Skip to content

Inaccessible files in local filesystem layer type cause the indexer to fail the whole process #9

@evgenyz

Description

@evgenyz

The following command ./cvetool report --root-path / --db-path=./matcher.db fails to generate the report.

2025-09-22T13:21:10+02:00 INF matchers created component=libvuln/New matchers=[{"docs":"https://pkg.go.dev/github.com/quay/claircore/suse","name":"suse"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/rhel","name":"rhel"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/aws","name":"aws-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/debian","name":"debian-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/python","name":"python"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/gobin","name":"gobin"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/java","name":"java-maven"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/oracle","name":"oracle"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/rhel/rhcc","name":"rhel-container-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/ruby","name":"ruby-gem"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/ubuntu","name":"ubuntu-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/alpine","name":"alpine-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/photon","name":"photon"}]
2025-09-22T13:21:10+02:00 INF libvuln initialized component=libvuln/New
2025-09-22T13:21:10+02:00 INF registered configured scanners component=libindex/New
2025-09-22T13:21:10+02:00 INF NewLayerScanner: constructing a new layer-scanner component=indexer.NewLayerScanner
2025-09-22T13:21:11+02:00 INF index request start component=libindex/Libindex.Index manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb
2025-09-22T13:21:11+02:00 INF starting scan component=indexer/controller/Controller.Index manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb
2025-09-22T13:21:11+02:00 INF manifest to be scanned component=indexer/controller/Controller.Index manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb state=CheckManifest
2025-09-22T13:21:11+02:00 INF layers fetch start component=indexer/controller/Controller.Index manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb state=FetchLayers
2025-09-22T13:21:11+02:00 INF layers fetch success component=indexer/controller/Controller.Index manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb state=FetchLayers
2025-09-22T13:21:11+02:00 INF layers fetch done component=indexer/controller/Controller.Index manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb state=FetchLayers
2025-09-22T13:21:11+02:00 INF layers scan start component=indexer/controller/Controller.Index manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb state=ScanLayers
2025-09-22T13:21:11+02:00 INF error="python: failed to find delicious egg: open boot/efi: permission denied" component=indexer/LayerScanner.scanLayer kind=package layer=sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb scanner=python state=ScanLayers
2025-09-22T13:21:11+02:00 INF error="gobin: unable to check RPM db: layer \"sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\": python: failed to find delicious egg: open boot/efi: permission denied" component=indexer/LayerScanner.scanLayer kind=package layer=sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb scanner=gobin state=ScanLayers
2025-09-22T13:21:11+02:00 INF error="ruby: failed to find packages: open boot/efi: permission denied" component=indexer/LayerScanner.scanLayer kind=package layer=sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb scanner=ruby state=ScanLayers
2025-09-22T13:21:11+02:00 INF error="open boot/efi: permission denied" component=indexer/LayerScanner.scanLayer kind=package layer=sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb scanner=dpkg-distroless state=ScanLayers
2025-09-22T13:21:11+02:00 INF error="open boot/efi: permission denied" component=indexer/LayerScanner.scanLayer kind=package layer=sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb scanner=java state=ScanLayers
2025-09-22T13:21:11+02:00 INF error="open boot/efi: permission denied" component=indexer/LayerScanner.scanLayer kind=package layer=sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb scanner=dpkg state=ScanLayers
2025-09-22T13:21:11+02:00 INF layers scan done component=indexer/controller/Controller.Index manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb state=ScanLayers
2025-09-22T13:21:11+02:00 ERR error during scan error="failed to scan all layer contents: layer \"sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\": python: failed to find delicious egg: open boot/efi: permission denied" component=indexer/controller/Controller.Index manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb state=ScanLayers
2025-09-22T13:21:11+02:00 INF index request done component=libindex/Libindex.Index manifest=sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb
2025/09/22 13:21:11 error creating index report: failed to scan all layer contents: layer "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa": python: failed to find delicious egg: open boot/efi: permission denied

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions