Bug 1509332 - /usr/bin/docker-current: Error response from daemon: linux seccomp: Decoding seccomp profile failed: unexpected end of JSON input.
Summary: /usr/bin/docker-current: Error response from daemon: linux seccomp: Decoding ...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: docker
Version: 27
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Lokesh Mandvekar
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-11-03 14:48 UTC by Micah Abbott
Modified: 2017-11-15 20:09 UTC (History)
12 users (show)

Fixed In Version: docker-1.13.1-40.git877b6df.fc26
Clone Of:
Environment:
Last Closed: 2017-11-15 20:09:25 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Micah Abbott 2017-11-03 14:48:22 UTC
Pulled the latest 'docker' build from this Bodhi update:

https://bodhi.fedoraproject.org/updates/FEDORA-2017-cbf83e5281


After installing it and starting the daemon, attempting to run a container throws the error in the Summary:

# rpm -q docker
docker-1.13.1-38.git166a52e.fc26.x86_64

# docker run --rm docker.io/busybox echo hello                            
Unable to find image 'docker.io/busybox:latest' locally   
Trying to pull repository docker.io/library/busybox ...
sha256:06d4020f14549289bf9552dccf99c79c61ef8e664aec2edca614f8ae4af7a4ce: Pulling from docker.io/library/busybox
0ffadd58f2a6: Pull complete                          
Digest: sha256:06d4020f14549289bf9552dccf99c79c61ef8e664aec2edca614f8ae4af7a4ce
Status: Downloaded newer image for docker.io/busybox:latest
/usr/bin/docker-current: Error response from daemon: linux seccomp: Decoding seccomp profile failed: unexpected end of JSON input.


An examination of /etc/docker/seccomp.json looks like it is missing a closing curly brace:

# cat /etc/docker/seccomp.json                                                                                                                                                     
{                                                                                                                                                                                                                 
        "defaultAction": "SCMP_ACT_ERRNO",                                                                                                                                                                        
        "archMap": [                                                                                                                                                                                              
                {                                                                                                                                                                                                 
                        "architecture": "SCMP_ARCH_X86_64",                                                                                                                                                       
                        "subArchitectures": [                                                                                                                                                                     
                                "SCMP_ARCH_X86",                                                                                                                                                                  
                                "SCMP_ARCH_X32"                                                                                                                                                                   
                        ]                                                                                                                                                                                         
                }, 

<snip all the text>

                      {                                   
                        "names": [                  
                                "vhangup"           
                        ],                          
                        "action": "SCMP_ACT_ALLOW", 
                        "args": [],                 
                        "comment": "",              
                        "includes": {               
                                "caps": [           
                                        "CAP_SYS_TTY_CONFIG"                                             
                                ]                   
                        },                          
                        "excludes": {}              
                }                                   
        ]                                           
               

Notice how the last character in the file is the closing square bracket.


This was done on a Fedora 26 Cloud system.

Comment 1 Micah Abbott 2017-11-03 14:55:14 UTC
After adding the closing curly brace and restarting the daemon, containers can be run again.

Comment 2 Antonio Murdaca 2017-11-03 14:57:13 UTC
Can we fix this in dist-git Lokesh?

Comment 3 Fedora Update System 2017-11-03 19:49:43 UTC
atomic-1.19.1-6.fc26 docker-1.13.1-40.git877b6df.fc26 skopeo-0.1.24-7.gitdd2c3e3.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-cbf83e5281

Comment 4 Fedora Update System 2017-11-04 19:57:02 UTC
atomic-1.19.1-6.fc26, docker-1.13.1-40.git877b6df.fc26, skopeo-0.1.24-7.gitdd2c3e3.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-cbf83e5281

Comment 5 Fedora Update System 2017-11-15 20:09:25 UTC
atomic-1.19.1-6.fc26, docker-1.13.1-40.git877b6df.fc26, skopeo-0.1.24-7.gitdd2c3e3.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.