Skip to content
Success

Changes

Summary

  1. rpm: disable seccomp to prevent tar EPERM (Fedora 40 ppc64le on Debian) (details)
Commit 01886f57cb0810c30d2c46902e0339c101df7b18 by Sebastiaan van Stijn
rpm: disable seccomp to prevent tar EPERM (Fedora 40 ppc64le on Debian)

commit 07b5d9031f18ad8317f23738c7ff4ce9f77e3ee3 disabled seccomp for the
deb-builds because `chmod` failed tar was failing with an EPERM (Ubuntu
24.04 armhf on 20.04 host).

It looks like the same problem happens when running Fedora 40 on a Debian
bookworm host on ppc64le.

That issue was confirmed to be related to `fchmodat2(2)`, which is a new
syscall that's not supported on the host, and therefore gets the seccomp's
default EPERM;

    fchmodat2(AT_FDCWD, "docker", 0775, AT_SYMLINK_NOFOLLOW) = -1 EPERM (Operation not permitted)
    tar: docker: Cannot change mode to rwxrwxr-x: Operation not permitted
    tar: Exiting with failure status due to previous errors

Ultimately we need to update the libseccomp profile to use ENOSYS (see
moby ticket 42871) to allow it to degrade gracefully;

    fchmodat2(AT_FDCWD, "docker", 0775, AT_SYMLINK_NOFOLLOW) = -1 ENOSYS (Function not implemented)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
The file was modified rpm/Makefile (diff)