While trying to reproduce this bug on a focal machine, I realized that
the tests runs through the nvidia-docker wrapper.

running

$ nvidia-docker run --rm -it docker.io/ubuntu:latest /bin/bash

Crashes with the reported error

"docker: Error response from daemon: failed to create shim: OCI runtime
create failed: container_linux.go:380: starting container process
caused: error adding seccomp filter rule for syscall clone3: permission
denied: unknown."

While running the same command without the wrapper, succeeds.

$ docker run --rm -it docker.io/ubuntu:latest /bin/bash

Note that /etc/docker/daemon.json was edited to thefine the nvidia
runtime, as done by the test.

```
{
    "runtimes": {
        "nvidia": {
            "path": "nvidia-container-runtime",
            "runtimeArgs": []
        }
    }
}
```

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1948361

Title:
  docker.io - error adding seccomp filter rule for syscall clone3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/docker.io/+bug/1948361/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to