mirror of
https://github.com/kernelkit/infix.git
synced 2026-08-01 05:13:01 +02:00
Richard Alpe
bcc2df7e20
The 'command' leaf is config, with a strict pattern that doesn't allow
'&', quotes or pipes. Yanger was populating it from podman's full,
untruncated container command -- so any container whose entrypoint
uses shell metacharacters (e.g. sh -c "... && ...") failed YANG
validation.
The symptom: every operational read of /infix-containers:containers
returns SR_ERR_INTERNAL, which in turn fails the whole get-data on
the operational datastore. This breaks case/misc/operational_all and
any RESTCONF/NETCONF read that touches containers.
This was introduced in 59028c4 ("Fix #1466: 'show container' shows no
output"), which added the operational, pattern-less 'cmdline' leaf
but left the old 'command' assignment in place. Drop it -- 'cmdline'
already carries the full command line, and 'command' belongs to
running config.
Note: the failure can look intermittent across test runs because
podman storage is persistent. It only triggers once a container with
a bad-pattern command ends up in 'podman ps -a', including stale or
exited leftovers from earlier runs.
Signed-off-by: Richard Alpe <richard@bit42.se>
61 lines
1.8 KiB
JSON
61 lines
1.8 KiB
JSON
{
|
|
"infix-containers:containers": {
|
|
"container": [
|
|
{
|
|
"name": "container-B",
|
|
"id": "78d28082c2e5d494c82aa181c95118ce498e25930ad9e288ba010257ca336378",
|
|
"image": "localhost/curios-httpd-oci-amd64-v24.11.0:latest",
|
|
"image-id": "d6930d60a73be9980f8e19b4b4f63586a6d3492178e20bea962e4e9b8c654033",
|
|
"running": true,
|
|
"status": "Up About a minute",
|
|
"cmdline": "/usr/bin/tini -- /usr/sbin/httpd -f -v",
|
|
"network": {
|
|
"interface": [
|
|
{
|
|
"name": "veth2a"
|
|
},
|
|
{
|
|
"name": "veth3a"
|
|
}
|
|
],
|
|
"publish": []
|
|
}
|
|
},
|
|
{
|
|
"name": "container-A",
|
|
"id": "3451cfceca4eee1091c1dfedece2faee99bc8a729e781799d9c0b4368a31d86d",
|
|
"image": "localhost/curios-httpd-oci-amd64-v24.11.0:latest",
|
|
"image-id": "d6930d60a73be9980f8e19b4b4f63586a6d3492178e20bea962e4e9b8c654033",
|
|
"running": true,
|
|
"status": "Up About a minute",
|
|
"cmdline": "/usr/bin/tini -- /usr/sbin/httpd -f -v -p 91",
|
|
"network": {
|
|
"interface": [
|
|
{
|
|
"name": "veth0a"
|
|
},
|
|
{
|
|
"name": "veth1a"
|
|
}
|
|
],
|
|
"publish": [
|
|
"34515:91/tcp"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"name": "firewall",
|
|
"id": "4e7c3daeba15546e7640014b9ee46e389737ed36583e5cb2f8b75a07a82e8523",
|
|
"image": "localhost/curios-nftables-oci-amd64-v24.11.0:latest",
|
|
"image-id": "7a3cc502436250357a6664100a600f306334b4d7203890b85b7ea9b8da6b5665",
|
|
"running": true,
|
|
"status": "Up About a minute",
|
|
"cmdline": "/usr/bin/tini -- /usr/sbin/nft-helper /etc/nftables.conf",
|
|
"network": {
|
|
"host": true
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|