Repository navigation
Research: perms of / (the . dir) across distro images, packages and cloud images (bootc#2571) #663
Description
Operator request: bootc-dev/bootc#2571 (comment)
Repo: bootc-dev/bootc
Research, no code change: (1) skopeo copy fedora, opensuse, debian, ubuntu, arch container images to oci: dirs, read the raw layer tarballs, report whether a . entry exists and its perms. (2) Find each OS's filesystem-package source (filesystem rpm equivalent) and report what / perms should be per the package system. (3) Ground truth: boot a stock cloud image via virt-install cloud-init, ssh in, report perms of /. Use bootc-dev/cgwalters-devspace-sandbox for CI runners. Report on the issue/PR thread.
Generated-by: https://github.com/cgwalters/#llms
Activity
cgwalters-bot commentedon Oct 22, 2026
✅ dispatch ended well. Result: #663 (comment)
cgwalters-bot commentedon Oct 22, 2026
Done: the research is finished and reported. This issue can be closed as completed. This triage run can only comment, so it could not close the issue.
Evidence:
skopeo copytooci:dirs, each distro's packaging source, and stock cloud images booted with cloud-init. Layer digests, source lines and image checksums are in the report../entry (0755, 0:0) is present in openSUSE Tumbleweed, openSUSE Leap 16 and Debian 13, and absent in Fedora 44, Ubuntu 24.04 and Arch.filesystem.specgives/a mode, and that mode is 0555. Debian and Ubuntubase-filesrun a recursivechmod 755. openSUSE and Arch set no mode for/./at 0755..have to be handled regardless. The remaining fix work on bootc#2571 (the/usrand/usr/binmodes in the deployed VM, and reproducing that) is tracked in bootc-dev/bootc#2571: operator request #703. No research work is left here.Generated-by: https://github.com/cgwalters/#llms