Nexus: unable to iopause: Operation not permitted

[Enrico2]

Just tried switching matrix to Nexus and seeing this error:

➜  ~ git:(master) ✗ docker-compose up                                                     Creating kodi-headless ... done
Attaching to kodi-headless
kodi-headless | s6-svscan: warning: unable to iopause: Operation not permitted
kodi-headless | s6-svscan: warning: executing into .s6-svscan/crash
kodi-headless | s6-svscan crashed. Killing everything and exiting.
kodi-headless | s6-supervise s6-linux-init-shutdownd: fatal: unable to iopause: Operation not permitted
kodi-headless | s6-linux-init-hpr: fatal: unable to reboot(): Operation not permitted
kodi-headless | s6-svscan: warning: unable to iopause: Operation not permitted
kodi-headless | s6-svscan: warning: executing into .s6-svscan/crash
kodi-headless | s6-svscan crashed. Killing everything and exiting.
kodi-headless | s6-supervise s6-linux-init-shutdownd: fatal: unable to iopause: Operation not permitted
kodi-headless | s6-linux-init-hpr: fatal: unable to reboot(): Operation not permitted
kodi-headless exited with code 111
➜  ~ git:(master) ✗ cat /etc/debian_version                                               10.11
➜  ~ git:(master) ✗ cat /etc/os-release                                                   PRETTY_NAME="Raspbian GNU/Linux 10 (buster)"
NAME="Raspbian GNU/Linux"
VERSION_ID="10"
VERSION="10 (buster)"
VERSION_CODENAME=buster
ID=raspbian
ID_LIKE=debian
HOME_URL="http://www.raspbian.org/"
SUPPORT_URL="http://www.raspbian.org/RaspbianForums"
BUG_REPORT_URL="http://www.raspbian.org/RaspbianBugs"
➜  ~ git:(master) ✗ uname -a                                                              Linux nas 5.10.63-v7l+ #1496 SMP Wed Dec 1 15:58:56 GMT 2021 armv7l GNU/Linux
➜  ~ git:(master) ✗ cat /proc/cpuinfo                                                     processor       : 0
model name      : ARMv7 Processor rev 3 (v7l)
BogoMIPS        : 270.00
Features        : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae evtstrm crc32
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x0
CPU part        : 0xd08
CPU revision    : 3

processor       : 1
model name      : ARMv7 Processor rev 3 (v7l)
BogoMIPS        : 270.00
Features        : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae evtstrm crc32
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x0
CPU part        : 0xd08
CPU revision    : 3

processor       : 2
model name      : ARMv7 Processor rev 3 (v7l)
BogoMIPS        : 270.00
Features        : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae evtstrm crc32
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x0
CPU part        : 0xd08
CPU revision    : 3

processor       : 3
model name      : ARMv7 Processor rev 3 (v7l)
BogoMIPS        : 270.00
Features        : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae evtstrm crc32
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x0
CPU part        : 0xd08
CPU revision    : 3

Hardware        : BCM2711
Revision        : c03111
Serial          : xxxxxxx
Model           : Raspberry Pi 4 Model B Rev 1.1

[matthuisman]

"This is due to a bug in the libseccomp2 library (dependency of Docker itself), which is fixed. However it's not pushed to all the repositories."

See here for solutions: https://docs.linuxserver.io/faq#libseccomp

Or you can disable secomp in the container (this has security implications) https://github.com/mbentley/docker-timemachine#unable-to-start-the-armv7l-image

[sinopsysHK]

Hello,

it could be worth to put a little note in the documentation exposed on docker-hub: I have spent a day with a similar issue (not exactly the same) to finally find this seccomp issue.

in my case with bellow setup

• Host: I7 boxe
• OS: Ubuntu 20.04.5
• Docker: 20.10.1, build 831ebea
• libseccomp2: version 2.5.1-1ubuntu1~20.04.2

I get following logs:

[migrations] started
[migrations] no migrations found

-------------------------------------
          _         ()
         | |  ___   _    __
         | | / __| | |  /  \
         | | \__ \ | | | () |
         |_| |___/ |_|  \__/

Brought to you by linuxserver.io
-------------------------------------

To support the app dev(s) visit:
Matt Huisman: https://www.matthuisman.nz/donate
Kodi: https://kodi.tv/donate

To support LSIO projects visit:
https://www.linuxserver.io/donate/
-------------------------------------
GID/UID
-------------------------------------

User uid:    1024
User gid:    100
-------------------------------------

Setting timezone to Asia/Hong_Kong...
[custom-init] No custom files found, skipping...
[ls.io-init] done.
terminate called after throwing an instance of 'std::system_error'
  what():  Operation not permitted
Aborted (core dumped)
Crash report available at /config/kodi_crashlog-20230125_115334.log
terminate called after throwing an instance of 'std::system_error'
  what():  Operation not permitted
Aborted (core dumped)
Crash report available at /config/kodi_crashlog-20230125_115335.log
terminate called after throwing an instance of 'std::system_error'
  what():  Operation not permitted
Aborted (core dumped)
Crash report available at /config/kodi_crashlog-20230125_115336.log
[... repeating endlessly ...]

and here is one of the crash logs files: kodi_crashlog-20230125_115336.log

Updating to docker-ce version 5:20.10.23~3-0~ubuntu-focal did the trick !

[matthuisman]

GOOD INFO HERE: https://github.com/sdr-enthusiasts/Buster-Docker-Fixes#the-situation