Actions
Bug #48446
closedContainer build fails with 'container_linux.go:346: starting container process caused "error adding seccomp rule for syscall socket: requested action matches default action of filter"
Status:
Closed
Priority:
Normal
Assignee:
-
% Done:
0%
Source:
Tags:
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
+ make FLAVORS=wip-yuri3-testing-2020-12-02-1604-nautilus,centos,8 CEPH_DEVEL=true OSD_FLAVOR=default RELEASE=wip-yuri3-testing-2020-12-02-1604-nautilus-7d36476 TAG_REGISTRY=ceph-ci IMAGES_TO_BUILD=daemon-base build.parallel
...
STEP 14: ENV OSD_FLAVOR default
--> 8d89faaa352
STEP 15: RUN yum install -y epel-release && yum install -y jq && bash -c ' if [ -n "" ]; then echo "[ganesha]" > /etc/yum.repos.d/ganesha.repo ;
...
ceph-fuse rbd-nbd ${CRIMSON_PACKAGES} && echo 'Packages verified successfully']: time="2020-12-03T00:55:08Z" level=error msg="container_linux.go:346: starting container process caused \"error adding seccomp rule for syscall socket: requested action matches default action of filter\""
container_linux.go:346: starting container process caused "error adding seccomp rule for syscall socket: requested action matches default action of filter"
: exit status 1
This looks like it could be the issue reported here https://github.com/seccomp/containers-golang/issues/28 which may indicate we require a newer version of runc or podman itself.
Running the following command works successfully on Fedora32 (just a test, not particularly helpful).
$ make FLAVORS=wip-yuri3-testing-2020-12-02-1604-nautilus,centos,8 CEPH_DEVEL=true OSD_FLAVOR=default RELEASE=wip-yuri3-testing-2020-12-02-1604-nautilus-7d36476 TAG_REGISTRY=ceph-ci IMAGES_TO_BUILD =daemon-base build.parallel
The same command fails with the issue in the subject line on braggi07
Actions