Skip to content

Images: install util-linux-extra on debian, libkrunfw on fedora#17

Merged
Luap99 merged 1 commit into
podman-container-tools:mainfrom
nalind:debian-util-linux-extra
Jun 15, 2026
Merged

Images: install util-linux-extra on debian, libkrunfw on fedora#17
Luap99 merged 1 commit into
podman-container-tools:mainfrom
nalind:debian-util-linux-extra

Conversation

@nalind

@nalind nalind commented Jun 10, 2026

Copy link
Copy Markdown
Contributor

Tests in the area of confidential workloads benefit from having libkrunfw installed.
pivot_root, which buildah's integration tests call, was moved to a subpackage.

@Luap99

Luap99 commented Jun 11, 2026

Copy link
Copy Markdown
Member

Sorry I missed this before I opened #20 which adds some more stuff

Tests in the area of confidential workloads benefit from having libkrunfw installed.

Can you expend which tests needs that actually, I could not find any reference in buildah who needs this?

 $ rpm -ql libkrunfw
/usr/lib64/libkrunfw.so.5
/usr/lib64/libkrunfw.so.5.3.0

I only see buildah trying to use libkrunfw-sev.so which would be a different package?

$ rpm -ql libkrunfw-sev
/usr/bin/krunfw_measurement
/usr/lib64/libkrunfw-sev.so.5
/usr/lib64/libkrunfw-sev.so.5.3.0

Without an attestation server, we still have to skip over the
attestation step when converting an image to a confidential workload or
committing one directly.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
@nalind nalind force-pushed the debian-util-linux-extra branch from 8266b4e to d7a83dd Compare June 15, 2026 15:12
@nalind

nalind commented Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

Sorry I missed this before I opened #20 which adds some more stuff

No problem, dropping that one from this PR.

Tests in the area of confidential workloads benefit from having libkrunfw installed.

Can you expend which tests needs that actually, I could not find any reference in buildah who needs this?

 $ rpm -ql libkrunfw
/usr/lib64/libkrunfw.so.5
/usr/lib64/libkrunfw.so.5.3.0

I only see buildah trying to use libkrunfw-sev.so which would be a different package?

$ rpm -ql libkrunfw-sev
/usr/bin/krunfw_measurement
/usr/lib64/libkrunfw-sev.so.5
/usr/lib64/libkrunfw-sev.so.5.3.0

Ugh, you're right, that should be libkrunfw-sev. This was a guess based on https://github.com/podman-container-tools/buildah/blob/main/contrib/ci/runner.sh#L54. We don't test krun, specifically, either, so it's possible that we don't need either package. Updated the PR to install both, but I wouldn't be upset if this ended up closed without being merged.

@Luap99 Luap99 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Luap99 Luap99 merged commit 2c29467 into podman-container-tools:main Jun 15, 2026
6 checks passed
@nalind nalind deleted the debian-util-linux-extra branch June 15, 2026 17:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants