docker icon indicating copy to clipboard operation
docker copied to clipboard

Regression issue in v28.5.2

Open hosamaly opened this issue 3 months ago • 2 comments

We use the atmoz/sftp image as a Testcontainer in CI tests via docker:dind. Since the release of v28.5.2, we've been getting a peculiar error:

SFTP error (SSH_FX_PERMISSION_DENIED): Permission denied
	at app//org.apache.sshd.sftp.client.impl.AbstractSftpClient.throwStatusException(AbstractSftpClient.java:277)
	at app//org.apache.sshd.sftp.client.impl.AbstractSftpClient.checkHandleResponse(AbstractSftpClient.java:299)
	at app//org.apache.sshd.sftp.client.impl.AbstractSftpClient.checkHandle(AbstractSftpClient.java:290)
	at app//org.apache.sshd.sftp.client.impl.AbstractSftpClient.open(AbstractSftpClient.java:589)
	at app//org.apache.sshd.sftp.client.impl.SftpOutputStreamAsync.<init>(SftpOutputStreamAsync.java:63)
	at app//org.apache.sshd.sftp.client.impl.AbstractSftpClient.write(AbstractSftpClient.java:1213)
	at app//org.apache.sshd.sftp.client.SftpClient.write(SftpClient.java:940)

We're getting this error whether the application is reading, writing, or listing files, as you can see in the list of failed tests below.

Failing tests

Reverting to docker:28.5.1-dind fixes the issue and allows our CI pipeline to pass.

hosamaly avatar Nov 06 '25 13:11 hosamaly

The container is created using the Testcontainers library in Java:

import org.testcontainers.containers.GenericContainer;

new GenericContainer<>("atmoz/sftp:alpine")
        .withExposedPorts(22)
        .withTmpFs(Map.of("/home/user/sftp-share", "rw"))
        .withCommand("user:password:::sftp-share")
        .start();

hosamaly avatar Nov 06 '25 14:11 hosamaly

I bet this is https://github.com/opencontainers/runc/issues/4971 :eyes:

tianon avatar Nov 06 '25 19:11 tianon