crc-org / osp4

Proof of Concept repository of CodeReady Containers [Archived]
Apache License 2.0
26 stars 16 forks source link

Error: failed to install seccomp syscall filter in the kernel #52

Closed aakarshg closed 5 years ago

aakarshg commented 5 years ago

On a new installation of Fedora 29 I face the following issue when I try to start:

[root@smicro-6029p-04 crc_libvirt_0.16.1]# ./crc_libvirt.sh start
error: Failed to start domain crc
error: internal error: process exited while connecting to monitor: 2019-04-04 20:55:22.806+0000: Domain id=1 is tainted: host-cpu
2019-04-04T20:55:22.897386Z qemu-system-x86_64: -sandbox on,obsolete=deny,elevateprivileges=deny,spawn=deny,resourcecontrol=deny: failed to install seccomp syscall filter in the kernel

This was with the 0.16.1 tag

aakarshg commented 5 years ago

Issue was using an old kernel, along with it ran virt-host-validate to see additional issue that was

QEMU: Checking if IOMMU is enabled by kernel                               : WARN (IOMMU appears to be disabled in kernel. Add intel_iommu=on to kernel cmdline arguments)

And was solved by editing grub and restarting.