astefanutti edited a comment on issue #1580:
URL: https://github.com/apache/camel-k/issues/1580#issuecomment-655514148


   Thanks, that confirms Buildah with the Docker container runtime is the 
problem.
   
   From containers/buildah#1901, it seems a system call, that's forbidden by 
default with the Docker container runtime, is still necessary when the user has 
no `CAP_SYS_ADMIN` in the container.
   
   The only option seems to change the Docker container runtime to use a 
different _seccomp_ profile, e.g. `docker run --security-opt 
seccomp=/usr/share/containers/seccomp.json`, but that requires being able to 
configure your cluster container runtime.
   
   A work-around is to use other builder strategy, like Kaniko or Spectrum, 
with `kamel install --build-publish-strategy=kaniko` or by editing your 
`IntegrationPlatform` directly.
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to