{"action":"created","issue":{"url":"https://api.github.com/repos/opencontainers/runc/issues/1395","repository_url":"https://api.github.com/repos/opencontainers/runc","labels_url":"https://api.github.com/repos/opencontainers/runc/issues/1395/labels{/name}","comments_url":"https://api.github.com/repos/opencontainers/runc/issues/1395/comments","events_url":"https://api.github.com/repos/opencontainers/runc/issues/1395/events","html_url":"https://github.com/opencontainers/runc/issues/1395","id":218523161,"number":1395,"title":"setns(CLONE_NEWIPC) fails on Ubuntu kernel","user":{"login":"cyphar","id":2888411,"avatar_url":"https://avatars2.githubusercontent.com/u/2888411?v=3","gravatar_id":"","url":"https://api.github.com/users/cyphar","html_url":"https://github.com/cyphar","followers_url":"https://api.github.com/users/cyphar/followers","following_url":"https://api.github.com/users/cyphar/following{/other_user}","gists_url":"https://api.github.com/users/cyphar/gists{/gist_id}","starred_url":"https://api.github.com/users/cyphar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cyphar/subscriptions","organizations_url":"https://api.github.com/users/cyphar/orgs","repos_url":"https://api.github.com/users/cyphar/repos","events_url":"https://api.github.com/users/cyphar/events{/privacy}","received_events_url":"https://api.github.com/users/cyphar/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2017-03-31T14:42:32Z","updated_at":"2017-04-02T22:15:35Z","closed_at":null,"body":"Reported by @eriegger in docker/docker#29794.\r\n\r\n```\r\nrunc version: 54296cf40ad8143b62dbcaa1d90e520a2136ddfe\r\nKernel Version: 4.4.0-70-generic\r\nOperating System: Ubuntu 16.04.2 LTS\r\nOSType: linux\r\nArchitecture: x86_64\r\n```\r\n\r\nThey gave us [an strace log](https://github.com/docker/docker/files/885898/docker-runc.log.txt). But the key point is this:\r\n\r\n```\r\n[pid 26452] open(\"/proc/8391/ns/ipc\", O_RDONLY) = 8\r\n[pid 26452] open(\"/proc/8391/ns/uts\", O_RDONLY) = 9\r\n[pid 26452] open(\"/proc/8391/ns/net\", O_RDONLY) = 10\r\n[pid 26452] open(\"/proc/8391/ns/pid\", O_RDONLY) = 11\r\n[pid 26452] open(\"/proc/8391/ns/mnt\", O_RDONLY) = 12\r\n[pid 26452] setns(8, CLONE_NEWIPC)      = -1 EINVAL (Invalid argument)\r\n```\r\n\r\nDoes anyone know if Ubuntu broke IPC namespaces somehow? As far as I can see, the only straightforward paths in `sys_setns` that could give you `EINVAL` is if the `fd` is not an `nsfs` handle or doesn't match the `nstype` -- which we can't possibly be hitting because we explicitly opened the fd ourselves."},"comment":{"url":"https://api.github.com/repos/opencontainers/runc/issues/comments/291019092","html_url":"https://github.com/opencontainers/runc/issues/1395#issuecomment-291019092","issue_url":"https://api.github.com/repos/opencontainers/runc/issues/1395","id":291019092,"user":{"login":"thaJeztah","id":1804568,"avatar_url":"https://avatars1.githubusercontent.com/u/1804568?v=3","gravatar_id":"","url":"https://api.github.com/users/thaJeztah","html_url":"https://github.com/thaJeztah","followers_url":"https://api.github.com/users/thaJeztah/followers","following_url":"https://api.github.com/users/thaJeztah/following{/other_user}","gists_url":"https://api.github.com/users/thaJeztah/gists{/gist_id}","starred_url":"https://api.github.com/users/thaJeztah/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thaJeztah/subscriptions","organizations_url":"https://api.github.com/users/thaJeztah/orgs","repos_url":"https://api.github.com/users/thaJeztah/repos","events_url":"https://api.github.com/users/thaJeztah/events{/privacy}","received_events_url":"https://api.github.com/users/thaJeztah/received_events","type":"User","site_admin":false},"created_at":"2017-04-02T22:15:35Z","updated_at":"2017-04-02T22:15:35Z","body":"From https://github.com/docker/docker/issues/29794#issuecomment-290729669\r\n\r\n> However, IIRC Ubuntu has some kernel patches related to IPC that might be causing this issue. Can anyone who is familiar with Ubuntu kernel patches comment?\r\n\r\n\r\nping @sforshee any ideas if that could be related, or should this be reported in the canonical issue tracker?"}}
{"actor":{"display_login":"thaJeztah"}}