Running in Docker (SBCL warning)

While building or running pgloader in a Docker container, you might come across this message:

WARNING: Couldn't re-execute SBCL with proper personality flags (/proc isn't mounted? setuid?) Trying to continue anyway.

You can safely ignore the warning if the application runs as expected afterwards, or you can give the container the required permissions.

If you are using docker run, you can:

• use docker run --security-opt seccomp=unconfined (disables seccomp for the container, possibly insecure)
• use docker run --security-opt seccomp=/path/to/docker-sbcl-seccomp.json (find the file in the slime-docker project)

If you are using docker-compose or swarm stacks, the above options may or may not work depending on your docker version.

See also:

• https://github.com/daewok/slime-docker/blob/master/README.md#sbcl-aslr
• https://github.com/docker/compose/issues/2813
• https://github.com/moby/moby/issues/25209
• https://docs.docker.com/compose/compose-file/#security_opt