Podman broken in later versions of ISO

[afbjorklund]

Podman 3.4.2 does not support compiling with go1.19.3, so it is broken (segfaults) in ISO versions 1.27.0 and 1.28.0

The podman version needs to be bumped to 3.4.7, which upgrades the affected github.com/modern-go/reflect2 library.

podman load segfaults

podman pull segfaults

$ sudo podman pull alpine
Resolving "alpine" using unqualified-search registries (/etc/containers/registries.conf)
Trying to pull [docker.io/library/alpine:latest](http://docker.io/library/alpine:latest)...
Getting image source signatures
Copying blob c158987b0551 done  
unexpected fault address 0x0
fatal error: fault
[signal SIGSEGV: segmentation violation code=0x80 addr=0x0 pc=0x4734ff]

---

The version in the KIC image still works, since it is built with an older compiler:

docker@docker:~$ sudo podman version
Version:      3.4.2
API Version:  3.4.2
Go Version:   go1.15.2
Built:        Thu Jan  1 00:00:00 1970
OS/Arch:      linux/amd64

[afbjorklund]

This also fails, the same way:

minikube start --container-runtime=cri-o --vm=true --preload=false

[mqasimsarfraz]

@afbjorklund thanks for creating an issue. I can give a try to upgrade podman. Would bumping the version in packages would be enough or do you think we need to do more?

[mqasimsarfraz]

I created an ISO with these changes and the issue seems to be fixed:

$ sudo podman version        
Version:      3.4.7
API Version:  3.4.7
Go Version:   go1.19.3
Git Commit:   74d67f5d43bcd322a4fb11a7b58eced866f9d0b9
Built:        Fri Dec 30 11:08:09 2022
OS/Arch:      linux/amd64

$ sudo podman pull alpine
Resolving "alpine" using unqualified-search registries (/etc/containers/registries.conf)
Trying to pull docker.io/library/alpine:latest...
Getting image source signatures
Copying blob c158987b0551 done  
Copying config 49176f190c done  
Writing manifest to image destination
Storing signatures
49176f190c7e9cdb51ac85ab6c6d5e4512352218190cd69b08e6fd803ffbf3da
$ sudo podman image ls
REPOSITORY                TAG         IMAGE ID      CREATED      SIZE
docker.io/library/alpine  latest      49176f190c7e  5 weeks ago  7.34 MB

[afbjorklund]

Would be nice to upgrade KIC as well, but that requires building packages.

The existing ones are not updated anymore for Ubuntu 20.04, stops at 3.4.2

[mqasimsarfraz]

Would be nice to upgrade KIC as well

+1, Currently, it seem bit hard to setup crio with docker unless you upgrade docker to pre-release. Which makes using ISO first choice.

The existing ones are not updated anymore for Ubuntu 20.04, stops at 3.4.2

That isn't great. I thought moving to Ubuntu 22.04 might help but even that is shipped with 3.4.4 :(

but that requires building packages.

Do we already have some setup to build packages? I will be happy to propose something around that!

[afbjorklund]

Do we already have some setup to build packages?

We were relying on the Kubic project for the packages, but it died.
https://build.opensuse.org/project/show/devel:kubic:libcontainers:stable

Anyway, this crash bug is not in the deb version.