Re: Infrastructure | Docker seccomp filters break Fedora 35+ container images (#667)



Title: GitLab

Bartłomiej Piotrowski commented:

All shared runners run Docker 20.10.10-rc1 now, which includes a change to properly return ENOSYS on unknown syscalls, and have updated seccomp profiles for running buildah and flatpak. This is good enough for jobs running directly on Fedora 35 or Rawhide (like https://gitlab.gnome.org/GNOME/gnome-desktop/-/jobs/1584304), but not for ci-templates, which use buildah with a seccomp profile without clone3 (https://gitlab.gnome.org/GNOME/gnome-control-center/-/jobs/1573128).



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]