Can't run docker image from another arhitecture on Ubuntu 21.10 (qemu: qemu_thread_create: Operation not permitted) #42963
Description
Description
Can't run docker image from another arhitecture on Ubuntu 21.10 (Ubuntu 21.04 works correctly).
Executing binaries for another arhitecture without docker works correctly.
Steps to reproduce the issue:
- Install Ubuntu 21.10 without any specific settings
- Install docker (https://docs.docker.com/engine/install/ubuntu/)
- Install qemu user static (
apt install qemu-user-static) - Run docker image for another platform (
docker run --rm -it --platform arm64 alpine arch)
Describe the results you received:
Docker container is not started with Operation not permitted error:
$ docker run --rm -it --platform arm64 alpine arch
qemu: qemu_thread_create: Operation not permitted
Describe the results you expected:
Expected result (same as on Ubuntu 21.04):
$ docker run --rm -it --platform arm64 alpine arch
aarch64
Additional information you deem important (e.g. issue happens only occasionally):
Output of docker version:
Client: Docker Engine - Community
Version: 20.10.9
API version: 1.41
Go version: go1.16.8
Git commit: c2ea9bc
Built: Mon Oct 4 16:08:41 2021
OS/Arch: linux/amd64
Context: default
Experimental: true
Server: Docker Engine - Community
Engine:
Version: 20.10.9
API version: 1.41 (minimum version 1.12)
Go version: go1.16.8
Git commit: 79ea9d3
Built: Mon Oct 4 16:06:48 2021
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: 1.4.11
GitCommit: 5b46e404f6b9f661a205e28d59c982d3634148f8
runc:
Version: 1.0.2
GitCommit: v1.0.2-0-g52b36a2
docker-init:
Version: 0.19.0
GitCommit: de40ad0
Output of docker info:
Client:
Context: default
Debug Mode: false
Plugins:
app: Docker App (Docker Inc., v0.9.1-beta3)
buildx: Build with BuildKit (Docker Inc., v0.6.3-docker)
scan: Docker Scan (Docker Inc., v0.8.0)
Server:
Containers: 33
Running: 0
Paused: 0
Stopped: 33
Images: 379
Server Version: 20.10.9
Storage Driver: btrfs
Build Version: Btrfs v5.10.1
Library Version: 102
Logging Driver: json-file
Cgroup Driver: systemd
Cgroup Version: 2
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
Swarm: inactive
Runtimes: io.containerd.runc.v2 io.containerd.runtime.v1.linux runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 5b46e404f6b9f661a205e28d59c982d3634148f8
runc version: v1.0.2-0-g52b36a2
init version: de40ad0
Security Options:
apparmor
seccomp
Profile: default
cgroupns
Kernel Version: 5.13.0-20-generic
Operating System: Ubuntu 21.10
OSType: linux
Architecture: x86_64
CPUs: 12
Total Memory: 62.75GiB
Name: landfill
ID: BMSR:XZKM:OBJM:EGUZ:AA6P:IFDP:YSLW:DITV:JQDF:SX5P:NI5K:EI7J
Docker Root Dir: /var/lib/docker
Debug Mode: false
Username: bozaro
Registry: https://index.docker.io/v1/
Labels:
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: false
Additional environment details (AWS, VirtualBox, physical, etc.):
Physical workstation (Intel i7-8700K) with fresh Ubuntu 21.10 installation.
uname -a
Linux landfill 5.13.0-20-generic #20-Ubuntu SMP Fri Oct 15 14:21:35 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux