad6c2ccd357752507 (image=registry.opensuse.org/opensuse/registry:latest, name=container-registry, o> Apr 08 10:04:58 aquarius.darkmtter.org podman[2330]: f037b1c865dc40c87bdec35c7be2bb3e51d76e23b8c8184ad6c2ccd357752507 Apr 08 10:04:58 aquarius.darkmtter.org systemd[1]: Started Container Registry. # lsof -i -n -w -P # lsof -i -n -w -P COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME ... conmon 2431 root 5u IPv4 39038 0t0 TCP *:443 (LISTEN) Reproducible: Always Steps to Reproduce: 1.Follow instructions at https://kubic.opensuse.org/blog/2019-11-15-private-registry/ 2. 3. Actual Results: Above. Firewall blocks: [Thu Apr 8 09:49:56 2021] [nftables] Inbound Denied: IN=ens3 OUT= MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.2.1.111 LEN=48 TOS=0x00 PREC=0x00 TTL=64 ID=757 DF PROTO=TCP SPT=39172 DPT=80 SEQ=2527182805 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:50:11 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=59521 DF PROTO=TCP SPT=47366 DPT=5000 SEQ=832946275 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:50:12 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=59522 DF PROTO=TCP SPT=47366 DPT=5000 SEQ=832946275 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:50:14 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=59523 DF PROTO=TCP SPT=47366 DPT=5000 SEQ=832946275 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:50:18 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=59524 DF PROTO=TCP SPT=47366 DPT=5000 SEQ=832946275 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:50:26 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=59525 DF PROTO=TCP SPT=47366 DPT=5000 SEQ=832946275 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:50:41 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=14846 DF PROTO=TCP SPT=47368 DPT=5000 SEQ=739058878 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:50:42 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=14847 DF PROTO=TCP SPT=47368 DPT=5000 SEQ=739058878 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:50:44 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=14848 DF PROTO=TCP SPT=47368 DPT=5000 SEQ=739058878 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:50:48 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=14849 DF PROTO=TCP SPT=47368 DPT=5000 SEQ=739058878 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:50:57 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=14850 DF PROTO=TCP SPT=47368 DPT=5000 SEQ=739058878 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:51:11 2021] [nftables] Inbound Denied: IN=ens3 OUT= MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.2.1.111 LEN=48 TOS=0x00 PREC=0x00 TTL=64 ID=63036 DF PROTO=TCP SPT=39180 DPT=80 SEQ=3463252446 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:51:12 2021] [nftables] Inbound Denied: IN=ens3 OUT= MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.2.1.111 LEN=48 TOS=0x00 PREC=0x00 TTL=64 ID=63037 DF PROTO=TCP SPT=39180 DPT=80 SEQ=3463252446 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:51:14 2021] [nftables] Inbound Denied: IN=ens3 OUT= MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.2.1.111 LEN=48 TOS=0x00 PREC=0x00 TTL=64 ID=63038 DF PROTO=TCP SPT=39180 DPT=80 SEQ=3463252446 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:51:19 2021] [nftables] Inbound Denied: IN=ens3 OUT= MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.2.1.111 LEN=48 TOS=0x00 PREC=0x00 TTL=64 ID=63039 DF PROTO=TCP SPT=39180 DPT=80 SEQ=3463252446 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:51:27 2021] [nftables] Inbound Denied: IN=ens3 OUT= MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.2.1.111 LEN=48 TOS=0x00 PREC=0x00 TTL=64 ID=63040 DF PROTO=TCP SPT=39180 DPT=80 SEQ=3463252446 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:51:41 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=56148 DF PROTO=TCP SPT=47374 DPT=5000 SEQ=1296752752 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:51:42 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=56149 DF PROTO=TCP SPT=47374 DPT=5000 SEQ=1296752752 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:51:44 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=56150 DF PROTO=TCP SPT=47374 DPT=5000 SEQ=1296752752 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:51:48 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=56151 DF PROTO=TCP SPT=47374 DPT=5000 SEQ=1296752752 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:51:57 2021] [nftables] Forward Denied: IN=ens3 OUT=cni-podman0 MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.88.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=56152 DF PROTO=TCP SPT=47374 DPT=5000 SEQ=1296752752 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:52:11 2021] [nftables] Inbound Denied: IN=ens3 OUT= MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.2.1.111 LEN=48 TOS=0x00 PREC=0x00 TTL=64 ID=43466 DF PROTO=TCP SPT=39184 DPT=80 SEQ=3270771517 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:52:12 2021] [nftables] Inbound Denied: IN=ens3 OUT= MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.2.1.111 LEN=48 TOS=0x00 PREC=0x00 TTL=64 ID=43467 DF PROTO=TCP SPT=39184 DPT=80 SEQ=3270771517 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:52:14 2021] [nftables] Inbound Denied: IN=ens3 OUT= MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.2.1.111 LEN=48 TOS=0x00 PREC=0x00 TTL=64 ID=43468 DF PROTO=TCP SPT=39184 DPT=80 SEQ=3270771517 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:52:18 2021] [nftables] Inbound Denied: IN=ens3 OUT= MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.2.1.111 LEN=48 TOS=0x00 PREC=0x00 TTL=64 ID=43469 DF PROTO=TCP SPT=39184 DPT=80 SEQ=3270771517 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 09:52:27 2021] [nftables] Inbound Denied: IN=ens3 OUT= MACSRC=52:54:00:dd:d2:f0 MACDST=52:54:00:7b:e5:d4 MACPROTO=0800 SRC=10.2.1.102 DST=10.2.1.111 LEN=48 TOS=0x00 PREC=0x00 TTL=64 ID=43470 DF PROTO=TCP SPT=39184 DPT=80 SEQ=3270771517 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B401030307) [Thu Apr 8 10:01:26 2021] [nftables] Forward Denied: IN=cni-podman0 OUT=cni-podman0 PHYSIN=vetha157e952 PHYSOUT=vetha157e952 MACSRC=a6:8d:49:07:63:3d MACDST=33:33:00:00:00:02 MACPROTO=86dd SRC=fe80:0000:0000:0000:a48d:49ff:fe07:633d DST=ff02:0000:0000:0000:0000:0000:0000:0002 LEN=56 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=133 CODE=0 [Thu Apr 8 10:04:47 2021] cni-podman0: port 1(vetha157e952) entered disabled state Expected Results: It to work. No idea whether container-registry should listen on 80, 443, or 5000, but no matter which I set it to, "Connection refused" Adding -d for 'debug' adds no info, and there is no container-registry log so I'm blind. -- You are receiving this mail because: You are on the CC list for the bug.

1 1