{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/6980","labels_url":"https://api.github.com/repos/docker/docker/issues/6980/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/6980/comments","events_url":"https://api.github.com/repos/docker/docker/issues/6980/events","html_url":"https://github.com/docker/docker/issues/6980","id":37690623,"number":6980,"title":"cap_set_file not permitted on aufs storage driver only","user":{"login":"jakedt","id":2183986,"avatar_url":"https://avatars.githubusercontent.com/u/2183986?v=3","gravatar_id":"","url":"https://api.github.com/users/jakedt","html_url":"https://github.com/jakedt","followers_url":"https://api.github.com/users/jakedt/followers","following_url":"https://api.github.com/users/jakedt/following{/other_user}","gists_url":"https://api.github.com/users/jakedt/gists{/gist_id}","starred_url":"https://api.github.com/users/jakedt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jakedt/subscriptions","organizations_url":"https://api.github.com/users/jakedt/orgs","repos_url":"https://api.github.com/users/jakedt/repos","events_url":"https://api.github.com/users/jakedt/events{/privacy}","received_events_url":"https://api.github.com/users/jakedt/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels//system/aufs","name":"/system/aufs","color":"fbca04"},{"url":"https://api.github.com/repos/docker/docker/labels/exp/expert","name":"exp/expert","color":"3B8686"},{"url":"https://api.github.com/repos/docker/docker/labels/kind/bug","name":"kind/bug","color":"FF8C94"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":49,"created_at":"2014-07-11T19:37:58Z","updated_at":"2015-05-22T11:24:14Z","closed_at":"2015-04-13T19:37:48Z","body":"When running this minimal Dockerfile:\r\n\r\n```\r\nFROM centos\r\nRUN yum install -y httpd mod_ssl\r\n```\r\n\r\nThe following error occurs only when using the aufs storage driver:\r\n```\r\nInstalling : httpd-2.4.6-17.el7.centos.1.x86_64                           8/9\r\nError unpacking rpm package httpd-2.4.6-17.el7.centos.1.x86_64\r\n \r\nerror: unpacking of archive failed on file /usr/sbin/suexec: cpio: cap_set_file\r\n```\r\n\r\nWhen running with the devicemapper driver the command succeeds successfully. The capabilities listed for the process are identical under both storage drivers and include ```CAP_SETFCAP``` and ```CAP_FOWNER``` which are listed by ```set_cap_file``` as requirements.\r\n\r\nHere is the full list of capabilities which both processes have:\r\n```\r\nCapabilities for `11004': =ep cap_chown,cap_dac_override,cap_fowner,cap_kill,cap_setgid,cap_setuid,cap_setpcap,cap_net_bind_service,cap_net_raw,cap_sys_chroot,cap_mknod,cap_setfcap+i cap_dac_read_search,cap_fsetid,cap_linux_immutable,cap_net_broadcast,cap_net_admin,cap_ipc_lock,cap_ipc_owner,cap_sys_module,cap_sys_rawio,cap_sys_ptrace,cap_sys_pacct,cap_sys_admin,cap_sys_boot,cap_sys_nice,cap_sys_resource,cap_sys_time,cap_sys_tty_config,cap_lease,cap_audit_write,cap_audit_control,cap_mac_override,cap_mac_admin,cap_syslog,cap_wake_alarm,cap_block_suspend-ep\r\n```"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/104628157","html_url":"https://github.com/docker/docker/issues/6980#issuecomment-104628157","issue_url":"https://api.github.com/repos/docker/docker/issues/6980","id":104628157,"user":{"login":"perj","id":224521,"avatar_url":"https://avatars.githubusercontent.com/u/224521?v=3","gravatar_id":"","url":"https://api.github.com/users/perj","html_url":"https://github.com/perj","followers_url":"https://api.github.com/users/perj/followers","following_url":"https://api.github.com/users/perj/following{/other_user}","gists_url":"https://api.github.com/users/perj/gists{/gist_id}","starred_url":"https://api.github.com/users/perj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/perj/subscriptions","organizations_url":"https://api.github.com/users/perj/orgs","repos_url":"https://api.github.com/users/perj/repos","events_url":"https://api.github.com/users/perj/events{/privacy}","received_events_url":"https://api.github.com/users/perj/received_events","type":"User","site_admin":false},"created_at":"2015-05-22T11:24:14Z","updated_at":"2015-05-22T11:24:14Z","body":"Does anyone know if there's some workaround for this when using `docker-machine` ? Specifically `docker-machine create --driver amazonec2 mymachine` is affected by default."}}