Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Creating Container failed #101

Open
WotoAOT opened this issue Mar 7, 2022 · 14 comments
Open

Creating Container failed #101

WotoAOT opened this issue Mar 7, 2022 · 14 comments

Comments

@WotoAOT
Copy link

WotoAOT commented Mar 7, 2022

Hello,
when launching the image I get the following error message in Docker desktop:

The futex facility returned an unexpected error code.

/usr/bin/atom: line 192: 16 Aborted "$ATOM_PATH" --executed-from="$(pwd)" --pid=$$ "$@"

what can I do?

@jamesnetherton
Copy link
Owner

I can reproduce the problem at least. Let me see if can fix it and push an updated image.

@WotoAOT
Copy link
Author

WotoAOT commented Mar 7, 2022

Thank very much !

@jamesnetherton
Copy link
Owner

A possible (not ideal) workaround for now would be to run the container in privileged mode. E.g with the --privileged argument.

@WotoAOT
Copy link
Author

WotoAOT commented Mar 7, 2022

ok, i will try.

@WotoAOT
Copy link
Author

WotoAOT commented Mar 7, 2022

Unfortunately, I am a newbie in this field.

I get the following error message when I download the image from the repository and run the run command with --privileged:

Unable to find image 'privileged:latest' locally
docker: Error response from daemon: pull access denied for privileged, repository does not exist or may require 'docker login': denied: requested access to the resource is denied.

The run command is:

docker run -d --name atom
-v /tmp/.X11-unix/:/tmp/.X11-unix/
-v /dev/shm:/dev/shm
-v ${HOME}/.atom:/home/atom/.atom
-e DISPLAY
-- privileged
jamesnetherton/docker-atom-editor

@jamesnetherton
Copy link
Owner

jamesnetherton commented Mar 7, 2022

In your example, you have some extra space between -- and privileged. Try removing it. E.g it should be --privileged.

@WotoAOT
Copy link
Author

WotoAOT commented Mar 7, 2022

oh sorry, i didn't see that.

Now I can create the image.
But after the start I still get the error message:

The futex facility returned an unexpected error code.

/usr/bin/atom: line 192: 17 Aborted "$ATOM_PATH" --executed-from="$(pwd)" --pid=$$ "$@"

@jamesnetherton
Copy link
Owner

For me it's working in privileged mode....

One thing to check, is the permissions on your host machine for the .atom directory with ls -ld ${HOME}/.atom.

The owner should be your local user. If the owner shows as root. Then do chown -R ${USER}:${USER} ~/.atom.

@WotoAOT
Copy link
Author

WotoAOT commented Mar 7, 2022

Hello,
when I run the command I get the following picture:
bild1

@WotoAOT
Copy link
Author

WotoAOT commented Mar 7, 2022

I have now given the .atom directory all permissions (under Windows10) and started the RUN command with the --privileged parameter.

Now I get the message again:

The futex facility returned an unexpected error code.

/usr/bin/atom: line 192: 17 Aborted "$ATOM_PATH" --executed-from="$(pwd)" --pid=$$ "$@"

@jamesnetherton
Copy link
Owner

Ok - then I guess it's not an issue with permissions. I don't use Windows or Docker Desktop so it's hard for me to figure out what's wrong for you.

The actual issue is that by default the container does not have permission to the clone kernel syscall. So running in privileged mode should be enabling that.

One other thing to try is adding --security-opt seccomp=unconfined to docker run.

@WotoAOT
Copy link
Author

WotoAOT commented Mar 7, 2022

Same behavior with --security-opt seccomp=unconfined.
But I can wait until the next fix update. No problem.

@WotoAOT
Copy link
Author

WotoAOT commented Mar 7, 2022

Hello,
in Docker's documentation stands for seccomp:

This feature is available only if Docker has been built with seccomp and the kernel is configured with CONFIG_SECCOMP enabled. To check if your kernel supports seccomp:

grep CONFIG_SECCOMP= /boot/config-$(uname -r)

Is enabled for the container seccomp?

Unfortunately I can't check this because the container is not running.

@jamesnetherton
Copy link
Owner

That command is meant for running on the host machine, not the container.

I guess for Docker Desktop on Windows the Docker host is actually a Linux VM. Presumably it can support seccomp....

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants