oracle / railcar

RailCar: Rust implementation of the Open Containers Initiative oci-runtime
Other
1.12k stars 101 forks source link

unable to start container #16

Closed yyb196 closed 7 years ago

yyb196 commented 7 years ago

docker run -d --runtime rc busybox top

677dbdda10bab368e63fc641c96d1367230294170d2cb930e8030c985a469c9d docker: Error response from daemon: containerd: container not started.

docker logs 677dbdda10bab368e63fc641c96d1367230294170d2cb930e8030c985a469c9d [8/1875]

ERROR - failed to load config.json ERROR - caused by: invalid type: map, expected a sequence at line 1 column 304 ERROR - caused by: invalid type: map, expected a sequence at line 1 column 304 ERROR - stack backtrace: 0: 0x7fc7d8535d14 - backtrace::backtrace::libunwind::trace at /root/.cargo/registry/src/github.com-1ecc6299db9ec823/backtrace-0.3.2/src/backtrace/libunwind.rs:53

./railcar --version

./railcar version: 0.1.0

build from git branch v1.0.0:

git status

On branch v1.0.0

vishvananda commented 7 years ago

Thanks for this report. Looks like there is a difference in the oci spec. Which docker version is this? It works correctly on 17.05 for me.

$ docker version
Client:
 Version:      17.05.0-ce
 API version:  1.29
 Go version:   go1.7.5
 Git commit:   89658be
 Built:        Thu May  4 22:15:36 2017
 OS/Arch:      linux/amd64

Server:
 Version:      17.05.0-ce
 API version:  1.29 (minimum version 1.12)
 Go version:   go1.7.5
 Git commit:   89658be
 Built:        Thu May  4 22:15:36 2017
 OS/Arch:      linux/amd64
 Experimental: true

Also if you could check to see if there is a config.json at /var/run/containerd/677dbdda10bab368e63fc641c96d1367230294170d2cb930e8030c985a469c9d/config.json and paste it here it would be helpful.

Thanks

yyb196 commented 7 years ago
#docker version
Client:
 Version:      17.06.0-ce
 API version:  1.30
 Go version:   go1.8.3
 Git commit:   02c1d87
 Built:        Fri Jun 23 21:20:36 2017
 OS/Arch:      linux/amd64

Server:
 Version:      17.06.0-ce
 API version:  1.30 (minimum version 1.12)
 Go version:   go1.8.3
 Git commit:   02c1d87
 Built:        Fri Jun 23 21:21:56 2017
 OS/Arch:      linux/amd64
 Experimental: false
#docker info
Containers: 4
 Running: 0
 Paused: 0
 Stopped: 4
Images: 2
Server Version: 17.06.0-ce
Storage Driver: overlay
 Backing Filesystem: extfs
 Supports d_type: true
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
 Volume: local
 Network: bridge host macvlan null overlay
 Log: awslogs fluentd gcplogs gelf journald json-file logentries splunk syslog
Swarm: inactive
Runtimes: rc runc
Default Runtime: runc
Init Binary: docker-init
containerd version: cfb82a876ecc11b5ca0977d1733adbe58599088a
runc version: 2d41c047c83e09a6d61d464906feb2a2f3c52aa4
init version: 949e6fa
Security Options:
 seccomp
  Profile: default
Kernel Version: 3.10.0-327.ali2010.rc6.alios7.x86_64
Operating System: Alibaba Group Enterprise Linux Server 7.2 (Paladin)
OSType: linux
Architecture: x86_64
CPUs: 2
Total Memory: 3.451GiB
Name: e010218129079.zmf
ID: BVB6:D5FC:O5AL:NWJT:LMCN:XAHM:YS4H:UWWL:GRGX:N7I4:VMUP:3CLW
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
Labels:
 OfficialFlag=true
Experimental: false
Insecure Registries:
 127.0.0.0/8
Live Restore Enabled: false

WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled

@vishvananda thanks for your reply, do you need any more information?

yyb196 commented 7 years ago

cat: /var/run/containerd/677dbdda10bab368e63fc641c96d1367230294170d2cb930e8030c985a469c9d/config.json: No such file or directory

this container is still exist in status Created

docker ps -a

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 677dbdda10ba busybox "top" 14 hours ago Created silly_wiles

yyb196 commented 7 years ago

this config.json is generate by using runc runtime

cat /var/run/docker/libcontainerd/c54fda09398c6b20537c4b75d8809d68411d4d984f1af75ab523e5eea0690b33/config.json

{"ociVersion":"1.0.0-rc5","platform":{"os":"linux","arch":"amd64"},"process":{"consoleSize":{"height":0,"width":0},"user":{"uid":0,"gid":0,"additionalGids":[10]},"args":["top"],"env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","HOSTNAME=c54fda09398c"],"cwd":"/","capabilities":{"bounding":["CAP_CHOWN","CAP_DAC_OVERRIDE","CAP_FSETID","CAP_FOWNER","CAP_MKNOD","CAP_NET_RAW","CAP_SETGID","CAP_SETUID","CAP_SETFCAP","CAP_SETPCAP","CAP_NET_BIND_SERVICE","CAP_SYS_CHROOT","CAP_KILL","CAP_AUDIT_WRITE"],"effective":["CAP_CHOWN","CAP_DAC_OVERRIDE","CAP_FSETID","CAP_FOWNER","CAP_MKNOD","CAP_NET_RAW","CAP_SETGID","CAP_SETUID","CAP_SETFCAP","CAP_SETPCAP","CAP_NET_BIND_SERVICE","CAP_SYS_CHROOT","CAP_KILL","CAP_AUDIT_WRITE"],"inheritable":["CAP_CHOWN","CAP_DAC_OVERRIDE","CAP_FSETID","CAP_FOWNER","CAP_MKNOD","CAP_NET_RAW","CAP_SETGID","CAP_SETUID","CAP_SETFCAP","CAP_SETPCAP","CAP_NET_BIND_SERVICE","CAP_SYS_CHROOT","CAP_KILL","CAP_AUDIT_WRITE"],"permitted":["CAP_CHOWN","CAP_DAC_OVERRIDE","CAP_FSETID","CAP_FOWNER","CAP_MKNOD","CAP_NET_RAW","CAP_SETGID","CAP_SETUID","CAP_SETFCAP","CAP_SETPCAP","CAP_NET_BIND_SERVICE","CAP_SYS_CHROOT","CAP_KILL","CAP_AUDIT_WRITE"]}},"root":{"path":"/var/lib/docker/overlay/dfbc8dd53df4ce7863b9eb655b30caa29dfe54ff1d12c8fbdbe0e387c3367ce0/merged"},"hostname":"c54fda09398c","mounts":[{"destination":"/proc","type":"proc","source":"proc","options":["nosuid","noexec","nodev"]},{"destination":"/dev","type":"tmpfs","source":"tmpfs","options":["nosuid","strictatime","mode=755"]},{"destination":"/dev/pts","type":"devpts","source":"devpts","options":["nosuid","noexec","newinstance","ptmxmode=0666","mode=0620","gid=5"]},{"destination":"/sys","type":"sysfs","source":"sysfs","options":["nosuid","noexec","nodev","ro"]},{"destination":"/sys/fs/cgroup","type":"cgroup","source":"cgroup","options":["ro","nosuid","noexec","nodev"]},{"destination":"/dev/mqueue","type":"mqueue","source":"mqueue","options":["nosuid","noexec","nodev"]},{"destination":"/etc/resolv.conf","type":"bind","source":"/var/lib/docker/containers/c54fda09398c6b20537c4b75d8809d68411d4d984f1af75ab523e5eea0690b33/resolv.conf","options":["rbind","rprivate"]},{"destination":"/etc/hostname","type":"bind","source":"/var/lib/docker/containers/c54fda09398c6b20537c4b75d8809d68411d4d984f1af75ab523e5eea0690b33/hostname","options":["rbind","rprivate"]},{"destination":"/etc/hosts","type":"bind","source":"/var/lib/docker/containers/c54fda09398c6b20537c4b75d8809d68411d4d984f1af75ab523e5eea0690b33/hosts","options":["rbind","rprivate"]},{"destination":"/dev/shm","type":"bind","source":"/var/lib/docker/containers/c54fda09398c6b20537c4b75d8809d68411d4d984f1af75ab523e5eea0690b33/shm","options":["rbind","rprivate"]}],"hooks":{"prestart":[{"path":"/usr/bin/dockerd","args":["libnetwork-setkey","c54fda09398c6b20537c4b75d8809d68411d4d984f1af75ab523e5eea0690b33","6501a69fff4287d7362c92de1f8e39c4f06114b8784078d5f94a9999b75edcda"]}]},"linux":{"resources":{"devices":[{"allow":false,"access":"rwm"},{"allow":true,"type":"c","major":1,"minor":5,"access":"rwm"},{"allow":true,"type":"c","major":1,"minor":3,"access":"rwm"},{"allow":true,"type":"c","major":1,"minor":9,"access":"rwm"},{"allow":true,"type":"c","major":1,"minor":8,"access":"rwm"},{"allow":true,"type":"c","major":5,"minor":0,"access":"rwm"},{"allow":true,"type":"c","major":5,"minor":1,"access":"rwm"},{"allow":false,"type":"c","major":10,"minor":229,"access":"rwm"}],"disableOOMKiller":false,"oomScoreAdj":0,"memory":{"swappiness":18446744073709551615},"cpu":{"shares":0},"pids":{"limit":0},"blockIO":{"blkioWeight":0}},"cgroupsPath":"/docker/c54fda09398c6b20537c4b75d8809d68411d4d984f1af75ab523e5eea0690b33","namespaces":[{"type":"mount"},{"type":"network"},{"type":"uts"},{"type":"pid"},{"type":"ipc"}],"seccomp":{"defaultAction":"SCMP_ACT_ERRNO","architectures":["SCMP_ARCH_X86_64","SCMP_ARCH_X86","SCMP_ARCH_X32"],"syscalls":[{"names":["accept"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["accept4"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["access"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["alarm"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["alarm"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["bind"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["brk"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["capget"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["capset"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["chdir"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["chmod"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["chown"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["chown32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["clock_getres"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["clock_gettime"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["clock_nanosleep"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["close"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["connect"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["copy_file_range"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["creat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["dup"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["dup2"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["dup3"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["epoll_create"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["epoll_create1"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["epoll_ctl"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["epoll_ctl_old"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["epoll_pwait"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["epoll_wait"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["epoll_wait_old"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["eventfd"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["eventfd2"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["execve"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["execveat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["exit"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["exit_group"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["faccessat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fadvise64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fadvise64_64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fallocate"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fanotify_mark"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fchdir"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fchmod"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fchmodat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fchown"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fchown32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fchownat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fcntl"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fcntl64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fdatasync"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fgetxattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["flistxattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["flock"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fork"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fremovexattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fsetxattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fstat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fstat64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fstatat64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fstatfs"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fstatfs64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["fsync"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["ftruncate"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["ftruncate64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["futex"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["futimesat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getcpu"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getcwd"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getdents"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getdents64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getegid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getegid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["geteuid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["geteuid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getgid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getgid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getgroups"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getgroups32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getitimer"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getpeername"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getpgid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getpgrp"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getpid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getppid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getpriority"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getrandom"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getresgid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getresgid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getresuid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getresuid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getrlimit"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["get_robust_list"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getrusage"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getsid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getsockname"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getsockopt"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["get_thread_area"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["gettid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["gettimeofday"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getuid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getuid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["getxattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["inotify_add_watch"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["inotify_init"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["inotify_init1"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["inotify_rm_watch"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["io_cancel"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["ioctl"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["io_destroy"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["io_getevents"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["ioprio_get"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["ioprio_set"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["io_setup"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["io_submit"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["ipc"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["kill"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["lchown"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["lchown32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["lgetxattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["link"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["linkat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["listen"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["listxattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["llistxattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["_llseek"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["lremovexattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["lseek"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["lsetxattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["lstat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["lstat64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["madvise"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["memfd_create"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mincore"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mkdir"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mkdirat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mknod"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mknodat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mlock"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mlock2"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mlockall"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mmap"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mmap2"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mprotect"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mq_getsetattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mq_notify"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mq_open"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mq_timedreceive"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mq_timedsend"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mq_unlink"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["mremap"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["msgctl"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["msgget"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["msgrcv"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["msgsnd"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["msync"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["munlock"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["munlockall"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["munmap"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["nanosleep"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["newfstatat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["_newselect"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["open"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["openat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["pause"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["pipe"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["pipe2"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["poll"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["ppoll"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["prctl"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["pread64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["preadv"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["preadv2"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["prlimit64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["pselect6"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["pwrite64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["pwritev"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["pwritev2"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["read"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["readahead"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["readlink"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["readlinkat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["readv"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["recv"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["recvfrom"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["recvmmsg"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["recvmsg"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["remap_file_pages"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["removexattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["rename"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["renameat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["renameat2"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["restart_syscall"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["rmdir"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["rt_sigaction"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["rt_sigpending"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["rt_sigprocmask"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["rt_sigqueueinfo"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["rt_sigreturn"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["rt_sigsuspend"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["rt_sigtimedwait"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["rt_tgsigqueueinfo"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sched_getaffinity"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sched_getattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sched_getparam"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sched_get_priority_max"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sched_get_priority_min"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sched_getscheduler"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sched_rr_get_interval"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sched_setaffinity"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sched_setattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sched_setparam"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sched_setscheduler"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sched_yield"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["seccomp"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["select"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["semctl"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["semget"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["semop"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["semtimedop"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["send"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sendfile"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sendfile64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sendmmsg"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sendmsg"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sendto"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setfsgid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setfsgid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setfsuid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setfsuid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setgid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setgid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setgroups"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setgroups32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setitimer"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setpgid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setpriority"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setregid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setregid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setresgid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setresgid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setresuid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setresuid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setreuid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setreuid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setrlimit"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["set_robust_list"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setsid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setsockopt"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["set_thread_area"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["set_tid_address"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setuid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setuid32"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["setxattr"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["shmat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["shmctl"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["shmdt"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["shmget"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["shutdown"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sigaltstack"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["signalfd"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["signalfd4"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sigreturn"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["socket"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["socketcall"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["socketpair"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["splice"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["stat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["stat64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["statfs"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["statfs64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["symlink"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["symlinkat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sync"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sync_file_range"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["syncfs"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["sysinfo"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["syslog"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["tee"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["tgkill"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["time"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["timer_create"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["timer_delete"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["timerfd_create"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["timerfd_gettime"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["timerfd_settime"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["timer_getoverrun"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["timer_gettime"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["timer_settime"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["times"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["tkill"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["truncate"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["truncate64"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["ugetrlimit"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["umask"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["uname"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["unlink"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["unlinkat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["utime"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["utimensat"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["utimes"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["vfork"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["vmsplice"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["wait4"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["waitid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["waitpid"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["write"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["writev"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["personality"],"action":"SCMP_ACT_ALLOW","args":[{"index":0,"value":0,"valueTwo":0,"op":"SCMP_CMP_EQ"}],"comment":""},{"names":["personality"],"action":"SCMP_ACT_ALLOW","args":[{"index":0,"value":8,"valueTwo":0,"op":"SCMP_CMP_EQ"}],"comment":""},{"names":["personality"],"action":"SCMP_ACT_ALLOW","args":[{"index":0,"value":131072,"valueTwo":0,"op":"SCMP_CMP_EQ"}],"comment":""},{"names":["personality"],"action":"SCMP_ACT_ALLOW","args":[{"index":0,"value":131080,"valueTwo":0,"op":"SCMP_CMP_EQ"}],"comment":""},{"names":["personality"],"action":"SCMP_ACT_ALLOW","args":[{"index":0,"value":4294967295,"valueTwo":0,"op":"SCMP_CMP_EQ"}],"comment":""},{"names":["arch_prctl"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["modify_ldt"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""},{"names":["clone"],"action":"SCMP_ACT_ALLOW","args":[{"index":0,"value":2080505856,"valueTwo":0,"op":"SCMP_CMP_MASKED_EQ"}],"comment":""},{"names":["chroot"],"action":"SCMP_ACT_ALLOW","args":null,"comment":""}]},"maskedPaths":["/proc/kcore","/proc/latency_stats","/proc/timer_list","/proc/timer_stats","/proc/sched_debug","/sys/firmware"],"readonlyPaths":["/proc/asound","/proc/bus","/proc/fs","/proc/irq","/proc/sys","/proc/sysrq-trigger"]}}

vishvananda commented 7 years ago

thanks. It looks like capabilities changed from a list into a map of lists. Will update.

vishvananda commented 7 years ago

The linked pr fixes the issue you are seeing. Unfortunately docker 17.06 switched to making the oci backend create the pseudo-terminal, which railcar doesn't yet support. That will be added next, but in the meantime, if you want to actually use the containers stdio with railcar, you should use 17.05

vishvananda commented 7 years ago

The pr also adds support for the updated seccomp configuration and console-socket. Everything should work properly for docker 17.06 now. Please remember to pass -t to docker run in order to give it access to the process' console.