30 Jul
2021
30 Jul
'21
7:41 a.m.
On Thu, Jul 29, 2021 at 11:36:30AM +0100, Daniel P. Berrangé wrote:
The current docker:dind container has broken default seccomp filter that results in clone3 being blocked, which in turn breaks Fedora 35 rawhide.
This custom image has a workaround that causes the seccomp filter to return ENOSYS for clone3 instad of EPERM, thus triggering glibc to fallback to clone correctly.
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com> --- Reviewed-by: Erik Skultety <eskultet@redhat>