Skip to content

[ci] not ok 70 runc run --no-pivot must not expose bare /proc #3050

@kolyshkin

Description

@kolyshkin

Seeing this on GHA CI starting today

not ok 70 runc run --no-pivot must not expose bare /proc
# (in test file tests/integration/no_pivot.bats, line 20)
#   `[[ "$output" == *"mount: permission denied"* ]]' failed
# runc spec (status=0):
# 
# runc run --no-pivot test_no_pivot (status=1):
# unshare: write error: Operation not permitted

with no changes in the relevant code (e.g. in #3021)

Seeing the same on my machine (apparently for the first time).

This test that is now failing was originally added in PR #2654 and was picked by #2657.

I tried runc HEAD, v1.0.0 and v1.0.0-rc95, they all fail in the same way.

I suspect the reason is updated kernel. From the failed CI job logs I see

Virtual Environment
Environment: ubuntu-20.04
Version: 20210628.1
Included Software: https://github.com/actions/virtual-environments/blob/ubuntu20/20210628.1/images/linux/Ubuntu2004-README.md

and from that README I see

Linux kernel version: 5.8.0-1036-azure

Now, a non-failed job (from yesterday) has

Virtual Environment
Environment: ubuntu-20.04
Version: 20210614.1
Included Software: https://github.com/actions/virtual-environments/blob/ubuntu20/20210614.1/images/linux/Ubuntu2004-README.md

and the README says

Linux kernel version: 5.8.0-1033-azure

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions