Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fail to build image with --isolation chroot #1568

Closed
42wim opened this issue May 2, 2019 · 42 comments
Closed

Fail to build image with --isolation chroot #1568

42wim opened this issue May 2, 2019 · 42 comments

Comments

@42wim
Copy link
Contributor

42wim commented May 2, 2019

Description

Fails to build an image using --isolation chroot (works fine with default setting)

Steps to reproduce the issue:

  1. Use Dockerfile
FROM centos:7
RUN yum -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
RUN yum -y install npm
RUN npm version
  1. Run buildah bud --isolation chroot .

Describe the results you received:

npm version fails

STEP 4: RUN npm version
module.js:478
    throw err;
    ^

Error: Cannot find module 'npmlog'
    at Function.Module._resolveFilename (module.js:476:15)
    at Function.Module._load (module.js:424:25)
    at Module.require (module.js:504:17)
    at require (internal/module.js:20:19)
    at /usr/bin/npm:19:13
    at Object.<anonymous> (/usr/bin/npm:75:3)
    at Module._compile (module.js:577:32)
    at Object.Module._extensions..js (module.js:586:10)
    at Module.load (module.js:494:32)
    at tryModuleLoad (module.js:453:12)
subprocess exited with status 1
subprocess exited with status 1
error building at STEP "RUN npm version": exit status 1

Describe the results you expected:
The output of buildah bud .

STEP 4: RUN npm version
{ npm: '3.10.10',
  ares: '1.10.1-DEV',
  http_parser: '2.8.0',
  icu: '50.1.2',
  modules: '48',
  napi: '3',
  node: '6.16.0',
  openssl: '1.0.2k-fips',
  uv: '1.27.0',
  v8: '5.1.281.111',
  zlib: '1.2.7' }
STEP 5: COMMIT
Getting image source signatures
Copying blob d69483a6face skipped: already exists
Copying blob b89848b8c540 done
Copying config 1e8125779f done
Writing manifest to image destination
Storing signatures
--> 1e8125779fdeb3c0b15bda39773271835bd90e223f6d846ee6e90b5c477b1f1a

Output of buildah version:

Running 1.8.1 but same issue on 1.6 and 1.7.x

Version:         1.8.1
Go Version:      go1.12.4
Image Spec:      1.0.0
Runtime Spec:    1.0.0
CNI Spec:        0.4.0
libcni Version:  v0.7.0-rc2
Git Commit:      3b1400e
Built:           Thu May  2 10:42:49 2019
OS/Arch:         linux/amd64

Tested on centos 7.5
Linux test-1 3.10.0-862.14.4.el7.x86_64 #1 SMP Wed Sep 26 15:12:11 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

And centos 7.6
Linux test-2 5.0.5-1.el7.elrepo.x86_64 #1 SMP Wed Mar 27 13:30:25 EDT 2019 x86_64 x86_64 x86_64 GNU/Linux

@rhatdan
Copy link
Member

rhatdan commented May 2, 2019

Any idea what NPM is doing?

@TomSweeneyRedHat
Copy link
Member

Thanks @42wim for the issue. Just to make sure, were you running as a root or non-root user?

@42wim
Copy link
Contributor Author

42wim commented May 2, 2019

Running as root user on all tests.
First test was in a docker container hence the --isolation chroot, other tests where on the different hosts.

Also just did the test as a non-root user (only on the system with 5.x kernel) with exactly the same result

  • buildah bud . works fine
  • buildah bud --isolation chroot . fails

@42wim
Copy link
Contributor Author

42wim commented May 2, 2019

Any npm command fails btw, not only the version.
Tried to debug it myself but got stuck.

@rhatdan
Copy link
Member

rhatdan commented May 2, 2019

Most likely something to do with the way /proc or /sys is setup in the chroot. It would be really helpful if we could see exactly what is failing in npm

Could you add strace to your container and then run strace npm version
And see if that gives us anything useful.

@rhatdan
Copy link
Member

rhatdan commented May 2, 2019

BTW This worked for me.

buildah bud --isolation chroot /tmp/
...
{ npm: '3.10.10',
  ares: '1.10.1-DEV',
  http_parser: '2.8.0',
  icu: '50.1.2',
  modules: '48',
  napi: '3',
  node: '6.16.0',
  openssl: '1.0.2k-fips',
  uv: '1.27.0',
  v8: '5.1.281.111',
  zlib: '1.2.7' }
STEP 5: COMMIT
Getting image source signatures
Copying blob d69483a6face skipped: already exists
Copying blob 33415a147f41 done
Copying config 4b5a980aaa done
Writing manifest to image destination
Storing signatures
--> 4b5a980aaa3e04d6533447fa2fff23f2b61a435bc01f9e171f724144f4e5e769

@rhatdan
Copy link
Member

rhatdan commented May 2, 2019

buildah version
Version: 1.8.0
Go Version: go1.12.2
Image Spec: 1.0.0
Runtime Spec: 1.0.0
CNI Spec: 0.4.0
libcni Version:
Git Commit:
Built: Wed Dec 31 19:00:00 1969
OS/Arch: linux/amd64

@42wim
Copy link
Contributor Author

42wim commented May 2, 2019

Is this what you mean?
Doesn't give much info

FROM centos:7
RUN yum -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
RUN yum -y install npm strace
RUN strace -s4000 -o /tmp/strace/output -ff npm version
buildah bud -v $PWD/output:/tmp/strace --isolation chroot .
ls -al output/*
-rw-r--r-- 1 root root 28 May  2 23:09 output/output
-rw-r--r-- 1 root root 22 May  2 23:11 output/output.20842
# cat output/*
19543 +++ exited with 1 +++
+++ exited with 1 +++

@42wim
Copy link
Contributor Author

42wim commented May 2, 2019

Didn't try on 1.8.0 but juist build it, same results for me (as in still failing)

Version:         1.8.0
Go Version:      go1.12.4
Image Spec:      1.0.0
Runtime Spec:    1.0.0
CNI Spec:        0.4.0
libcni Version:  v0.7.0-rc2
Git Commit:      4aa16cf
Built:           Thu May  2 23:25:13 2019
OS/Arch:         linux/amd64

@TomSweeneyRedHat
Copy link
Member

Maybe runc? What version do you have @42wim?

@42wim
Copy link
Contributor Author

42wim commented May 2, 2019

On the centos 7.5 box the default centos one: runc-1.0.0-59.dev.git2abd837.el7.centos.x86_64
On the centos 7.6 box a newer version: runc-1.0.0-89.dev.git029124d.el7

@42wim
Copy link
Contributor Author

42wim commented May 2, 2019

Did some more testing with running different container images:

  1. docker run --privileged --rm -ti distribution:tag /bin/bash
  2. install buildah in the container
  3. same Dockerfile
FROM centos:7
RUN yum -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
RUN yum -y install npm
RUN npm version
  1. run buildah bud --isolation chroot .
  • Using fedora:latest => works
  • Using ubuntu:latest => works
  • Using archlinux/base:latest => works
  • Using centos:latest => fails

So something strange in centos that causes it to fail, I'm pretty sure it was working a month or two ago.

@TomSweeneyRedHat
Copy link
Member

Interesting, thanks for all the testing and info @42wim !

@rhatdan
Copy link
Member

rhatdan commented May 3, 2019

Not runc, --chroot does not use runc

@rhatdan
Copy link
Member

rhatdan commented May 3, 2019

Always the same stack trace?

@42wim
Copy link
Contributor Author

42wim commented May 4, 2019

A strace of the buildah process itself near the end where it actually opens /usr/bin/npm gives the output below.

  • syscall_332 is statx, which also fails on the successful builds
  • the 2 failing reads are strange.
72234 open("/usr/bin/npm", O_RDONLY|O_CLOEXEC) = 11</tmp/buildah311006848/mnt/rootfs/usr/lib/node_modules/npm/bin/npm-cli.js>
72234 syscall_332(0xb, 0x7f2496e02589, 0x1000, 0xfff, 0x7fff72ebd7f0, 0) = -1 (errno 38)
72234 read(11</tmp/buildah311006848/mnt/rootfs/usr/lib/node_modules/npm/bin/npm-cli.js>, 0x1c554a0, 8192) = -1 ENOSYS (Function not implemented)
72234 read(11</tmp/buildah311006848/mnt/rootfs/usr/lib/node_modules/npm/bin/npm-cli.js>, 0x1c68be0, 8192) = -1 ENOSYS (Function not implemented)
72234 close(11)                         = -1 ENOSYS (Function not implemented)
72234 futex(0x7f249700b198, FUTEX_WAKE_PRIVATE, 2147483647) = -1 ENOSYS (Function not implemented)
72234 prctl(PR_SET_NAME, "npm\0\0\0\0\0Pe\300\1\0\0\0\0") = 0
72234 syscall_332(0xffffff9c, 0x7fff72ebd5e8, 0, 0xfff, 0x7fff72ebd1c0, 0x7fff72ebd338) = 0
72234 syscall_332(0xffffff9c, 0x7fff72ebd5e8, 0, 0xfff, 0x7fff72ebd1c0, 0x7fff72ebd338) = -1 (errno 38)
72234 write(2</dev/pts/0>, "module.js:478\n    throw err;\n    ^\n\nError: Cannot find module 'npmlog'\n    at Function.Module._resolveFilename (module.js:476:
15)\n    at Function.Module._load (module.js:424:25)\n    at Module.require (module.js:504:17)\n    at require (internal/module.js:20:19)\n    at /usr/bin/npm:
19:13\n    at Object.<anonymous> (/usr/bin/npm:75:3)\n    at Module._compile (module.js:577:32)\n    at Object.Module._extensions..js (module.js:586:10)\n    a
t Module.load (module.js:494:32)\n    at tryModuleLoad (module.js:453:12)\n", 509) = -1 ENOSYS (Function not implemented)
72234 close(5)                          = -1 ENOSYS (Function not implemented)
72234 close(7)                          = -1 ENOSYS (Function not implemented)

@rhatdan
Copy link
Member

rhatdan commented May 5, 2019

That is a seccomp failure. Latest seccomp.json file allows statx.

If you grab the one from upstream it should fix the issue.

@rhatdan
Copy link
Member

rhatdan commented May 5, 2019

We need an updated version of containers-common on Centos.

@42wim
Copy link
Contributor Author

42wim commented May 5, 2019

That's unfortunately not the issue, seccomp.json is the latest on centos:7:
c05a93ec748a9bf136724e9b627f36c0 /usr/share/containers/seccomp.json

The rpm is containers-common-0.1.35-2.git404c5bd.el7.centos.x86_64

Same version as on https://src.fedoraproject.org/rpms/skopeo/raw/master/f/seccomp.json and as on fedora:latest

This is how the strace looks when it works (eg on fedora:latest also the ENOSYS on statx)

2226  statx(AT_FDCWD, "/usr/bin/npm", AT_STATX_SYNC_AS_STAT, STATX_ALL, 0x7ffe345e3680) = -1 ENOSYS (Function not implemented)
2226  stat("/usr/bin/npm", {st_mode=S_IFREG|0755, st_size=1996, ...}) = 0
2226  lstat("/usr", {st_mode=S_IFDIR|0755, st_size=54, ...}) = 0
2226  lstat("/usr/bin", {st_mode=S_IFDIR|0555, st_size=29, ...}) = 0
2226  lstat("/usr/bin/npm", {st_mode=S_IFLNK|0777, st_size=38, ...}) = 0
2226  stat("/usr/bin/npm", {st_mode=S_IFREG|0755, st_size=1996, ...}) = 0
2226  readlink("/usr/bin/npm", "../lib/node_modules/npm/bin/npm-cli.js", 4096) = 38
2226  lstat("/usr/lib", {st_mode=S_IFDIR|0555, st_size=66, ...}) = 0
2226  lstat("/usr/lib/node_modules", {st_mode=S_IFDIR|0755, st_size=17, ...}) = 0
2226  lstat("/usr/lib/node_modules/npm", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
2226  lstat("/usr/lib/node_modules/npm/bin", {st_mode=S_IFDIR|0755, st_size=98, ...}) = 0
2226  lstat("/usr/lib/node_modules/npm/bin/npm-cli.js", {st_mode=S_IFREG|0755, st_size=1996, ...}) = 0
2226  open("/usr/lib/node_modules/npm/bin/npm-cli.js", O_RDONLY|O_CLOEXEC) = 11
2226  fstat(11, {st_mode=S_IFREG|0755, st_size=1996, ...}) = 0
2226  read(11, "#!/usr/bin/env node\n;(function () { // wrapper in case we're in module_context mode

I'm wondering if it doesn't have something to do with the symlink

@rhatdan
Copy link
Member

rhatdan commented May 5, 2019

Have you tried this on a newer kernel? IE Do you see the same issue on Fedora?

@42wim
Copy link
Contributor Author

42wim commented May 5, 2019

The tests in my previous comment: #1568 (comment) are all running in docker containers on the same centos 7 host (3.10.0-862.14.4.el7.x86_64) and only the centos:latest container fails.

So this doesn't look like a kernel issue as they all are using the same kernel.

But I also ran on a 5.0.5-1.el7.elrepo.x86_64 kernel, with the same issues (I don't have a "physical" fedora host)

@rhatdan
Copy link
Member

rhatdan commented May 5, 2019

Ok so this is container image specific, most likely not a Buildah bug. Has any Centos image ever worked?

@42wim
Copy link
Contributor Author

42wim commented May 5, 2019

Yes, we're using buildah (in a centos docker container) in our Jenkins pipeline (since October last year), mostly building centos images.

They all worked fine and all them still do except the ones with a npm command in it.
Without the --isolation chroot it still builds, but this doesn't work inside a docker container.

@42wim
Copy link
Contributor Author

42wim commented May 5, 2019

Progress!
Thinking about your seccomp remark I tried with
buildah bud --security-opt seccomp=unconfined --isolation chroot . and the image works again!

@rhatdan
Copy link
Member

rhatdan commented May 5, 2019

Grab this seccomp.json file and see replace the one in /etc/share/containers/seccomp.json
https://github.com/containers/libpod/blob/master/seccomp.json

@42wim
Copy link
Contributor Author

42wim commented May 5, 2019

Still fails with that seccomp.json

@rhatdan
Copy link
Member

rhatdan commented May 6, 2019

Strange. I will have to try this here.

grep statx /usr/share/containers/seccomp.json

@42wim
Copy link
Contributor Author

42wim commented May 6, 2019

I did an strace again on the build with --security-opt seccomp=unconfined and the syscall_332 gives a -1

  • 1022 syscall_332(0xffffff9c, 0x7ffe29ae6848, 0, 0xfff, 0x7ffe29ae6420, 0x88) = -1 (errno 38)

While on the failing build the syscall_332 passes....

  • 1527 syscall_332(0xffffff9c, 0x7ffc7dce0618, 0, 0xfff, 0x7ffc7dce01f0, 0x88) = 0

For both builds makes no difference if statx is in /usr/share/containers/seccomp.json or not.

Without --security-opt seccomp=unconfined

1527  syscall_332(0xffffff9c, 0x7ffc7dce0618, 0, 0xfff, 0x7ffc7dce01f0, 0x88) = 0
1527  syscall_332(0xffffff9c, 0x7ffc7dce0538, 0x100, 0xfff, 0x7ffc7dce00e0, 0x3) = 0
1527  open("/usr/bin/npm", O_RDONLY|O_CLOEXEC) = 11</tmp/buildah565640668/mnt/rootfs/usr/lib/node_modules/npm/bin/npm-cli.js>
1527  syscall_332(0xb, 0x7f1d30d10589, 0x1000, 0xfff, 0x7ffc7dce0510, 0x243d778ba4920) = -1 (errno 38)
1527  read(11</tmp/buildah565640668/mnt/rootfs/usr/lib/node_modules/npm/bin/npm-cli.js>, 0x2499f80, 8192) = -1 ENOSYS (Function not implemented)
1527  read(11</tmp/buildah565640668/mnt/rootfs/usr/lib/node_modules/npm/bin/npm-cli.js>, 0x249bf90, 8192) = -1 ENOSYS (Function not implemented)
1527  close(11)                         = -1 ENOSYS (Function not implemented)
1527  futex(0x7f1d30f19198, FUTEX_WAKE_PRIVATE, 2147483647) = -1 ENOSYS (Function not implemented)
1527  prctl(PR_SET_NAME, "npm\0\0\0\0\0P\365?\2\0\0\0\0") = 0
1527  syscall_332(0xffffff9c, 0x7ffc7dce0308, 0, 0xfff, 0x7ffc7dcdfee0, 0x7ffc7dce0058) = -1 (errno 38)
1527  open("/usr/bin/node_modules/npmlog/package.json", O_RDONLY|O_CLOEXEC) = 0</dev/pts/0>
1527  syscall_332(0xffffff9c, 0x7ffc7dce0268, 0, 0xfff, 0x7ffc7dcdfe40, 0x243d860) = 0
1527  open("/usr/bin/node_modules/npmlog/package.json", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
1527  syscall_332(0xffffff9c, 0x7ffc7dce0268, 0, 0xfff, 0x7ffc7dcdfe40, 0x7ffc7dce0298) = 0
1527  syscall_332(0xffffff9c, 0x7ffc7dce0268, 0, 0xfff, 0x7ffc7dcdfe40, 0x7ffc7dce0298) = 0
1527  syscall_332(0xffffff9c, 0x7ffc7dce0308, 0, 0xfff, 0x7ffc7dcdfee0, 0x7ffc7dce0370) = -1 (errno 38)
1527  open("/usr/node_modules/npmlog/package.json", O_RDONLY|O_CLOEXEC) = 0</dev/pts/0>
1527  syscall_332(0xffffff9c, 0x7ffc7dce0268, 0, 0xfff, 0x7ffc7dcdfe40, 0x7ffc7dce0298) = 0
1527  open("/usr/node_modules/npmlog/package.json", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
1527  syscall_332(0xffffff9c, 0x7ffc7dce0268, 0, 0xfff, 0x7ffc7dcdfe40, 0x7ffc7dce0298) = 0
1527  syscall_332(0xffffff9c, 0x7ffc7dce0268, 0, 0xfff, 0x7ffc7dcdfe40, 0x7ffc7dce0298) = 0
1527  syscall_332(0xffffff9c, 0x7ffc7dce0308, 0, 0xfff, 0x7ffc7dcdfee0, 0x7ffc7dce0370) = 0
1527  open("/usr/lib/node/npmlog/package.json", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
1527  syscall_332(0xffffff9c, 0x7ffc7dce0268, 0, 0xfff, 0x7ffc7dcdfe40, 0x7ffc7dce0298) = 0
1527  syscall_332(0xffffff9c, 0x7ffc7dce0268, 0, 0xfff, 0x7ffc7dcdfe40, 0x7ffc7dce0298) = -1 (errno 38)
1527  open("/usr/lib/node/npmlog/package.json", O_RDONLY|O_CLOEXEC) = 0</dev/pts/0>
1527  syscall_332(0xffffff9c, 0x7ffc7dce0268, 0, 0xfff, 0x7ffc7dcdfe40, 0x7ffc7dce0298) = 0
1527  write(2</dev/pts/0>, "module.js:478\n    throw err;\n    ^\n\nError: Cannot find module 'npmlog'\n    at Function.Module._resolveFilename (module.js:476:

With --security-opt seccomp=unconfined

1022  syscall_332(0xffffff9c, 0x7ffe29ae6848, 0, 0xfff, 0x7ffe29ae6420, 0x88) = -1 (errno 38)
1022  stat("/usr/bin/npm", {st_mode=S_IFREG|0755, st_size=1996, ...}) = 0
1022  lstat("/usr", {st_mode=S_IFDIR|0755, st_size=54, ...}) = 0
1022  lstat("/usr/bin", {st_mode=S_IFDIR|0555, st_size=29, ...}) = 0
1022  lstat("/usr/bin/npm", {st_mode=S_IFLNK|0777, st_size=38, ...}) = 0
1022  stat("/usr/bin/npm", {st_mode=S_IFREG|0755, st_size=1996, ...}) = 0
1022  readlink("/usr/bin/npm", "../lib/node_modules/npm/bin/npm-cli.js", 4096) = 38
1022  lstat("/usr/lib", {st_mode=S_IFDIR|0555, st_size=66, ...}) = 0
1022  lstat("/usr/lib/node_modules", {st_mode=S_IFDIR|0755, st_size=17, ...}) = 0
1022  lstat("/usr/lib/node_modules/npm", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
1022  lstat("/usr/lib/node_modules/npm/bin", {st_mode=S_IFDIR|0755, st_size=98, ...}) = 0
1022  lstat("/usr/lib/node_modules/npm/bin/npm-cli.js", {st_mode=S_IFREG|0755, st_size=1996, ...}) = 0
1022  open("/usr/lib/node_modules/npm/bin/npm-cli.js", O_RDONLY|O_CLOEXEC) = 11</tmp/buildah767858916/mnt/rootfs/usr/lib/node_modules/npm/bin/npm-cli.js>
1022  fstat(11</tmp/buildah767858916/mnt/rootfs/usr/lib/node_modules/npm/bin/npm-cli.js>, {st_mode=S_IFREG|0755, st_size=1996, ...}) = 0
1022  read(11</tmp/buildah767858916/mnt/rootfs/usr/lib/node_modules/npm/bin/npm-cli.js>, "#!/usr/bin/env node\n;(function () { // wrapper in case we're in module_context mode\n  // windows: running \"npm blah\" in this folder will invoke WSH, not node.\n  /*global WScript*/\n  if (typeof WScript !== 'undefined') {\n    WScript.echo(\n      'npm does not work when run\\n' +\n        'with the Windows Scripting Host\\n\\n' +\n        \"'cd' to a different directory,\\n\" +\n        \"or type 'npm.cmd <args>',\\n\" +\n        \"or type 'node npm <args>'.\"\n    )\n    WScript.quit(1)\n    return\n  }\n\n  process.title = 'npm'\n\n 

@rhatdan
Copy link
Member

rhatdan commented May 10, 2019

@pcmoore Any ideas on this?

@rhatdan
Copy link
Member

rhatdan commented May 10, 2019

@weirdwiz PTAL

@pcmoore
Copy link

pcmoore commented May 11, 2019

From what I can tell it looks like statx(...) is allowed by the seccomp filter so it makes me wonder if there is another problem somewhere. What is the host system running distribution wise? What version of libseccomp is on the host (NOTE: libseccomp v2.4.1 is current)?

@42wim
Copy link
Contributor Author

42wim commented May 11, 2019

@pcmoore the host doesn't seem to matter you should be able to reproduce this by just running docker as described in #1568 (comment)

Originally tested on a centos 7.5 and centos 7.6 host

I just spun up a ubuntu 18.04 LTS on digitalocean and ran the same commands, with the same issue.
The complete logfile can be found here https://gist.github.com/42wim/41a91a3a60959bdf5c0f51bd0769f098

Only difference is that I needed to use the vfs storage driver.

@pcmoore
Copy link

pcmoore commented May 11, 2019

Okay, I just wanted to make sure the host's libseccomp filter wasn't the issue. Looking closer at the log it appears that this is just the libseccomp filter for buildah and not the entire container that is the problem, yes?

Assuming that is the case I suspect the problem is the old version of libseccomp that ships in Centos. The libseccomp v2.3.x stream has a number of bugs and is no longer supported upstream. Can you confirm the version of libseccomp present in the fedora/ubuntu/archlinux:latest?

It may be that CentOS/RHEL simply needs to update their libseccomp package.

@42wim
Copy link
Contributor Author

42wim commented May 11, 2019

@pcmoore that was the solution!
I've made a centos rpm of 2.4.1 and the issue is fixed. (default version is libseccomp-2.3.1-3.el7)

@pcmoore
Copy link

pcmoore commented May 11, 2019

Glad to hear you got it working @42wim! @rhatdan should be able to talk to the right people to get RH to update the package; that's out of my hands now.

@rhatdan
Copy link
Member

rhatdan commented May 12, 2019

@42wim Could you open a Bugzilla, on this issue on RHEL7 at bugzilla.redhat.com. CC Me on this bug and reference this issue.

@42wim
Copy link
Contributor Author

42wim commented May 20, 2019

Done

@rhatdan
Copy link
Member

rhatdan commented Jun 8, 2019

@42wim Could you link the bugzilla here?

@42wim
Copy link
Contributor Author

42wim commented Jun 9, 2019

Bugzilla issue can be found on https://bugzilla.redhat.com/show_bug.cgi?id=1712146

@rhatdan
Copy link
Member

rhatdan commented Jun 10, 2019

Thanks, I will close the issue and follow the progress there.

@rhatdan rhatdan closed this as completed Jun 10, 2019
@42wim
Copy link
Contributor Author

42wim commented Jul 13, 2019

TLDR; Redhat is not rebasing it, centos7/rhel7 users are out of luck.
But you can easily build your own RPM from https://src.fedoraproject.org/rpms/libseccomp or migrate to another distribution :-)

@rhatdan
Copy link
Member

rhatdan commented Jul 14, 2019

Well it does work on RHEL8.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 15, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

4 participants