{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/6980","labels_url":"https://api.github.com/repos/docker/docker/issues/6980/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/6980/comments","events_url":"https://api.github.com/repos/docker/docker/issues/6980/events","html_url":"https://github.com/docker/docker/issues/6980","id":37690623,"number":6980,"title":"cap_set_file not permitted on aufs storage driver only","user":{"login":"jakedt","id":2183986,"avatar_url":"https://avatars.githubusercontent.com/u/2183986?v=3","gravatar_id":"","url":"https://api.github.com/users/jakedt","html_url":"https://github.com/jakedt","followers_url":"https://api.github.com/users/jakedt/followers","following_url":"https://api.github.com/users/jakedt/following{/other_user}","gists_url":"https://api.github.com/users/jakedt/gists{/gist_id}","starred_url":"https://api.github.com/users/jakedt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jakedt/subscriptions","organizations_url":"https://api.github.com/users/jakedt/orgs","repos_url":"https://api.github.com/users/jakedt/repos","events_url":"https://api.github.com/users/jakedt/events{/privacy}","received_events_url":"https://api.github.com/users/jakedt/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels/area/storage/aufs","name":"area/storage/aufs","color":"fbca04"},{"url":"https://api.github.com/repos/docker/docker/labels/exp/expert","name":"exp/expert","color":"3B8686"},{"url":"https://api.github.com/repos/docker/docker/labels/kind/bug","name":"kind/bug","color":"FF8C94"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":60,"created_at":"2014-07-11T19:37:58Z","updated_at":"2015-10-20T19:58:17Z","closed_at":"2015-04-13T19:37:48Z","body":"When running this minimal Dockerfile:\r\n\r\n```\r\nFROM centos\r\nRUN yum install -y httpd mod_ssl\r\n```\r\n\r\nThe following error occurs only when using the aufs storage driver:\r\n```\r\nInstalling : httpd-2.4.6-17.el7.centos.1.x86_64                           8/9\r\nError unpacking rpm package httpd-2.4.6-17.el7.centos.1.x86_64\r\n \r\nerror: unpacking of archive failed on file /usr/sbin/suexec: cpio: cap_set_file\r\n```\r\n\r\nWhen running with the devicemapper driver the command succeeds successfully. The capabilities listed for the process are identical under both storage drivers and include ```CAP_SETFCAP``` and ```CAP_FOWNER``` which are listed by ```set_cap_file``` as requirements.\r\n\r\nHere is the full list of capabilities which both processes have:\r\n```\r\nCapabilities for `11004': =ep cap_chown,cap_dac_override,cap_fowner,cap_kill,cap_setgid,cap_setuid,cap_setpcap,cap_net_bind_service,cap_net_raw,cap_sys_chroot,cap_mknod,cap_setfcap+i cap_dac_read_search,cap_fsetid,cap_linux_immutable,cap_net_broadcast,cap_net_admin,cap_ipc_lock,cap_ipc_owner,cap_sys_module,cap_sys_rawio,cap_sys_ptrace,cap_sys_pacct,cap_sys_admin,cap_sys_boot,cap_sys_nice,cap_sys_resource,cap_sys_time,cap_sys_tty_config,cap_lease,cap_audit_write,cap_audit_control,cap_mac_override,cap_mac_admin,cap_syslog,cap_wake_alarm,cap_block_suspend-ep\r\n```"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/149683489","html_url":"https://github.com/docker/docker/issues/6980#issuecomment-149683489","issue_url":"https://api.github.com/repos/docker/docker/issues/6980","id":149683489,"user":{"login":"MBoretto","id":6514506,"avatar_url":"https://avatars.githubusercontent.com/u/6514506?v=3","gravatar_id":"","url":"https://api.github.com/users/MBoretto","html_url":"https://github.com/MBoretto","followers_url":"https://api.github.com/users/MBoretto/followers","following_url":"https://api.github.com/users/MBoretto/following{/other_user}","gists_url":"https://api.github.com/users/MBoretto/gists{/gist_id}","starred_url":"https://api.github.com/users/MBoretto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MBoretto/subscriptions","organizations_url":"https://api.github.com/users/MBoretto/orgs","repos_url":"https://api.github.com/users/MBoretto/repos","events_url":"https://api.github.com/users/MBoretto/events{/privacy}","received_events_url":"https://api.github.com/users/MBoretto/received_events","type":"User","site_admin":false},"created_at":"2015-10-20T19:58:17Z","updated_at":"2015-10-20T19:58:17Z","body":"I got this issue when try to install wireshark on a fedora 22 container.\r\nWhat can I do?\r\n\r\nRunning transaction check\r\nTransaction check succeeded.\r\nRunning transaction test\r\nTransaction test succeeded.\r\nRunning transaction\r\nwarning: Unable to get systemd shutdown inhibition lock\r\n  Installing  : wireshark-1.12.7-2.fc22.x86_64                                                                                                                                                                   \r\nError unpacking rpm package wireshark-1.12.7-2.fc22.x86_64\r\nerror: unpacking of archive failed on file /usr/sbin/dumpcap;56269be8: cpio: cap_set_file\r\n\r\n\r\n\r\n**Docker version**\r\nClient:\r\n Version:      1.8.2\r\n API version:  1.20\r\n Go version:   go1.4.2\r\n Git commit:   0a8c2e3\r\n Built:        Thu Sep 10 19:19:00 UTC 2015\r\n OS/Arch:      linux/amd64\r\n\r\nServer:\r\n Version:      1.8.2\r\n API version:  1.20\r\n Go version:   go1.4.2\r\n Git commit:   0a8c2e3\r\n Built:        Thu Sep 10 19:19:00 UTC 2015\r\n OS/Arch:      linux/amd64\r\n\r\n\r\n**docker info**\r\nContainers: 48\r\nImages: 15\r\nStorage Driver: aufs\r\n Root Dir: /var/lib/docker/aufs\r\n Backing Filesystem: extfs\r\n Dirs: 111\r\n Dirperm1 Supported: false\r\nExecution Driver: native-0.2\r\nLogging Driver: json-file\r\nKernel Version: 3.13.0-37-generic\r\nOperating System: Ubuntu 14.04 LTS\r\nCPUs: 4\r\nTotal Memory: 7.705 GiB\r\nName: feinfren\r\nID: QXUH:OMU2:QZM3:62T2:CGTG:2RXE:QT7V:FXDQ:2IDW:Q4IH:JSAD:UR4W\r\nWARNING: No swap limit support\r\n"}}