This is a copy of https://bugzilla.redhat.com/show_bug.cgi?id=2355948 -- I'm never sure where issues should be reported.

The registry.fedoraproject.org/fedora:rawhide image no longer ships shadow-utils. So when one has a

FROM registry.fedoraproject.org/fedora:rawhide
RUN groupadd ...

in their Dockerfile, like for example https://github.com/freeipa/freeipa-container Dockerfiles have, build of their container image will start to fail.

Version-Release number of selected component (if applicable):

REPOSITORY                         TAG         IMAGE ID      CREATED       SIZE
registry.fedoraproject.org/fedora  rawhide     4b88e8378771  10 hours ago  162 MB

How reproducible:

Deterministic.

Steps to Reproduce:
1. podman run --rm registry.fedoraproject.org/fedora:rawhide groupadd -g 288 kdcproxy

Actual results:

Error: crun: executable filegroupaddnot found in $PATH: No such file or directory: OCI runtime attempted to invoke a command that was not found

Expected results:

No error.

Additional info:

In https://bugzilla.redhat.com/show_bug.cgi?id=2344322#c11 Adam suggested that the container image content is defined in this repo in https://pagure.io/fedora-kiwi-descriptions/blob/rawhide/f/teams/cloud/container.xml.

However, when I diff branches f41 and rawhide or f42 and rawhide, I see no change which would remove shadow-utils from that file. I also did not find any pull request or issue there which would indicate that shadow-utils should be removed.

Is there some bug in the build system?