Bug 1109533

+++ This bug was initially created as a clone of Bug #1109039 +++

Description of problem:

docker run will fail at times with namespace errors


Version-Release number of selected component (if applicable):
docker-io-1.0.0-1.fc20

How reproducible:
pretty much random from what I've noticed


Steps to Reproduce:
1. docker run -it fedora bash
2. if you can't see the error in 1, run it again
3. repeat 2 until you see the error

Actual results:
Here's a sample from my machine:

------------------------------

lsm5 @ naruto : /home/lsm5 $ docker run -it fedora:rawhide bash
2014/06/13 06:42:14 finalize namespace drop bounding set read /proc/1/status: bad file descriptor
lsm5 @ naruto : /home/lsm5 $ docker run -it fedora:rawhide bash
2014/06/13 06:42:18 finalize namespace drop capabilities read /proc/1/status: bad file descriptor
lsm5 @ naruto : /home/lsm5 $ docker run -it fedora:rawhide bash
bash-4.3# exit
exit
lsm5 @ naruto : /home/lsm5 $ docker run -it fedora:rawhide bash
2014/06/13 06:42:25 finalize namespace drop bounding set read /proc/1/status: bad file descriptor

-------------------------------


Expected results:
container shell should be accessible everytime

--- Additional comment from Lokesh Mandvekar on 2014-06-13 03:24:28 EDT ---

Hmm, I can't seem to be able to replicate this on my rawhide machine, no matter how many times I try this, regardless of the image (centos,fedora,debian,ubuntu)

--- Additional comment from Vincent Batts on 2014-06-13 14:43:54 EDT ---

using a newer version of gocapability (3c85049eae) fixes this for me, on RHEL6

https://github.com/dotcloud/docker/commit/4bf03a0fac48a06298afa149d4339245736810b6

--- Additional comment from Andy Grimm on 2014-06-13 15:18:38 EDT ---

I confirmed that switching from f20 docker-io to rawhide docker-io fixed it for me.

--- Additional comment from Fedora Update System on 2014-06-13 16:19:20 EDT ---

golang-github-syndtr-gocapability-0-0.7.git3c85049.el6 has been submitted as an update for Fedora EPEL 6.
https://admin.fedoraproject.org/updates/golang-github-syndtr-gocapability-0-0.7.git3c85049.el6

--- Additional comment from Fedora Update System on 2014-06-13 16:45:54 EDT ---

golang-github-syndtr-gocapability-0-0.7.git3c85049.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/golang-github-syndtr-gocapability-0-0.7.git3c85049.fc20

--- Additional comment from Fedora Update System on 2014-06-13 16:53:05 EDT ---

golang-github-syndtr-gocapability-0-0.7.git3c85049.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/golang-github-syndtr-gocapability-0-0.7.git3c85049.fc19

--- Additional comment from Fedora Update System on 2014-06-14 16:00:27 EDT ---

Package golang-github-syndtr-gocapability-0-0.7.git3c85049.el6:
* should fix your issue,
* was pushed to the Fedora EPEL 6 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=epel-testing golang-github-syndtr-gocapability-0-0.7.git3c85049.el6'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1647/golang-github-syndtr-gocapability-0-0.7.git3c85049.el6
then log in and leave karma (feedback).