Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[master] rpm: disable seccomp to prevent tar EPERM (Fedora 40 ppc64le on Debian) #1013

Merged
merged 1 commit into from
Apr 12, 2024

Commits on Apr 12, 2024

  1. rpm: disable seccomp to prevent tar EPERM (Fedora 40 ppc64le on Debian)

    commit 07b5d90 disabled seccomp for the
    deb-builds because `chmod` failed tar was failing with an EPERM (Ubuntu
    24.04 armhf on 20.04 host).
    
    It looks like the same problem happens when running Fedora 40 on a Debian
    bookworm host on ppc64le.
    
    That issue was confirmed to be related to `fchmodat2(2)`, which is a new
    syscall that's not supported on the host, and therefore gets the seccomp's
    default EPERM;
    
        fchmodat2(AT_FDCWD, "docker", 0775, AT_SYMLINK_NOFOLLOW) = -1 EPERM (Operation not permitted)
        tar: docker: Cannot change mode to rwxrwxr-x: Operation not permitted
        tar: Exiting with failure status due to previous errors
    
    Ultimately we need to update the libseccomp profile to use ENOSYS (see
    moby ticket 42871) to allow it to degrade gracefully;
    
        fchmodat2(AT_FDCWD, "docker", 0775, AT_SYMLINK_NOFOLLOW) = -1 ENOSYS (Function not implemented)
    
    Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
    thaJeztah committed Apr 12, 2024
    Configuration menu
    Copy the full SHA
    01886f5 View commit details
    Browse the repository at this point in the history