Bug 1956537 - running dnf in armv7 container fails with seccomp denial
Summary: running dnf in armv7 container fails with seccomp denial
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: containers-common
Version: 34
Hardware: armv7l
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Jindrich Novy
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: ARMTracker
TreeView+ depends on / blocked
 
Reported: 2021-05-03 20:49 UTC by Paul Whalen
Modified: 2021-06-11 14:23 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-06-11 14:23:03 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Paul Whalen 2021-05-03 20:49:32 UTC 
Description of problem:

Attempting to run dnf in a container on Fedora 34 armv7 fails with:

STEP 2: RUN /usr/bin/dnf install -y httpd 
The futex facility returned an unexpected error code.
container exited on illegal instruction
Error: error building at STEP "RUN /usr/bin/dnf install -y httpd": error while running runtime: exit status 1

In the logs:

May 03 19:20:30 rpi2-1 audit[3036]: SECCOMP auid=1000 uid=1000 gid=1000 ses=1 subj=system_u:system_r:container_t:s0:c201,c466 pid=3036 comm="dnf" exe="/usr/bin/python3.9" sig=0 arch=40000028 syscall=422 compat=0 ip=0xb6b59f7c code=0x50000

syscall 422 on armv7 is - futex_time64

Adding 'futex_time64' to the  '/usr/share/containers/seccomp.json' allows dnf to run as expected. 


Version-Release number of selected component (if applicable):
containers-common-1-15.fc34.noarch
Comment 1 Daniel Walsh 2021-06-11 14:23:03 UTC 
Fixed in the current containers-common
Note You need to log in before you can comment on or make changes to this bug.