Java (eclipse temurin, graalvm) and Docker Desktop on mac m4 crashing #7583

eunomie · 2025-02-07T09:38:05Z

Description

When using java images (eclipse-temurin, for java 21 or 23) java is crashing all time. It's the same thing with maven images (all official images).
This looks like to be link in some way to Docker Desktop as the exact same images on the exact same machine are working fine with Orbstack for instance.
Hardware is a Mac m4 pro.

Reproduce

$ docker run --rm eclipse-temurin:23.0.2_7-jre-ubi9-minimal@sha256:c73bb553f2b31e7fffeaead3c4ce95e8caf1572d55c6ce254054ddfd0cac3960 java -version
#
# A fatal error has been detected by the Java Runtime Environment:
#
#  SIGILL (0x4) at pc=0x0000ffff967401a8, pid=1, tid=7
#
# JRE version:  (23.0.2+7) (build )
# Java VM: OpenJDK 64-Bit Server VM (23.0.2+7, mixed mode, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, linux-aarch64)
# Problematic frame:
# j  java.lang.System.registerNatives()V+0 java.base@23.0.2
#
# No core dump will be written. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again
#
# An error report file with more information is saved as:
# //hs_err_pid1.log
[0.014s][warning][os] Loading hsdis library failed
#
# The crash happened outside the Java Virtual Machine in native code.
# See problematic frame for where to report the bug.
#

[error occurred during error reporting (), id 0x5, SIGTRAP (0x5) at pc=0x0000ffff91cb3070]

$ docker run --rm eclipse-temurin:23.0.2_7-jre-noble@sha256:482448f7d10c123f7453a2ef54035a315399547fdfc8339c37b69995845b8738 java -version
#
# A fatal error has been detected by the Java Runtime Environment:
#
#  SIGILL (0x4) at pc=0x0000ffff6e7401a8, pid=1, tid=7
#
# JRE version:  (23.0.2+7) (build )
# Java VM: OpenJDK 64-Bit Server VM (23.0.2+7, mixed mode, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, linux-aarch64)
# Problematic frame:
# j  java.lang.System.registerNatives()V+0 java.base@23.0.2
#
# No core dump will be written. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again
#
# An error report file with more information is saved as:
# //hs_err_pid1.log
[0.016s][warning][os] Loading hsdis library failed
#
# The crash happened outside the Java Virtual Machine in native code.
# See problematic frame for where to report the bug.
#

[error occurred during error reporting (), id 0x5, SIGTRAP (0x5) at pc=0x0000ffff9ba67ebc]

$ docker run --rm eclipse-temurin:23.0.2_7-jre-alpine-3.21@sha256:980c88f2d110568c3c7c101e2101bc38643a363ae9f5908180817d04444fe5d3 java -version
#
# A fatal error has been detected by the Java Runtime Environment:
#
#  SIGILL (0x4) at pc=0x0000ffff9cd401a8, pid=1, tid=7
#
# JRE version:  (23.0.2+7) (build )
# Java VM: OpenJDK 64-Bit Server VM (23.0.2+7, mixed mode, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, linux-aarch64)
# Problematic frame:
# j  java.lang.System.registerNatives()V+0 java.base@23.0.2
#
# No core dump will be written. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again
#
# An error report file with more information is saved as:
# //hs_err_pid1.log
[0.046s][warning][os] Loading hsdis library failed
#
# The crash happened outside the Java Virtual Machine in native code.
# See problematic frame for where to report the bug.
#

Expected behavior

The trick: docker context use orbstack 🫣

$  docker run --rm eclipse-temurin:23.0.2_7-jre-ubi9-minimal@sha256:c73bb553f2b31e7fffeaead3c4ce95e8caf1572d55c6ce254054ddfd0cac3960 java -version
openjdk version "23.0.2" 2025-01-21
OpenJDK Runtime Environment Temurin-23.0.2+7 (build 23.0.2+7)
OpenJDK 64-Bit Server VM Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing)

$ docker run --rm eclipse-temurin:23.0.2_7-jre-noble@sha256:482448f7d10c123f7453a2ef54035a315399547fdfc8339c37b69995845b8738 java -version
openjdk version "23.0.2" 2025-01-21
OpenJDK Runtime Environment Temurin-23.0.2+7 (build 23.0.2+7)
OpenJDK 64-Bit Server VM Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing)

$ docker run --rm eclipse-temurin:23.0.2_7-jre-alpine-3.21@sha256:980c88f2d110568c3c7c101e2101bc38643a363ae9f5908180817d04444fe5d3 java -version
openjdk version "23.0.2" 2025-01-21
OpenJDK Runtime Environment Temurin-23.0.2+7 (build 23.0.2+7)
OpenJDK 64-Bit Server VM Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing)

docker version

Client:
 Version:           27.4.1
 API version:       1.47
 Go version:        go1.22.10
 Git commit:        b9d17ea
 Built:             Tue Dec 17 15:42:24 2024
 OS/Arch:           darwin/arm64
 Context:           desktop-linux

Server: Docker Desktop 4.39.0 (182283)
 Engine:
  Version:          27.5.1
  API version:      1.47 (minimum version 1.24)
  Go version:       go1.22.11
  Git commit:       4c9b3b0
  Built:            Wed Jan 22 13:41:25 2025
  OS/Arch:          linux/arm64
  Experimental:     false
 containerd:
  Version:          1.7.25
  GitCommit:        bcc810d6b9066471b0b6fa75f557a15a1cbf31bb
 runc:
  Version:          1.2.4
  GitCommit:        v1.2.4-0-g6c52b3f
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

docker info

Client:
 Version:    27.4.1
 Context:    desktop-linux
 Debug Mode: false
 Plugins:
  ai: Ask Gordon - Docker Agent (Docker Inc.)
    Version:  v0.7.3
    Path:     /Users/yves/.docker/cli-plugins/docker-ai
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.20.1-desktop.2
    Path:     /Users/yves/.docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v2.32.4-desktop.1
    Path:     /Users/yves/.docker/cli-plugins/docker-compose
  debug: Get a shell into any image or container (Docker Inc.)
    Version:  0.0.38
    Path:     /Users/yves/.docker/cli-plugins/docker-debug
  desktop: Docker Desktop commands (Beta) (Docker Inc.)
    Version:  v0.1.4
    Path:     /Users/yves/.docker/cli-plugins/docker-desktop
  dev: Docker Dev Environments (Docker Inc.)
    Version:  v0.1.2
    Path:     /Users/yves/.docker/cli-plugins/docker-dev
  extension: Manages Docker extensions (Docker Inc.)
    Version:  v0.2.27
    Path:     /Users/yves/.docker/cli-plugins/docker-extension
  feedback: Provide feedback, right in your terminal! (Docker Inc.)
    Version:  v1.0.5
    Path:     /Users/yves/.docker/cli-plugins/docker-feedback
  harmonia: Extend your localhost with cloud workspaces (Docker Inc.)
    Version:  0.13.170
    Path:     /Users/yves/.docker/cli-plugins/docker-harmonia
  init: Creates Docker-related starter files for your project (Docker Inc.)
    Version:  v1.4.0
    Path:     /Users/yves/.docker/cli-plugins/docker-init
  sbom: View the packaged-based Software Bill Of Materials (SBOM) for an image (Anchore Inc.)
    Version:  0.6.0
    Path:     /Users/yves/.docker/cli-plugins/docker-sbom
  scout: Docker Scout (Docker Inc.)
    Version:  v1.16.1
    Path:     /Users/yves/.docker/cli-plugins/docker-scout

Server:
 Containers: 2
  Running: 2
  Paused: 0
  Stopped: 0
 Images: 37
 Server Version: 27.5.1
 Storage Driver: overlayfs
  driver-type: io.containerd.snapshotter.v1
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 CDI spec directories:
  /etc/cdi
  /var/run/cdi
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: bcc810d6b9066471b0b6fa75f557a15a1cbf31bb
 runc version: v1.2.4-0-g6c52b3f
 init version: de40ad0
 Security Options:
  seccomp
   Profile: unconfined
  cgroupns
 Kernel Version: 6.12.5-linuxkit
 Operating System: Docker Desktop
 OSType: linux
 Architecture: aarch64
 CPUs: 12
 Total Memory: 7.653GiB
 Name: docker-desktop
 ID: 69cc40d9-e57f-4091-9519-9a1d71c93c0b
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 HTTP Proxy: http.docker.internal:3128
 HTTPS Proxy: http.docker.internal:3128
 No Proxy: hubproxy.docker.internal
 Labels:
  com.docker.desktop.address=unix:///Users/yves/Library/Containers/com.docker.docker/Data/docker-cli.sock
 Experimental: false
 Insecure Registries:
  hubproxy.docker.internal:5555
  127.0.0.0/8
 Live Restore Enabled: false

Diagnostics ID

5DC257AD-3BE5-4DE1-A0B7-997A389D2C6B/20250207093655

Additional Info

No response

The text was updated successfully, but these errors were encountered:

eunomie · 2025-02-10T14:20:45Z

The same behavior exists with graalvm images:

Docker Desktop

$ docker run --rm ghcr.io/graalvm/jdk-community:23.0.2-ol8-20250121
#
# A fatal error has been detected by the Java Runtime Environment:
#
#  SIGILL (0x4) at pc=0x0000ffff766b3ce8, pid=1, tid=7
#
# JRE version:  (23.0.2+7) (build )
# Java VM: OpenJDK 64-Bit Server VM (23.0.2+7-jvmci-b01, mixed mode, sharing, tiered, jvmci, jvmci compiler, compressed oops, compressed class ptrs, g1 gc, linux-aarch64)
# Problematic frame:
# j  java.lang.System.registerNatives()V+0 java.base
#
# No core dump will be written. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again
#
# An error report file with more information is saved as:
# /app/hs_err_pid1.log
[0.034s][warning][os] Loading hsdis library failed
#
# The crash happened outside the Java Virtual Machine in native code.
# See problematic frame for where to report the bug.
#

[error occurred during error reporting (), id 0x5, SIGTRAP (0x5) at pc=0x0000ffff9060abc0]

Orbstack

$ docker run --rm ghcr.io/graalvm/jdk-community:23.0.2-ol8-20250121
openjdk 23.0.2 2025-01-21
OpenJDK Runtime Environment GraalVM CE 23.0.2+7.1 (build 23.0.2+7-jvmci-b01)
OpenJDK 64-Bit Server VM GraalVM CE 23.0.2+7.1 (build 23.0.2+7-jvmci-b01, mixed mode, sharing)

douglascayers · 2025-02-10T18:09:37Z

I downgraded back to 4.37.2 in the meantime.

douglascayers · 2025-02-10T18:13:12Z

Likely related to #7573

eunomie · 2025-02-12T17:17:01Z

Likely related to #7573

I'm not sure, this is not the same kind of issue.
The test version from #7573 (comment) doesn't solve it.

eunomie · 2025-02-13T08:40:14Z

With Docker Desktop 4.37.2 it also doesn't work.

docker run --rm eclipse-temurin:23.0.2_7-jre-ubi9-minimal@sha256:c73bb553f2b31e7fffeaead3c4ce95e8caf1572d55c6ce254054ddfd0cac3960 java -version
#
# A fatal error has been detected by the Java Runtime Environment:
#
#  SIGILL (0x4) at pc=0x0000ffffa67401a8, pid=1, tid=7
#
# JRE version:  (23.0.2+7) (build )
# Java VM: OpenJDK 64-Bit Server VM (23.0.2+7, mixed mode, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, linux-aarch64)
# Problematic frame:
# j  java.lang.System.registerNatives()V+0 java.base@23.0.2
#
# No core dump will be written. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again
#
# An error report file with more information is saved as:
# //hs_err_pid1.log
[0.057s][warning][os] Loading hsdis library failed
#
# The crash happened outside the Java Virtual Machine in native code.
# See problematic frame for where to report the bug.
#

[error occurred during error reporting (), id 0x5, SIGTRAP (0x5) at pc=0x0000ffffba2bf070]

Client:
 Version:    27.4.1
 Context:    desktop-linux
 Debug Mode: false
 Plugins:
  ai: Ask Gordon - Docker Agent (Docker Inc.)
    Version:  v0.5.1
    Path:     /Users/yves/.docker/cli-plugins/docker-ai
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.19.2-desktop.1
    Path:     /Users/yves/.docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v2.31.0-desktop.2
    Path:     /Users/yves/.docker/cli-plugins/docker-compose
  debug: Get a shell into any image or container (Docker Inc.)
    Version:  0.0.37
    Path:     /Users/yves/.docker/cli-plugins/docker-debug
  desktop: Docker Desktop commands (Beta) (Docker Inc.)
    Version:  v0.1.0
    Path:     /Users/yves/.docker/cli-plugins/docker-desktop
  dev: Docker Dev Environments (Docker Inc.)
    Version:  v0.1.2
    Path:     /Users/yves/.docker/cli-plugins/docker-dev
  extension: Manages Docker extensions (Docker Inc.)
    Version:  v0.2.27
    Path:     /Users/yves/.docker/cli-plugins/docker-extension
  feedback: Provide feedback, right in your terminal! (Docker Inc.)
    Version:  v1.0.5
    Path:     /Users/yves/.docker/cli-plugins/docker-feedback
  init: Creates Docker-related starter files for your project (Docker Inc.)
    Version:  v1.4.0
    Path:     /Users/yves/.docker/cli-plugins/docker-init
  sbom: View the packaged-based Software Bill Of Materials (SBOM) for an image (Anchore Inc.)
    Version:  0.6.0
    Path:     /Users/yves/.docker/cli-plugins/docker-sbom
  scout: Docker Scout (Docker Inc.)
    Version:  v1.15.1
    Path:     /Users/yves/.docker/cli-plugins/docker-scout

Server:
 Containers: 2
  Running: 1
  Paused: 0
  Stopped: 1
 Images: 36
 Server Version: 27.4.0
 Storage Driver: overlayfs
  driver-type: io.containerd.snapshotter.v1
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 CDI spec directories:
  /etc/cdi
  /var/run/cdi
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 472731909fa34bd7bc9c087e4c27943f9835f111
 runc version: v1.1.13-0-g58aa920
 init version: de40ad0
 Security Options:
  seccomp
   Profile: unconfined
  cgroupns
 Kernel Version: 6.10.14-linuxkit
 Operating System: Docker Desktop
 OSType: linux
 Architecture: aarch64
 CPUs: 12
 Total Memory: 7.653GiB
 Name: docker-desktop
 ID: 69cc40d9-e57f-4091-9519-9a1d71c93c0b
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 HTTP Proxy: http.docker.internal:3128
 HTTPS Proxy: http.docker.internal:3128
 No Proxy: hubproxy.docker.internal
 Labels:
  com.docker.desktop.address=unix:///Users/yves/Library/Containers/com.docker.docker/Data/docker-cli.sock
 Experimental: false
 Insecure Registries:
  hubproxy.docker.internal:5555
  127.0.0.0/8
 Live Restore Enabled: false

perryao · 2025-02-17T20:11:20Z

A similar issue was reported in amazoncorretto corretto/corretto-21#85

Switching from eclipse-temurin:21-jre-alpine to amazoncorretto:21-alpine is working for us.

akerouanton · 2025-02-24T22:15:01Z

A fix will be available in the next release of Docker Desktop (v4.39).

akerouanton · 2025-02-25T09:02:37Z

Let me close this issue since a fix will be released in a few days, but feel free to continue the conversation.

eunomie · 2025-02-25T10:01:34Z

🎉
Thanks a lot @akerouanton !

kkevindev · 2025-03-06T10:31:57Z

Thanks @akerouanton for the fix!

eunomie added the needs-triage label Feb 7, 2025

docker-robot bot added the version/4.39.0 label Feb 7, 2025

eunomie changed the title ~~Java (eclipse temurin) and Docker Desktop on mac m4 crashing~~ Java (eclipse temurin, graalvm) and Docker Desktop on mac m4 crashing Feb 10, 2025

bsousaa added area/linux status/triage and removed needs-triage labels Feb 11, 2025

akerouanton added status/3-fixed and removed status/triage labels Feb 24, 2025

This was referenced Feb 24, 2025

*CRITICAL* Java crashes on startup with SIGILL on MacOS 15.2 and M4 chip #7505

Closed

macOS 15.2 M4: Unable to launch Elasticsearch Docker container elastic/elasticsearch#118583

Open

akerouanton closed this as completed Feb 25, 2025

akerouanton mentioned this issue Feb 25, 2025

multi-stage-builds tutorial: warn about Macbook M4 bug docker/docs#22102

Closed

3 tasks

maff mentioned this issue Feb 28, 2025

Disable SVE in JAVA_OPTS for IT Mac M4 compatibility camunda/camunda#28366

Closed

14 tasks

jsoriano mentioned this issue Mar 3, 2025

Workaround issue with SVE and seccomp in Macbooks elastic/elastic-package#2446

Open

Carlos0196 mentioned this issue Mar 5, 2025

Possible related issues with docker for Mac OS adoptium/containers#739

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Java (eclipse temurin, graalvm) and Docker Desktop on mac m4 crashing #7583

Java (eclipse temurin, graalvm) and Docker Desktop on mac m4 crashing #7583

eunomie commented Feb 7, 2025

eunomie commented Feb 10, 2025

douglascayers commented Feb 10, 2025

douglascayers commented Feb 10, 2025

eunomie commented Feb 12, 2025

eunomie commented Feb 13, 2025

perryao commented Feb 17, 2025

akerouanton commented Feb 24, 2025

akerouanton commented Feb 25, 2025

eunomie commented Feb 25, 2025

kkevindev commented Mar 6, 2025

Java (eclipse temurin, graalvm) and Docker Desktop on mac m4 crashing #7583

Java (eclipse temurin, graalvm) and Docker Desktop on mac m4 crashing #7583

Comments

eunomie commented Feb 7, 2025

Description

Reproduce

Expected behavior

docker version

docker info

Diagnostics ID

Additional Info

eunomie commented Feb 10, 2025

douglascayers commented Feb 10, 2025

douglascayers commented Feb 10, 2025

eunomie commented Feb 12, 2025

eunomie commented Feb 13, 2025

perryao commented Feb 17, 2025

akerouanton commented Feb 24, 2025

akerouanton commented Feb 25, 2025

eunomie commented Feb 25, 2025

kkevindev commented Mar 6, 2025