Your message dated Thu, 18 Sep 2025 10:50:13 +0000
with message-id <[email protected]>
and subject line Bug#1071269: fixed in runc 1.3.0+ds1-3
has caused the Debian Bug report #1071269,
regarding runc: access syscall with F_OK flag fails when used to check a device
char file attached to a container
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1071269: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1071269
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: runc
X-Debbugs-Cc: [email protected]
Version: 1.0.0~rc93+ds1-5+deb11u3
Severity: important
Tags: upstream
Dear Maintainer,
As reported in https://github.com/ROCm/k8s-device-plugin the version of runc
shipped by Bullseye does not include the following commit:
https://github.com/opencontainers/runc/commit/81707abd33d2ddebcd8ceeb08dfc01bf86d8badd
Packages like Pytorch (ROCm variant) trigger at some point a syscall like
access(/dev/dri/renderDXXX, F_OK)
to check if the GPU char device exists or not, while initializing the GPU
config/settings. In a container runc is responsible to run eBPF checks
when a GPU device is attached, to make sure that the permissions set by
the admin are respected. Due to a bug if the device settings are 'rw' the
eBPF
code will return EPERM even if the user running in the container has all
the rights to access the device. The patch seems really small and it may
save others a long debug time to figure out the root cause of the EPERM
error (that in turn causes the Pytorch's GPU init to fail etc..).
Would it be possible to backport the patch to the current Bullseye version?
As far as I can see it was shipped with 1.0.0~rc94 from upstream, it is very
close to the current runc version in Bullseye.
Thanks in advance!
Luca
-- System Information:
Debian Release: 11.9
APT prefers oldstable-updates
APT policy: (500, 'oldstable-updates'), (500, 'oldstable-security'),
(500, 'oldstable-debug'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-28-amd64 (SMP w/72 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE
not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages runc depends on:
ii libc6 2.31-13+deb11u9
ii libseccomp2 2.5.1-1+deb11u1
--- End Message ---
--- Begin Message ---
Source: runc
Source-Version: 1.3.0+ds1-3
Done: Reinhard Tartler <[email protected]>
We believe that the bug you reported is fixed in the latest version of
runc, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Reinhard Tartler <[email protected]> (supplier of updated runc package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 18 Sep 2025 06:20:45 -0400
Source: runc
Architecture: source
Version: 1.3.0+ds1-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <[email protected]>
Changed-By: Reinhard Tartler <[email protected]>
Closes: 1071269 1076814
Changes:
runc (1.3.0+ds1-3) unstable; urgency=medium
.
* Team upload.
* Upload to unstable
.
runc (1.3.0+ds1-2) experimental; urgency=medium
.
* Team upload.
* Fix FTBFS on mips64el
* Bump Standards-Version
* Reviewed and silenced seveal Lintian warnings
* Use Static-Built-Using instead of Built-Using field
.
runc (1.3.0+ds1-1) experimental; urgency=medium
.
* Team upload.
* Build against golang-github-cilium-ebpf in experimental
* Contains commit 81707abd33d2ddebcd8ceeb08dfc01bf86d8badd, Closes: #1071269
* Contains commit 77cae9addc0c7c9ef52513b4e46b2e6485e4e469, Closes: #1076814
Checksums-Sha1:
99863b6d3850633bc5516d315300d6a4cfebb877 3444 runc_1.3.0+ds1-3.dsc
9731e51b81acee4ed059c1e00e35e5b6ee0fb9dd 11288 runc_1.3.0+ds1-3.debian.tar.xz
11b38797fe36bcbd8303357df6824867361a93e4 1316668 runc_1.3.0+ds1-3.git.tar.xz
137a727b787f0d8adfe3f8b597704a48f392a7be 18222
runc_1.3.0+ds1-3_source.buildinfo
Checksums-Sha256:
8d200488eb862e38375237e5e9bed787b6c848dd7ffa1337188e5473fbc54728 3444
runc_1.3.0+ds1-3.dsc
6e399053a14080b71872cd8b43125b3c67de6ad53e87d5ff484f04cd95e14171 11288
runc_1.3.0+ds1-3.debian.tar.xz
3984f8586e52810ac151dfb454774b87a5d7ee440bca677bc9ae9c7c26fad06f 1316668
runc_1.3.0+ds1-3.git.tar.xz
422ce1a6840e42254690c96bcdeab47155044d50e20bc0679dc3fd7ac8b4fe4c 18222
runc_1.3.0+ds1-3_source.buildinfo
Files:
1fae5327c0faba9e0e6abadb759cf93e 3444 admin optional runc_1.3.0+ds1-3.dsc
027dabbf1fab98152fb48cb2f45054e1 11288 admin optional
runc_1.3.0+ds1-3.debian.tar.xz
953ff527eb3d88d8d49d5575d142b7da 1316668 admin optional
runc_1.3.0+ds1-3.git.tar.xz
23264bdcc02c519bfb4d0f40ed42f577 18222 admin optional
runc_1.3.0+ds1-3_source.buildinfo
Git-Tag-Info: tag=f6ab42888d8a47c7944274e30331e383d9a40589
fp=30de7d1763ab9452c7e0825049a76977942826cb
Git-Tag-Tagger: Reinhard Tartler <[email protected]>
-----BEGIN PGP SIGNATURE-----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=FHXC
-----END PGP SIGNATURE-----
pgpFCwSPRQ46b.pgp
Description: PGP signature
--- End Message ---
