Skip to content

Conversation

AkihiroSuda
Copy link
Member

Fix #976

Fix issue 976

Signed-off-by: Akihiro Suda <[email protected]>
@AkihiroSuda AkihiroSuda added this to the v0.19.0 (tentative) milestone Apr 12, 2022
@AkihiroSuda AkihiroSuda requested a review from ktock April 12, 2022 04:29
@AkihiroSuda AkihiroSuda merged commit 9864cd6 into containerd:master Apr 12, 2022
@disconnect3d
Copy link

@AkihiroSuda out of curiosity, how/why does those changes fix the issue of ptrace failing due to seccomp when we only changed the order of applying certain opts?

@AkihiroSuda
Copy link
Member Author

@AkihiroSuda out of curiosity, how/why does those changes fix the issue of ptrace failing due to seccomp when we only changed the order of applying certain opts?

Because the seccomp profile generator depends on .Process.Capabilities.Bounding .
https://github.com/containerd/containerd/blob/eaf286224b0144dd11c0e68c131d5dd9ebf52a23/contrib/seccomp/seccomp_default.go#L524

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

--cap-add not working in run command
3 participants