Skip to content

Instantly share code, notes, and snippets.

@danielnorberg
Last active November 27, 2023 13:01
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save danielnorberg/db9460552d393ae15e7d66588792ec3b to your computer and use it in GitHub Desktop.
Save danielnorberg/db9460552d393ae15e7d66588792ec3b to your computer and use it in GitHub Desktop.
I1127 12:59:00.056116 14130 main.go:189] ***************************
I1127 12:59:00.056149 14130 main.go:190] Args: [/usr/local/bin/runsc --debug --debug-log=/tmp/runsc/ --strace --log-packets --root /var/run/docker/runtime-runc/moby --log /run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/log.json --log-format json create --bundle /run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 --pid-file /run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/init.pid f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6]
I1127 12:59:00.056157 14130 main.go:191] Version release-20231113.0
I1127 12:59:00.056161 14130 main.go:192] GOOS: linux
I1127 12:59:00.056164 14130 main.go:193] GOARCH: amd64
I1127 12:59:00.056168 14130 main.go:194] PID: 14130
I1127 12:59:00.056172 14130 main.go:195] UID: 0, GID: 0
I1127 12:59:00.056175 14130 main.go:196] Configuration:
I1127 12:59:00.056179 14130 main.go:197] RootDir: /var/run/docker/runtime-runc/moby
I1127 12:59:00.056182 14130 main.go:198] Platform: systrap
I1127 12:59:00.056185 14130 main.go:199] FileAccess: exclusive
I1127 12:59:00.056190 14130 main.go:200] Directfs: true
I1127 12:59:00.056193 14130 main.go:201] Overlay: root:self
I1127 12:59:00.056198 14130 main.go:202] Network: sandbox, logging: true
I1127 12:59:00.056202 14130 main.go:203] Strace: true, max size: 1024, syscalls:
I1127 12:59:00.056206 14130 main.go:204] IOURING: false
I1127 12:59:00.056214 14130 main.go:205] Debug: true
I1127 12:59:00.056218 14130 main.go:206] Systemd: false
I1127 12:59:00.056221 14130 main.go:207] ***************************
W1127 12:59:00.056880 14130 specutils.go:118] AppArmor profile "docker-default" is being ignored
W1127 12:59:00.056893 14130 specutils.go:124] noNewPrivileges ignored. PR_SET_NO_NEW_PRIVS is assumed to always be set.
D1127 12:59:00.057005 14130 specutils.go:86] Spec:
{
"ociVersion": "1.1.0-rc.2",
"process": {
"user": {
"uid": 0,
"gid": 0,
"additionalGids": [
0
]
},
"args": [
"/hello"
],
"env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"HOSTNAME=f752f1cdc8c4"
],
"cwd": "/",
"apparmorProfile": "docker-default",
"oomScoreAdj": 0
},
"root": {
"path": "/var/lib/docker/overlay2/f89a0cd58f5ec918c7e6319cab5882379c1ffaeb24bc3afa039779bbae4ed80e/merged"
},
"hostname": "f752f1cdc8c4",
"mounts": [
{
"destination": "/proc",
"type": "proc",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/proc",
"options": [
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev",
"type": "tmpfs",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/tmpfs",
"options": [
"nosuid",
"strictatime",
"mode=755",
"size=65536k"
]
},
{
"destination": "/dev/pts",
"type": "devpts",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/devpts",
"options": [
"nosuid",
"noexec",
"newinstance",
"ptmxmode=0666",
"mode=0620",
"gid=5"
]
},
{
"destination": "/sys",
"type": "sysfs",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/sysfs",
"options": [
"nosuid",
"noexec",
"nodev",
"ro"
]
},
{
"destination": "/sys/fs/cgroup",
"type": "cgroup",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup",
"options": [
"ro",
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev/mqueue",
"type": "mqueue",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/mqueue",
"options": [
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev/shm",
"type": "tmpfs",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/shm",
"options": [
"nosuid",
"noexec",
"nodev",
"mode=1777",
"size=67108864"
]
},
{
"destination": "/etc/resolv.conf",
"type": "bind",
"source": "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/resolv.conf",
"options": [
"rbind",
"rprivate"
]
},
{
"destination": "/etc/hostname",
"type": "bind",
"source": "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hostname",
"options": [
"rbind",
"rprivate"
]
},
{
"destination": "/etc/hosts",
"type": "bind",
"source": "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hosts",
"options": [
"rbind",
"rprivate"
]
}
],
"hooks": {
"prestart": [
{
"path": "/proc/8084/exe",
"args": [
"libnetwork-setkey",
"-exec-root=/var/run/docker",
"f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6",
"c6dc330a7930"
]
}
]
},
"linux": {
"sysctl": {
"net.ipv4.ip_unprivileged_port_start": "0",
"net.ipv4.ping_group_range": "0 2147483647"
},
"resources": {
"memory": {
"disableOOMKiller": false
},
"blockIO": {}
},
"cgroupsPath": "/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6",
"namespaces": [
{
"type": "mount"
},
{
"type": "network"
},
{
"type": "uts"
},
{
"type": "pid"
},
{
"type": "ipc"
}
]
}
}
D1127 12:59:00.057020 14130 container.go:198] Create container, cid: f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6, rootDir: "/var/run/docker/runtime-runc/moby"
D1127 12:59:00.057053 14130 container.go:1761] Configuring container with a new userns with identity user mappings into current userns
D1127 12:59:00.057082 14130 container.go:1817] UID Mappings:
D1127 12:59:00.057085 14130 container.go:1819] Container ID: 0, Host ID: 0, Range Length: 4294967295
D1127 12:59:00.057097 14130 container.go:1817] GID Mappings:
D1127 12:59:00.057100 14130 container.go:1819] Container ID: 0, Host ID: 0, Range Length: 4294967295
D1127 12:59:00.057119 14130 container.go:260] Creating new sandbox for container, cid: f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6
D1127 12:59:00.057134 14130 cgroup.go:410] New cgroup for pid: self, *cgroup.cgroupV1: &{Name:/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 Parents:map[] Own:map[]}
D1127 12:59:00.057155 14130 cgroup.go:483] Installing cgroup path "/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.057226 14130 cgroup.go:539] Creating cgroup "cpu": "/sys/fs/cgroup/cpu/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.057280 14130 cgroup.go:539] Creating cgroup "cpuset": "/sys/fs/cgroup/cpuset/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.069980 14130 cgroup.go:539] Creating cgroup "net_prio": "/sys/fs/cgroup/net_prio/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070042 14130 cgroup.go:539] Creating cgroup "cpuacct": "/sys/fs/cgroup/cpuacct/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070057 14130 cgroup.go:539] Creating cgroup "rdma": "/sys/fs/cgroup/rdma/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070077 14130 cgroup.go:539] Creating cgroup "memory": "/sys/fs/cgroup/memory/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070123 14130 cgroup.go:539] Creating cgroup "net_cls": "/sys/fs/cgroup/net_cls/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070132 14130 cgroup.go:539] Creating cgroup "perf_event": "/sys/fs/cgroup/perf_event/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070150 14130 cgroup.go:539] Creating cgroup "pids": "/sys/fs/cgroup/pids/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070170 14130 cgroup.go:539] Creating cgroup "devices": "/sys/fs/cgroup/devices/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070189 14130 cgroup.go:539] Creating cgroup "freezer": "/sys/fs/cgroup/freezer/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070206 14130 cgroup.go:539] Creating cgroup "blkio": "/sys/fs/cgroup/blkio/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070230 14130 cgroup.go:539] Creating cgroup "hugetlb": "/sys/fs/cgroup/hugetlb/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070265 14130 cgroup.go:539] Creating cgroup "systemd": "/sys/fs/cgroup/systemd/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070323 14130 container.go:1036] Created filestore file at "/var/lib/docker/overlay2/f89a0cd58f5ec918c7e6319cab5882379c1ffaeb24bc3afa039779bbae4ed80e/merged/.gvisor.filestore.f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6" for mount source "/var/lib/docker/overlay2/f89a0cd58f5ec918c7e6319cab5882379c1ffaeb24bc3afa039779bbae4ed80e/merged"
D1127 12:59:00.070506 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/cpuset/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070511 14130 cgroup.go:116] Setting "/sys/fs/cgroup/cpuset/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.070544 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/net_prio/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070548 14130 cgroup.go:116] Setting "/sys/fs/cgroup/net_prio/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.070565 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/cpuacct/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070568 14130 cgroup.go:116] Setting "/sys/fs/cgroup/cpuacct/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.070591 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/rdma/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070595 14130 cgroup.go:116] Setting "/sys/fs/cgroup/rdma/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.070607 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/cpu/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070611 14130 cgroup.go:116] Setting "/sys/fs/cgroup/cpu/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.070619 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/net_cls/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070629 14130 cgroup.go:116] Setting "/sys/fs/cgroup/net_cls/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.070640 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/perf_event/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.070643 14130 cgroup.go:116] Setting "/sys/fs/cgroup/perf_event/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.070998 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/memory/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.071002 14130 cgroup.go:116] Setting "/sys/fs/cgroup/memory/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.071016 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/devices/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.071019 14130 cgroup.go:116] Setting "/sys/fs/cgroup/devices/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.071032 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/freezer/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.071036 14130 cgroup.go:116] Setting "/sys/fs/cgroup/freezer/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.071048 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/pids/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.071052 14130 cgroup.go:116] Setting "/sys/fs/cgroup/pids/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.071066 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/hugetlb/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.071071 14130 cgroup.go:116] Setting "/sys/fs/cgroup/hugetlb/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.071087 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/systemd/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.071090 14130 cgroup.go:116] Setting "/sys/fs/cgroup/systemd/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
D1127 12:59:00.071103 14130 cgroup.go:616] Joining cgroup "/sys/fs/cgroup/blkio/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.071107 14130 cgroup.go:116] Setting "/sys/fs/cgroup/blkio/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup.procs" to "0"
I1127 12:59:00.071242 14130 namespace.go:202] Mapping host uid 0 to container uid 0 (size=4294967295)
I1127 12:59:00.071248 14130 namespace.go:210] Mapping host gid 0 to container gid 0 (size=4294967295)
D1127 12:59:00.071253 14130 donation.go:31] Donating FD 3: "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/log.json"
D1127 12:59:00.071258 14130 donation.go:31] Donating FD 4: "/tmp/runsc/runsc.log.20231127-125900.071126.gofer.txt"
D1127 12:59:00.071261 14130 donation.go:31] Donating FD 5: "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/config.json"
D1127 12:59:00.071264 14130 donation.go:31] Donating FD 6: "|1"
D1127 12:59:00.071267 14130 donation.go:31] Donating FD 7: "gofer IO FD"
D1127 12:59:00.071269 14130 donation.go:31] Donating FD 8: "gofer IO FD"
D1127 12:59:00.071272 14130 donation.go:31] Donating FD 9: "gofer IO FD"
D1127 12:59:00.071274 14130 donation.go:31] Donating FD 10: "gofer IO FD"
D1127 12:59:00.071277 14130 container.go:1348] Starting gofer: /proc/self/exe [runsc-gofer --root=/var/run/docker/runtime-runc/moby --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/log.json --log-format=json --debug-log=/tmp/runsc/ --log-packets=true --strace=true --log-fd=3 --debug-log-fd=4 gofer --bundle /run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 --gofer-mount-confs=lisafs:self,lisafs:none,lisafs:none,lisafs:none --spec-fd=5 --mounts-fd=6 --io-fds=7 --io-fds=8 --io-fds=9 --io-fds=10]
I1127 12:59:00.072286 14130 container.go:1352] Gofer started, PID: 14136
D1127 12:59:00.072448 14130 sandbox.go:84] Attempting to create socket file "/var/run/docker/runtime-runc/moby/runsc-f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6.sock"
D1127 12:59:00.072480 14130 sandbox.go:87] Using socket file "/var/run/docker/runtime-runc/moby/runsc-f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6.sock"
I1127 12:59:00.072485 14130 sandbox.go:774] Control socket path: "/var/run/docker/runtime-runc/moby/runsc-f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6.sock"
I1127 12:59:00.072498 14130 sandbox.go:809] Sandbox will be started in new mount, IPC and UTS namespaces
I1127 12:59:00.072504 14130 sandbox.go:819] Sandbox will be started in the current PID namespace
I1127 12:59:00.072510 14130 sandbox.go:838] Sandbox will be started in the container's network namespace: {Type:network Path:}
I1127 12:59:00.072527 14130 sandbox.go:860] Sandbox will be started in container's user namespace: {Type:user Path:}
I1127 12:59:00.072537 14130 namespace.go:202] Mapping host uid 0 to container uid 0 (size=4294967295)
I1127 12:59:00.072542 14130 namespace.go:210] Mapping host gid 0 to container gid 0 (size=4294967295)
I1127 12:59:00.072582 14130 sandbox.go:890] Sandbox will be started in minimal chroot
D1127 12:59:00.072593 14130 sandbox.go:1489] Changing "/dev/stdin" ownership to 0/0
D1127 12:59:00.072600 14130 sandbox.go:1489] Changing "/dev/stdout" ownership to 0/0
D1127 12:59:00.072605 14130 sandbox.go:1489] Changing "/dev/stderr" ownership to 0/0
D1127 12:59:00.072657 14130 donation.go:31] Donating FD 3: "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/log.json"
D1127 12:59:00.072662 14130 donation.go:31] Donating FD 4: "/tmp/runsc/runsc.log.20231127-125900.072339.boot.txt"
D1127 12:59:00.072666 14130 donation.go:31] Donating FD 5: "sandbox IO FD"
D1127 12:59:00.072669 14130 donation.go:31] Donating FD 6: "sandbox IO FD"
D1127 12:59:00.072673 14130 donation.go:31] Donating FD 7: "sandbox IO FD"
D1127 12:59:00.072679 14130 donation.go:31] Donating FD 8: "sandbox IO FD"
D1127 12:59:00.072682 14130 donation.go:31] Donating FD 9: "/var/lib/docker/overlay2/f89a0cd58f5ec918c7e6319cab5882379c1ffaeb24bc3afa039779bbae4ed80e/merged/.gvisor.filestore.f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.072691 14130 donation.go:31] Donating FD 10: "|0"
D1127 12:59:00.072694 14130 donation.go:31] Donating FD 11: "|1"
D1127 12:59:00.072700 14130 donation.go:31] Donating FD 12: "control_server_socket"
D1127 12:59:00.072703 14130 donation.go:31] Donating FD 13: "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/config.json"
D1127 12:59:00.072708 14130 donation.go:31] Donating FD 14: "/dev/stdin"
D1127 12:59:00.072711 14130 donation.go:31] Donating FD 15: "/dev/stdout"
D1127 12:59:00.072714 14130 donation.go:31] Donating FD 16: "/dev/stderr"
D1127 12:59:00.072717 14130 sandbox.go:1075] Starting sandbox: /proc/self/exe [runsc-sandbox --root=/var/run/docker/runtime-runc/moby --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/log.json --log-format=json --debug-log=/tmp/runsc/ --log-packets=true --strace=true --log-fd=3 --debug-log-fd=4 boot --bundle=/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 --gofer-mount-confs=lisafs:self,lisafs:none,lisafs:none,lisafs:none --apply-caps=true --setup-root --total-host-memory 66331418624 --cpu-num 16 --total-memory 66331418624 --io-fds=5 --io-fds=6 --io-fds=7 --io-fds=8 --dev-io-fd=-1 --gofer-filestore-fds=9 --mounts-fd=10 --start-sync-fd=11 --controller-fd=12 --spec-fd=13 --stdio-fds=14 --stdio-fds=15 --stdio-fds=16 f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6]
D1127 12:59:00.072733 14130 sandbox.go:1076] SysProcAttr: &{Chroot: Credential:0xc000317170 Ptrace:false Setsid:true Setpgid:false Setctty:false Noctty:false Ctty:0 Foreground:false Pgid:0 Pdeathsig:signal 0 Cloneflags:0 Unshareflags:0 UidMappings:[{ContainerID:0 HostID:0 Size:4294967295}] GidMappings:[{ContainerID:0 HostID:0 Size:4294967295}] GidMappingsEnableSetgroups:false AmbientCaps:[] UseCgroupFD:false CgroupFD:0}
I1127 12:59:00.073650 14130 sandbox.go:1104] Sandbox started, PID: 14141
D1127 12:59:00.210922 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/blkio/system.slice/containerd.service"
D1127 12:59:00.210965 14130 cgroup.go:116] Setting "/sys/fs/cgroup/blkio/system.slice/containerd.service/cgroup.procs" to "0"
D1127 12:59:00.211019 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/hugetlb"
D1127 12:59:00.211025 14130 cgroup.go:116] Setting "/sys/fs/cgroup/hugetlb/cgroup.procs" to "0"
D1127 12:59:00.211050 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/systemd/system.slice/containerd.service"
D1127 12:59:00.211053 14130 cgroup.go:116] Setting "/sys/fs/cgroup/systemd/system.slice/containerd.service/cgroup.procs" to "0"
D1127 12:59:00.211068 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/pids/system.slice/containerd.service"
D1127 12:59:00.211071 14130 cgroup.go:116] Setting "/sys/fs/cgroup/pids/system.slice/containerd.service/cgroup.procs" to "0"
D1127 12:59:00.211085 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/devices/system.slice/containerd.service"
D1127 12:59:00.211088 14130 cgroup.go:116] Setting "/sys/fs/cgroup/devices/system.slice/containerd.service/cgroup.procs" to "0"
D1127 12:59:00.211101 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/rdma"
D1127 12:59:00.211109 14130 cgroup.go:116] Setting "/sys/fs/cgroup/rdma/cgroup.procs" to "0"
D1127 12:59:00.211119 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/cpuacct/system.slice/containerd.service"
D1127 12:59:00.211122 14130 cgroup.go:116] Setting "/sys/fs/cgroup/cpuacct/system.slice/containerd.service/cgroup.procs" to "0"
D1127 12:59:00.211146 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/memory/system.slice/containerd.service"
D1127 12:59:00.211149 14130 cgroup.go:116] Setting "/sys/fs/cgroup/memory/system.slice/containerd.service/cgroup.procs" to "0"
D1127 12:59:00.211162 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/freezer"
D1127 12:59:00.211165 14130 cgroup.go:116] Setting "/sys/fs/cgroup/freezer/cgroup.procs" to "0"
D1127 12:59:00.211178 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/perf_event"
D1127 12:59:00.211183 14130 cgroup.go:116] Setting "/sys/fs/cgroup/perf_event/cgroup.procs" to "0"
D1127 12:59:00.211635 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/net_cls"
D1127 12:59:00.211638 14130 cgroup.go:116] Setting "/sys/fs/cgroup/net_cls/cgroup.procs" to "0"
D1127 12:59:00.211653 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/net_prio"
D1127 12:59:00.211656 14130 cgroup.go:116] Setting "/sys/fs/cgroup/net_prio/cgroup.procs" to "0"
D1127 12:59:00.211663 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/cpuset"
D1127 12:59:00.211666 14130 cgroup.go:116] Setting "/sys/fs/cgroup/cpuset/cgroup.procs" to "0"
D1127 12:59:00.225720 14130 cgroup.go:602] Restoring cgroup "/sys/fs/cgroup/cpu/system.slice/containerd.service"
D1127 12:59:00.225744 14130 cgroup.go:116] Setting "/sys/fs/cgroup/cpu/system.slice/containerd.service/cgroup.procs" to "0"
D1127 12:59:00.225775 14130 container.go:1073] Save container, cid: f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6
D1127 12:59:00.226168 14130 hook.go:63] Executing hook {Path:/proc/8084/exe Args:[libnetwork-setkey -exec-root=/var/run/docker f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 c6dc330a7930] Env:[] Timeout:<nil>}, state: {Version:1.1.0-rc.1 ID:f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 Status:created Pid:14141 Bundle:/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 Annotations:map[]}
D1127 12:59:00.321652 14130 hook.go:118] Execute hook "/proc/8084/exe" success!
I1127 12:59:00.321710 14130 main.go:224] Exiting with status: 0
I1127 12:59:00.103824 1 main.go:189] ***************************
I1127 12:59:00.103857 1 main.go:190] Args: [runsc-gofer --root=/var/run/docker/runtime-runc/moby --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/log.json --log-format=json --debug-log=/tmp/runsc/ --log-packets=true --strace=true --log-fd=3 --debug-log-fd=4 gofer --bundle /run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 --gofer-mount-confs=lisafs:self,lisafs:none,lisafs:none,lisafs:none --spec-fd=5 --mounts-fd=6 --io-fds=7 --io-fds=8 --io-fds=9 --io-fds=10]
I1127 12:59:00.103868 1 main.go:191] Version release-20231113.0
I1127 12:59:00.103872 1 main.go:192] GOOS: linux
I1127 12:59:00.103876 1 main.go:193] GOARCH: amd64
I1127 12:59:00.103880 1 main.go:194] PID: 1
I1127 12:59:00.103883 1 main.go:195] UID: 0, GID: 0
I1127 12:59:00.103887 1 main.go:196] Configuration:
I1127 12:59:00.103891 1 main.go:197] RootDir: /var/run/docker/runtime-runc/moby
I1127 12:59:00.103894 1 main.go:198] Platform: systrap
I1127 12:59:00.103897 1 main.go:199] FileAccess: exclusive
I1127 12:59:00.103902 1 main.go:200] Directfs: true
I1127 12:59:00.103905 1 main.go:201] Overlay: root:self
I1127 12:59:00.103909 1 main.go:202] Network: sandbox, logging: true
I1127 12:59:00.103914 1 main.go:203] Strace: true, max size: 1024, syscalls:
I1127 12:59:00.103918 1 main.go:204] IOURING: false
I1127 12:59:00.103921 1 main.go:205] Debug: true
I1127 12:59:00.103925 1 main.go:206] Systemd: false
I1127 12:59:00.103928 1 main.go:207] ***************************
W1127 12:59:00.104693 1 specutils.go:118] AppArmor profile "docker-default" is being ignored
W1127 12:59:00.104704 1 specutils.go:124] noNewPrivileges ignored. PR_SET_NO_NEW_PRIVS is assumed to always be set.
I1127 12:59:00.104852 1 gofer.go:500] Mounting src: "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/resolv.conf", dst: "/proc/root/etc/resolv.conf", flags: 0x5000
I1127 12:59:00.104887 1 gofer.go:500] Mounting src: "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hostname", dst: "/proc/root/etc/hostname", flags: 0x5000
I1127 12:59:00.104908 1 gofer.go:500] Mounting src: "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hosts", dst: "/proc/root/etc/hosts", flags: 0x5000
I1127 12:59:00.104926 1 gofer.go:442] Create working directory "/" if needed
I1127 12:59:00.104930 1 gofer.go:456] Remounting root as readonly: "/proc/root"
I1127 12:59:00.105437 1 capability.go:66] Capabilities applied: { effective="chown, dac_override, dac_read_search, fowner, fsetid, sys_chroot" permitted="chown, dac_override, dac_read_search, fowner, fsetid, sys_chroot" inheritable="empty" bounding="chown, dac_override, dac_read_search, fowner, fsetid, sys_chroot" }
I1127 12:59:00.105453 1 cmd.go:82] Execve "/proc/self/exe" again, bye!
I1127 12:59:00.136014 1 main.go:189] ***************************
I1127 12:59:00.136037 1 main.go:190] Args: [runsc-gofer --root=/var/run/docker/runtime-runc/moby --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/log.json --log-format=json --debug-log=/tmp/runsc/ --log-packets=true --strace=true --log-fd=3 --debug-log-fd=4 gofer --bundle=/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 --gofer-mount-confs=lisafs:self,lisafs:none,lisafs:none,lisafs:none --io-fds=7,8,9,10 --mounts-fd=6 --spec-fd=5 --sync-nvproxy-fd=-1 --sync-userns-fd=-1 --proc-mount-sync-fd=17 --apply-caps=false --setup-root=false]
I1127 12:59:00.136051 1 main.go:191] Version release-20231113.0
I1127 12:59:00.136055 1 main.go:192] GOOS: linux
I1127 12:59:00.136064 1 main.go:193] GOARCH: amd64
I1127 12:59:00.136068 1 main.go:194] PID: 1
I1127 12:59:00.136072 1 main.go:195] UID: 0, GID: 0
I1127 12:59:00.136076 1 main.go:196] Configuration:
I1127 12:59:00.136080 1 main.go:197] RootDir: /var/run/docker/runtime-runc/moby
I1127 12:59:00.136084 1 main.go:198] Platform: systrap
I1127 12:59:00.136088 1 main.go:199] FileAccess: exclusive
I1127 12:59:00.136093 1 main.go:200] Directfs: true
I1127 12:59:00.136097 1 main.go:201] Overlay: root:self
I1127 12:59:00.136101 1 main.go:202] Network: sandbox, logging: true
I1127 12:59:00.136107 1 main.go:203] Strace: true, max size: 1024, syscalls:
I1127 12:59:00.136111 1 main.go:204] IOURING: false
I1127 12:59:00.136114 1 main.go:205] Debug: true
I1127 12:59:00.136118 1 main.go:206] Systemd: false
I1127 12:59:00.136121 1 main.go:207] ***************************
W1127 12:59:00.136771 1 specutils.go:118] AppArmor profile "docker-default" is being ignored
W1127 12:59:00.136784 1 specutils.go:124] noNewPrivileges ignored. PR_SET_NO_NEW_PRIVS is assumed to always be set.
D1127 12:59:00.136930 1 specutils.go:86] Spec:
{
"ociVersion": "1.1.0-rc.2",
"process": {
"user": {
"uid": 0,
"gid": 0,
"additionalGids": [
0
]
},
"args": [
"/hello"
],
"env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"HOSTNAME=f752f1cdc8c4"
],
"cwd": "/",
"apparmorProfile": "docker-default",
"oomScoreAdj": 0
},
"root": {
"path": "/var/lib/docker/overlay2/f89a0cd58f5ec918c7e6319cab5882379c1ffaeb24bc3afa039779bbae4ed80e/merged"
},
"hostname": "f752f1cdc8c4",
"mounts": [
{
"destination": "/proc",
"type": "proc",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/proc",
"options": [
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev",
"type": "tmpfs",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/tmpfs",
"options": [
"nosuid",
"strictatime",
"mode=755",
"size=65536k"
]
},
{
"destination": "/dev/pts",
"type": "devpts",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/devpts",
"options": [
"nosuid",
"noexec",
"newinstance",
"ptmxmode=0666",
"mode=0620",
"gid=5"
]
},
{
"destination": "/sys",
"type": "sysfs",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/sysfs",
"options": [
"nosuid",
"noexec",
"nodev",
"ro"
]
},
{
"destination": "/sys/fs/cgroup",
"type": "cgroup",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup",
"options": [
"ro",
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev/mqueue",
"type": "mqueue",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/mqueue",
"options": [
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev/shm",
"type": "tmpfs",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/shm",
"options": [
"nosuid",
"noexec",
"nodev",
"mode=1777",
"size=67108864"
]
},
{
"destination": "/etc/resolv.conf",
"type": "bind",
"source": "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/resolv.conf",
"options": [
"rbind",
"rprivate"
]
},
{
"destination": "/etc/hostname",
"type": "bind",
"source": "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hostname",
"options": [
"rbind",
"rprivate"
]
},
{
"destination": "/etc/hosts",
"type": "bind",
"source": "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hosts",
"options": [
"rbind",
"rprivate"
]
}
],
"hooks": {
"prestart": [
{
"path": "/proc/8084/exe",
"args": [
"libnetwork-setkey",
"-exec-root=/var/run/docker",
"f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6",
"c6dc330a7930"
]
}
]
},
"linux": {
"sysctl": {
"net.ipv4.ip_unprivileged_port_start": "0",
"net.ipv4.ping_group_range": "0 2147483647"
},
"resources": {
"memory": {
"disableOOMKiller": false
},
"blockIO": {}
},
"cgroupsPath": "/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6",
"namespaces": [
{
"type": "mount"
},
{
"type": "network"
},
{
"type": "uts"
},
{
"type": "pid"
},
{
"type": "ipc"
}
]
}
}
I1127 12:59:00.144359 1 gofer.go:235] Process chroot'd to "/root"
I1127 12:59:00.144385 1 seccomp.go:61] Installing seccomp filters for 59 syscalls (action=kill process)
D1127 12:59:00.144485 1 seccomp.go:426] syscall filter read: true => 0x616c6c6f77
D1127 12:59:00.144495 1 seccomp.go:426] syscall filter write: true => 0x616c6c6f77
D1127 12:59:00.144498 1 seccomp.go:426] syscall filter close: true => 0x616c6c6f77
D1127 12:59:00.144501 1 seccomp.go:426] syscall filter fstat: true => 0x616c6c6f77
D1127 12:59:00.144504 1 seccomp.go:426] syscall filter lseek: true => 0x616c6c6f77
D1127 12:59:00.144507 1 seccomp.go:426] syscall filter mmap: (arg0 == * && arg1 == * && arg2 & 0x4 == 0x4) => 0x6b696c6c2070726f63657373
D1127 12:59:00.144516 1 seccomp.go:426] syscall filter mmap: ((arg0 == * && arg1 == * && arg2 == * && arg3 == 0x1) || (arg0 == * && arg1 == * && arg2 == * && arg3 == 0x22) || (arg0 == * && arg1 == * && arg2 == * && arg3 == 0x32)) => 0x616c6c6f77
D1127 12:59:00.144523 1 seccomp.go:426] syscall filter mprotect: (arg0 == * && arg1 == * && arg2 & 0x4 == 0x4) => 0x6b696c6c2070726f63657373
D1127 12:59:00.144526 1 seccomp.go:426] syscall filter mprotect: true => 0x616c6c6f77
D1127 12:59:00.144531 1 seccomp.go:426] syscall filter munmap: true => 0x616c6c6f77
D1127 12:59:00.144538 1 seccomp.go:426] syscall filter rt_sigaction: true => 0x616c6c6f77
D1127 12:59:00.144541 1 seccomp.go:426] syscall filter rt_sigprocmask: true => 0x616c6c6f77
D1127 12:59:00.144544 1 seccomp.go:426] syscall filter rt_sigreturn: true => 0x616c6c6f77
D1127 12:59:00.144547 1 seccomp.go:426] syscall filter pread64: true => 0x616c6c6f77
D1127 12:59:00.144550 1 seccomp.go:426] syscall filter pwrite64: true => 0x616c6c6f77
D1127 12:59:00.144553 1 seccomp.go:426] syscall filter sched_yield: true => 0x616c6c6f77
D1127 12:59:00.144555 1 seccomp.go:426] syscall filter madvise: true => 0x616c6c6f77
D1127 12:59:00.144558 1 seccomp.go:426] syscall filter dup: true => 0x616c6c6f77
D1127 12:59:00.144561 1 seccomp.go:426] syscall filter nanosleep: true => 0x616c6c6f77
D1127 12:59:00.144564 1 seccomp.go:426] syscall filter getpid: true => 0x616c6c6f77
D1127 12:59:00.144567 1 seccomp.go:426] syscall filter accept: true => 0x616c6c6f77
D1127 12:59:00.144570 1 seccomp.go:426] syscall filter sendmsg: ((arg0 == * && arg1 == * && arg2 == 0x0) || (arg0 == * && arg1 == * && arg2 == 0x4040)) => 0x616c6c6f77
D1127 12:59:00.144575 1 seccomp.go:426] syscall filter recvmsg: ((arg0 == * && arg1 == * && arg2 == 0x60) || (arg0 == * && arg1 == * && arg2 == 0x62)) => 0x616c6c6f77
D1127 12:59:00.144583 1 seccomp.go:426] syscall filter shutdown: (arg0 == * && arg1 == 0x2) => 0x616c6c6f77
D1127 12:59:00.144587 1 seccomp.go:426] syscall filter socketpair: (arg0 == 0x1 && arg1 == 0x80005 && arg2 == 0x0) => 0x616c6c6f77
D1127 12:59:00.144591 1 seccomp.go:426] syscall filter clone: (arg0 == 0xd0f00 && arg1 == * && arg2 == 0x0 && arg3 == 0x0) => 0x616c6c6f77
D1127 12:59:00.144594 1 seccomp.go:426] syscall filter exit: true => 0x616c6c6f77
D1127 12:59:00.144597 1 seccomp.go:426] syscall filter fcntl: ((arg0 == * && arg1 == 0x3) || (arg0 == * && arg1 == 0x4) || (arg0 == * && arg1 == 0x1) || (arg0 == * && arg1 == 0x409)) => 0x616c6c6f77
D1127 12:59:00.144603 1 seccomp.go:426] syscall filter fsync: true => 0x616c6c6f77
D1127 12:59:00.144606 1 seccomp.go:426] syscall filter ftruncate: true => 0x616c6c6f77
D1127 12:59:00.144609 1 seccomp.go:426] syscall filter fchmod: true => 0x616c6c6f77
D1127 12:59:00.144612 1 seccomp.go:426] syscall filter gettimeofday: true => 0x616c6c6f77
D1127 12:59:00.144615 1 seccomp.go:426] syscall filter sigaltstack: true => 0x616c6c6f77
D1127 12:59:00.144618 1 seccomp.go:426] syscall filter fstatfs: true => 0x616c6c6f77
D1127 12:59:00.144620 1 seccomp.go:426] syscall filter gettid: true => 0x616c6c6f77
D1127 12:59:00.144623 1 seccomp.go:426] syscall filter futex: ((arg0 == * && arg1 == 0x80 && arg2 == * && arg3 == * && arg4 == 0x0) || (arg0 == * && arg1 == 0x81 && arg2 == * && arg3 == * && arg4 == 0x0) || (arg0 == * && arg1 == 0x0) || (arg0 == * && arg1 == 0x1)) => 0x616c6c6f77
D1127 12:59:00.144630 1 seccomp.go:426] syscall filter getdents64: true => 0x616c6c6f77
D1127 12:59:00.144633 1 seccomp.go:426] syscall filter restart_syscall: true => 0x616c6c6f77
D1127 12:59:00.144636 1 seccomp.go:426] syscall filter clock_gettime: true => 0x616c6c6f77
D1127 12:59:00.144639 1 seccomp.go:426] syscall filter exit_group: true => 0x616c6c6f77
D1127 12:59:00.144641 1 seccomp.go:426] syscall filter epoll_ctl: true => 0x616c6c6f77
D1127 12:59:00.144645 1 seccomp.go:426] syscall filter tgkill: arg0 == 0x1 => 0x616c6c6f77
D1127 12:59:00.144648 1 seccomp.go:426] syscall filter openat: true => 0x616c6c6f77
D1127 12:59:00.144651 1 seccomp.go:426] syscall filter mkdirat: true => 0x616c6c6f77
D1127 12:59:00.144654 1 seccomp.go:426] syscall filter mknodat: true => 0x616c6c6f77
D1127 12:59:00.144657 1 seccomp.go:426] syscall filter fchownat: true => 0x616c6c6f77
D1127 12:59:00.144661 1 seccomp.go:426] syscall filter newfstatat: true => 0x616c6c6f77
D1127 12:59:00.144664 1 seccomp.go:426] syscall filter unlinkat: true => 0x616c6c6f77
D1127 12:59:00.144667 1 seccomp.go:426] syscall filter renameat: true => 0x616c6c6f77
D1127 12:59:00.144670 1 seccomp.go:426] syscall filter linkat: true => 0x616c6c6f77
D1127 12:59:00.144672 1 seccomp.go:426] syscall filter symlinkat: true => 0x616c6c6f77
D1127 12:59:00.144675 1 seccomp.go:426] syscall filter readlinkat: true => 0x616c6c6f77
D1127 12:59:00.144678 1 seccomp.go:426] syscall filter fchmodat: true => 0x616c6c6f77
D1127 12:59:00.144681 1 seccomp.go:426] syscall filter ppoll: true => 0x616c6c6f77
D1127 12:59:00.144684 1 seccomp.go:426] syscall filter utimensat: true => 0x616c6c6f77
D1127 12:59:00.144686 1 seccomp.go:426] syscall filter epoll_pwait: (arg0 == * && arg1 == * && arg2 == * && arg3 == * && arg4 == 0x0) => 0x616c6c6f77
D1127 12:59:00.144690 1 seccomp.go:426] syscall filter fallocate: (arg0 == * && arg1 == 0x0) => 0x616c6c6f77
D1127 12:59:00.144693 1 seccomp.go:426] syscall filter eventfd2: (arg0 == 0x0 && arg1 == 0x0) => 0x616c6c6f77
D1127 12:59:00.144696 1 seccomp.go:426] syscall filter getcpu: (arg0 == * && arg1 == 0x0 && arg2 == 0x0) => 0x616c6c6f77
D1127 12:59:00.144700 1 seccomp.go:426] syscall filter getrandom: true => 0x616c6c6f77
D1127 12:59:00.144704 1 seccomp.go:426] syscall filter memfd_create: true => 0x616c6c6f77
D1127 12:59:00.150440 1 seccomp.go:391] Seccomp program optimized from 743 to 307 instructions; took 5.708552ms to build and 268.499µs to optimize
D1127 12:59:00.150591 1 seccomp.go:78] Seccomp program dump:
0: A <- P[4:4]
1: pc += (A == 3221225534) ? 1 [3] : 0 [2]
2: ret 2147483648
3: A <- P[0:4]
4: pc += (A >= 96) ? 0 [5] : 2 [7]
5: pc += (A > 96) ? 179 [185] : 0 [6]
6: ret 2147418112
7: pc += (A >= 28) ? 0 [8] : 2 [10]
8: pc += (A > 28) ? 67 [76] : 0 [9]
9: ret 2147418112
10: pc += (A >= 11) ? 0 [11] : 2 [13]
11: pc += (A > 11) ? 45 [57] : 0 [12]
12: ret 2147418112
13: pc += (A >= 5) ? 0 [14] : 2 [16]
14: pc += (A > 5) ? 8 [23] : 0 [15]
15: ret 2147418112
16: pc += (A >= 1) ? 0 [17] : 2 [19]
17: pc += (A > 1) ? 2 [20] : 0 [18]
18: ret 2147418112
19: ret 2147418112
20: pc += (A == 3) ? 1 [22] : 0 [21]
21: ret 2147483648
22: ret 2147418112
23: pc += (A >= 9) ? 0 [24] : 22 [46]
24: pc += (A > 9) ? 24 [49] : 0 [25]
25: A <- P[32:4]
26: A <- A & 4
27: pc += (A == 4) ? 0 [28] : 4 [32]
28: A <- P[36:4]
29: A <- A & 0
30: pc += (A == 0) ? 0 [31] : 1 [32]
31: ret 2147483648
32: A <- P[40:4]
33: pc += (A == 1) ? 0 [34] : 2 [36]
34: A <- P[44:4]
35: pc += (A == 0) ? 8 [44] : 0 [36]
36: A <- P[40:4]
37: pc += (A == 34) ? 0 [38] : 2 [40]
38: A <- P[44:4]
39: pc += (A == 0) ? 4 [44] : 0 [40]
40: A <- P[40:4]
41: pc += (A == 50) ? 0 [42] : 3 [45]
42: A <- P[44:4]
43: pc += (A == 0) ? 0 [44] : 1 [45]
44: ret 2147418112
45: ret 2147483648
46: pc += (A == 8) ? 1 [48] : 0 [47]
47: ret 2147483648
48: ret 2147418112
49: A <- P[32:4]
50: A <- A & 4
51: pc += (A == 4) ? 0 [52] : 4 [56]
52: A <- P[36:4]
53: A <- A & 0
54: pc += (A == 0) ? 0 [55] : 1 [56]
55: ret 2147483648
56: ret 2147418112
57: pc += (A >= 17) ? 0 [58] : 2 [60]
58: pc += (A > 17) ? 10 [69] : 0 [59]
59: ret 2147418112
60: pc += (A >= 14) ? 0 [61] : 2 [63]
61: pc += (A > 14) ? 4 [66] : 0 [62]
62: ret 2147418112
63: pc += (A == 13) ? 1 [65] : 0 [64]
64: ret 2147483648
65: ret 2147418112
66: pc += (A == 15) ? 1 [68] : 0 [67]
67: ret 2147483648
68: ret 2147418112
69: pc += (A >= 24) ? 0 [70] : 3 [73]
70: pc += (A == 24) ? 1 [72] : 0 [71]
71: ret 2147483648
72: ret 2147418112
73: pc += (A == 18) ? 1 [75] : 0 [74]
74: ret 2147483648
75: ret 2147418112
76: pc += (A >= 53) ? 0 [77] : 15 [92]
77: pc += (A > 53) ? 58 [136] : 0 [78]
78: A <- P[16:4]
79: pc += (A == 1) ? 0 [80] : 11 [91]
80: A <- P[20:4]
81: pc += (A == 0) ? 0 [82] : 9 [91]
82: A <- P[24:4]
83: pc += (A == 524293) ? 0 [84] : 7 [91]
84: A <- P[28:4]
85: pc += (A == 0) ? 0 [86] : 5 [91]
86: A <- P[32:4]
87: pc += (A == 0) ? 0 [88] : 3 [91]
88: A <- P[36:4]
89: pc += (A == 0) ? 0 [90] : 1 [91]
90: ret 2147418112
91: ret 2147483648
92: pc += (A >= 43) ? 0 [93] : 2 [95]
93: pc += (A > 43) ? 10 [104] : 0 [94]
94: ret 2147418112
95: pc += (A >= 35) ? 0 [96] : 2 [98]
96: pc += (A > 35) ? 4 [101] : 0 [97]
97: ret 2147418112
98: pc += (A == 32) ? 1 [100] : 0 [99]
99: ret 2147483648
100: ret 2147418112
101: pc += (A == 39) ? 1 [103] : 0 [102]
102: ret 2147483648
103: ret 2147418112
104: pc += (A >= 47) ? 0 [105] : 11 [116]
105: pc += (A > 47) ? 22 [128] : 0 [106]
106: A <- P[32:4]
107: pc += (A == 96) ? 0 [108] : 2 [110]
108: A <- P[36:4]
109: pc += (A == 0) ? 4 [114] : 0 [110]
110: A <- P[32:4]
111: pc += (A == 98) ? 0 [112] : 3 [115]
112: A <- P[36:4]
113: pc += (A == 0) ? 0 [114] : 1 [115]
114: ret 2147418112
115: ret 2147483648
116: pc += (A == 46) ? 1 [118] : 0 [117]
117: ret 2147483648
118: A <- P[32:4]
119: pc += (A == 0) ? 0 [120] : 2 [122]
120: A <- P[36:4]
121: pc += (A == 0) ? 4 [126] : 0 [122]
122: A <- P[32:4]
123: pc += (A == 16448) ? 0 [124] : 3 [127]
124: A <- P[36:4]
125: pc += (A == 0) ? 0 [126] : 1 [127]
126: ret 2147418112
127: ret 2147483648
128: pc += (A == 48) ? 1 [130] : 0 [129]
129: ret 2147483648
130: A <- P[24:4]
131: pc += (A == 2) ? 0 [132] : 3 [135]
132: A <- P[28:4]
133: pc += (A == 0) ? 0 [134] : 1 [135]
134: ret 2147418112
135: ret 2147483648
136: pc += (A >= 74) ? 0 [137] : 2 [139]
137: pc += (A > 74) ? 40 [178] : 0 [138]
138: ret 2147418112
139: pc += (A >= 60) ? 0 [140] : 2 [142]
140: pc += (A > 60) ? 17 [158] : 0 [141]
141: ret 2147418112
142: pc += (A == 56) ? 1 [144] : 0 [143]
143: ret 2147483648
144: A <- P[16:4]
145: pc += (A == 855808) ? 0 [146] : 11 [157]
146: A <- P[20:4]
147: pc += (A == 0) ? 0 [148] : 9 [157]
148: A <- P[32:4]
149: pc += (A == 0) ? 0 [150] : 7 [157]
150: A <- P[36:4]
151: pc += (A == 0) ? 0 [152] : 5 [157]
152: A <- P[40:4]
153: pc += (A == 0) ? 0 [154] : 3 [157]
154: A <- P[44:4]
155: pc += (A == 0) ? 0 [156] : 1 [157]
156: ret 2147418112
157: ret 2147483648
158: pc += (A == 72) ? 1 [160] : 0 [159]
159: ret 2147483648
160: A <- P[24:4]
161: pc += (A == 3) ? 0 [162] : 2 [164]
162: A <- P[28:4]
163: pc += (A == 0) ? 12 [176] : 0 [164]
164: A <- P[24:4]
165: pc += (A == 4) ? 0 [166] : 2 [168]
166: A <- P[28:4]
167: pc += (A == 0) ? 8 [176] : 0 [168]
168: A <- P[24:4]
169: pc += (A == 1) ? 0 [170] : 2 [172]
170: A <- P[28:4]
171: pc += (A == 0) ? 4 [176] : 0 [172]
172: A <- P[24:4]
173: pc += (A == 1033) ? 0 [174] : 3 [177]
174: A <- P[28:4]
175: pc += (A == 0) ? 0 [176] : 1 [177]
176: ret 2147418112
177: ret 2147483648
178: pc += (A >= 91) ? 0 [179] : 3 [182]
179: pc += (A == 91) ? 1 [181] : 0 [180]
180: ret 2147483648
181: ret 2147418112
182: pc += (A == 77) ? 1 [184] : 0 [183]
183: ret 2147483648
184: ret 2147418112
185: pc += (A >= 262) ? 0 [186] : 2 [188]
186: pc += (A > 262) ? 63 [250] : 0 [187]
187: ret 2147418112
188: pc += (A >= 231) ? 0 [189] : 2 [191]
189: pc += (A > 231) ? 42 [232] : 0 [190]
190: ret 2147418112
191: pc += (A >= 202) ? 0 [192] : 26 [218]
192: pc += (A > 202) ? 32 [225] : 0 [193]
193: A <- P[24:4]
194: pc += (A == 128) ? 0 [195] : 6 [201]
195: A <- P[28:4]
196: pc += (A == 0) ? 0 [197] : 4 [201]
197: A <- P[48:4]
198: pc += (A == 0) ? 0 [199] : 2 [201]
199: A <- P[52:4]
200: pc += (A == 0) ? 16 [217] : 0 [201]
201: A <- P[24:4]
202: pc += (A == 129) ? 0 [203] : 6 [209]
203: A <- P[28:4]
204: pc += (A == 0) ? 0 [205] : 4 [209]
205: A <- P[48:4]
206: pc += (A == 0) ? 0 [207] : 2 [209]
207: A <- P[52:4]
208: pc += (A == 0) ? 8 [217] : 0 [209]
209: A <- P[24:4]
210: pc += (A == 0) ? 0 [211] : 2 [213]
211: A <- P[28:4]
212: pc += (A == 0) ? 4 [217] : 0 [213]
213: A <- P[24:4]
214: pc += (A == 1) ? 0 [215] : 91 [306]
215: A <- P[28:4]
216: pc += (A == 0) ? 0 [217] : 89 [306]
217: ret 2147418112
218: pc += (A >= 138) ? 0 [219] : 2 [221]
219: pc += (A > 138) ? 3 [223] : 0 [220]
220: ret 2147418112
221: pc += (A == 131) ? 0 [222] : 84 [306]
222: ret 2147418112
223: pc += (A == 186) ? 0 [224] : 82 [306]
224: ret 2147418112
225: pc += (A >= 219) ? 0 [226] : 2 [228]
226: pc += (A > 219) ? 3 [230] : 0 [227]
227: ret 2147418112
228: pc += (A == 217) ? 0 [229] : 77 [306]
229: ret 2147418112
230: pc += (A == 228) ? 0 [231] : 75 [306]
231: ret 2147418112
232: pc += (A >= 258) ? 0 [233] : 2 [235]
233: pc += (A > 258) ? 12 [246] : 0 [234]
234: ret 2147418112
235: pc += (A >= 234) ? 0 [236] : 6 [242]
236: pc += (A > 234) ? 7 [244] : 0 [237]
237: A <- P[16:4]
238: pc += (A == 1) ? 0 [239] : 67 [306]
239: A <- P[20:4]
240: pc += (A == 0) ? 0 [241] : 65 [306]
241: ret 2147418112
242: pc += (A == 233) ? 0 [243] : 63 [306]
243: ret 2147418112
244: pc += (A == 257) ? 0 [245] : 61 [306]
245: ret 2147418112
246: pc += (A >= 260) ? 0 [247] : 2 [249]
247: pc += (A == 260) ? 0 [248] : 58 [306]
248: ret 2147418112
249: ret 2147418112
250: pc += (A >= 280) ? 0 [251] : 2 [253]
251: pc += (A > 280) ? 15 [267] : 0 [252]
252: ret 2147418112
253: pc += (A >= 266) ? 0 [254] : 2 [256]
254: pc += (A > 266) ? 6 [261] : 0 [255]
255: ret 2147418112
256: pc += (A >= 264) ? 0 [257] : 2 [259]
257: pc += (A > 264) ? 2 [260] : 0 [258]
258: ret 2147418112
259: ret 2147418112
260: ret 2147418112
261: pc += (A >= 268) ? 0 [262] : 2 [264]
262: pc += (A > 268) ? 2 [265] : 0 [263]
263: ret 2147418112
264: ret 2147418112
265: pc += (A == 271) ? 0 [266] : 40 [306]
266: ret 2147418112
267: pc += (A >= 309) ? 0 [268] : 10 [278]
268: pc += (A > 309) ? 32 [301] : 0 [269]
269: A <- P[24:4]
270: pc += (A == 0) ? 0 [271] : 35 [306]
271: A <- P[28:4]
272: pc += (A == 0) ? 0 [273] : 33 [306]
273: A <- P[32:4]
274: pc += (A == 0) ? 0 [275] : 31 [306]
275: A <- P[36:4]
276: pc += (A == 0) ? 0 [277] : 29 [306]
277: ret 2147418112
278: pc += (A >= 285) ? 0 [279] : 6 [285]
279: pc += (A > 285) ? 11 [291] : 0 [280]
280: A <- P[24:4]
281: pc += (A == 0) ? 0 [282] : 24 [306]
282: A <- P[28:4]
283: pc += (A == 0) ? 0 [284] : 22 [306]
284: ret 2147418112
285: pc += (A == 281) ? 0 [286] : 20 [306]
286: A <- P[48:4]
287: pc += (A == 0) ? 0 [288] : 18 [306]
288: A <- P[52:4]
289: pc += (A == 0) ? 0 [290] : 16 [306]
290: ret 2147418112
291: pc += (A == 290) ? 0 [292] : 14 [306]
292: A <- P[16:4]
293: pc += (A == 0) ? 0 [294] : 12 [306]
294: A <- P[20:4]
295: pc += (A == 0) ? 0 [296] : 10 [306]
296: A <- P[24:4]
297: pc += (A == 0) ? 0 [298] : 8 [306]
298: A <- P[28:4]
299: pc += (A == 0) ? 0 [300] : 6 [306]
300: ret 2147418112
301: pc += (A >= 319) ? 0 [302] : 2 [304]
302: pc += (A == 319) ? 0 [303] : 3 [306]
303: ret 2147418112
304: pc += (A == 318) ? 0 [305] : 1 [306]
305: ret 2147418112
306: ret 2147483648
I1127 12:59:00.151399 1 seccomp.go:89] Seccomp filters installed.
I1127 12:59:00.151416 1 gofer.go:282] Serving "/" mapped to "/root" on FD 7 (ro: true)
I1127 12:59:00.151423 1 gofer.go:311] Serving "/etc/resolv.conf" mapped on FD 8 (ro: false)
I1127 12:59:00.151430 1 gofer.go:311] Serving "/etc/hostname" mapped on FD 9 (ro: false)
I1127 12:59:00.151436 1 gofer.go:311] Serving "/etc/hosts" mapped on FD 10 (ro: false)
D1127 12:59:00.651427 1 connection.go:127] sock read failed, closing connection: EOF
D1127 12:59:00.651505 1 connection.go:127] sock read failed, closing connection: EOF
D1127 12:59:00.651552 1 connection.go:127] sock read failed, closing connection: EOF
D1127 12:59:00.651515 1 connection.go:127] sock read failed, closing connection: EOF
I1127 12:59:00.651634 1 gofer.go:335] All lisafs servers exited.
I1127 12:59:00.651655 1 main.go:224] Exiting with status: 0
I1127 12:59:00.103823 14141 main.go:189] ***************************
I1127 12:59:00.103857 14141 main.go:190] Args: [runsc-sandbox --root=/var/run/docker/runtime-runc/moby --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/log.json --log-format=json --debug-log=/tmp/runsc/ --log-packets=true --strace=true --log-fd=3 --debug-log-fd=4 boot --bundle=/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 --gofer-mount-confs=lisafs:self,lisafs:none,lisafs:none,lisafs:none --apply-caps=true --setup-root --total-host-memory 66331418624 --cpu-num 16 --total-memory 66331418624 --io-fds=5 --io-fds=6 --io-fds=7 --io-fds=8 --dev-io-fd=-1 --gofer-filestore-fds=9 --mounts-fd=10 --start-sync-fd=11 --controller-fd=12 --spec-fd=13 --stdio-fds=14 --stdio-fds=15 --stdio-fds=16 f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6]
I1127 12:59:00.103870 14141 main.go:191] Version release-20231113.0
I1127 12:59:00.103873 14141 main.go:192] GOOS: linux
I1127 12:59:00.103877 14141 main.go:193] GOARCH: amd64
I1127 12:59:00.103881 14141 main.go:194] PID: 14141
I1127 12:59:00.103885 14141 main.go:195] UID: 0, GID: 0
I1127 12:59:00.103888 14141 main.go:196] Configuration:
I1127 12:59:00.103892 14141 main.go:197] RootDir: /var/run/docker/runtime-runc/moby
I1127 12:59:00.103895 14141 main.go:198] Platform: systrap
I1127 12:59:00.103899 14141 main.go:199] FileAccess: exclusive
I1127 12:59:00.103903 14141 main.go:200] Directfs: true
I1127 12:59:00.103907 14141 main.go:201] Overlay: root:self
I1127 12:59:00.103911 14141 main.go:202] Network: sandbox, logging: true
I1127 12:59:00.103916 14141 main.go:203] Strace: true, max size: 1024, syscalls:
I1127 12:59:00.103920 14141 main.go:204] IOURING: false
I1127 12:59:00.103923 14141 main.go:205] Debug: true
I1127 12:59:00.103927 14141 main.go:206] Systemd: false
I1127 12:59:00.103933 14141 main.go:207] ***************************
I1127 12:59:00.121977 14141 boot.go:245] Setting product_name: "m7i.4xlarge"
W1127 12:59:00.122645 14141 specutils.go:118] AppArmor profile "docker-default" is being ignored
W1127 12:59:00.122662 14141 specutils.go:124] noNewPrivileges ignored. PR_SET_NO_NEW_PRIVS is assumed to always be set.
I1127 12:59:00.122673 14141 chroot.go:91] Setting up sandbox chroot in "/tmp"
I1127 12:59:00.122769 14141 chroot.go:36] Mounting "/proc" at "/tmp/proc"
D1127 12:59:00.123385 14141 specutils.go:86] Spec:
{
"ociVersion": "1.1.0-rc.2",
"process": {
"user": {
"uid": 0,
"gid": 0,
"additionalGids": [
0
]
},
"args": [
"/hello"
],
"env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"HOSTNAME=f752f1cdc8c4"
],
"cwd": "/",
"apparmorProfile": "docker-default",
"oomScoreAdj": 0
},
"root": {
"path": "/var/lib/docker/overlay2/f89a0cd58f5ec918c7e6319cab5882379c1ffaeb24bc3afa039779bbae4ed80e/merged"
},
"hostname": "f752f1cdc8c4",
"mounts": [
{
"destination": "/proc",
"type": "proc",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/proc",
"options": [
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev",
"type": "tmpfs",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/tmpfs",
"options": [
"nosuid",
"strictatime",
"mode=755",
"size=65536k"
]
},
{
"destination": "/dev/pts",
"type": "devpts",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/devpts",
"options": [
"nosuid",
"noexec",
"newinstance",
"ptmxmode=0666",
"mode=0620",
"gid=5"
]
},
{
"destination": "/sys",
"type": "sysfs",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/sysfs",
"options": [
"nosuid",
"noexec",
"nodev",
"ro"
]
},
{
"destination": "/sys/fs/cgroup",
"type": "cgroup",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup",
"options": [
"ro",
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev/mqueue",
"type": "mqueue",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/mqueue",
"options": [
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev/shm",
"type": "tmpfs",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/shm",
"options": [
"nosuid",
"noexec",
"nodev",
"mode=1777",
"size=67108864"
]
},
{
"destination": "/etc/resolv.conf",
"type": "bind",
"source": "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/resolv.conf",
"options": [
"rbind",
"rprivate"
]
},
{
"destination": "/etc/hostname",
"type": "bind",
"source": "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hostname",
"options": [
"rbind",
"rprivate"
]
},
{
"destination": "/etc/hosts",
"type": "bind",
"source": "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hosts",
"options": [
"rbind",
"rprivate"
]
}
],
"hooks": {
"prestart": [
{
"path": "/proc/8084/exe",
"args": [
"libnetwork-setkey",
"-exec-root=/var/run/docker",
"f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6",
"c6dc330a7930"
]
}
]
},
"linux": {
"sysctl": {
"net.ipv4.ip_unprivileged_port_start": "0",
"net.ipv4.ping_group_range": "0 2147483647"
},
"resources": {
"memory": {
"disableOOMKiller": false
},
"blockIO": {}
},
"cgroupsPath": "/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6",
"namespaces": [
{
"type": "mount"
},
{
"type": "network"
},
{
"type": "uts"
},
{
"type": "pid"
},
{
"type": "ipc"
}
]
}
}
I1127 12:59:00.123579 14141 capability.go:66] Capabilities applied: { effective="chown, dac_override, dac_read_search, fowner, fsetid, kill, setgid, setuid, setpcap, net_bind_service, net_raw, sys_chroot, sys_ptrace, mknod, audit_write, setfcap" permitted="chown, dac_override, dac_read_search, fowner, fsetid, kill, setgid, setuid, setpcap, net_bind_service, net_raw, sys_chroot, sys_ptrace, mknod, audit_write, setfcap" inheritable="empty" bounding="chown, dac_override, dac_read_search, fowner, fsetid, kill, setgid, setuid, setpcap, net_bind_service, net_raw, sys_chroot, sys_ptrace, mknod, audit_write, setfcap" }
I1127 12:59:00.123608 14141 cmd.go:82] Execve "/proc/self/exe" again, bye!
I1127 12:59:00.152127 14141 main.go:189] ***************************
I1127 12:59:00.152150 14141 main.go:190] Args: [runsc-sandbox --root=/var/run/docker/runtime-runc/moby --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/log.json --log-format=json --debug-log=/tmp/runsc/ --log-packets=true --strace=true --log-fd=3 --debug-log-fd=4 boot --apply-caps=false --bundle=/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 --controller-fd=12 --cpu-num=16 --dev-io-fd=-1 --gofer-filestore-fds=9 --gofer-mount-confs=lisafs:self,lisafs:none,lisafs:none,lisafs:none --io-fds=5,6,7,8 --mounts-fd=10 --setup-root=false --spec-fd=13 --start-sync-fd=11 --stdio-fds=14,15,16 --total-host-memory=66331418624 --total-memory=66331418624 --product-name=m7i.4xlarge --proc-mount-sync-fd=24 f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6]
I1127 12:59:00.152166 14141 main.go:191] Version release-20231113.0
I1127 12:59:00.152170 14141 main.go:192] GOOS: linux
I1127 12:59:00.152174 14141 main.go:193] GOARCH: amd64
I1127 12:59:00.152177 14141 main.go:194] PID: 14141
I1127 12:59:00.152181 14141 main.go:195] UID: 0, GID: 0
I1127 12:59:00.152186 14141 main.go:196] Configuration:
I1127 12:59:00.152190 14141 main.go:197] RootDir: /var/run/docker/runtime-runc/moby
I1127 12:59:00.152193 14141 main.go:198] Platform: systrap
I1127 12:59:00.152197 14141 main.go:199] FileAccess: exclusive
I1127 12:59:00.152201 14141 main.go:200] Directfs: true
I1127 12:59:00.152205 14141 main.go:201] Overlay: root:self
I1127 12:59:00.152209 14141 main.go:202] Network: sandbox, logging: true
I1127 12:59:00.152214 14141 main.go:203] Strace: true, max size: 1024, syscalls:
I1127 12:59:00.152218 14141 main.go:204] IOURING: false
I1127 12:59:00.152221 14141 main.go:205] Debug: true
I1127 12:59:00.152224 14141 main.go:206] Systemd: false
I1127 12:59:00.152230 14141 main.go:207] ***************************
W1127 12:59:00.170592 14141 specutils.go:118] AppArmor profile "docker-default" is being ignored
W1127 12:59:00.170621 14141 specutils.go:124] noNewPrivileges ignored. PR_SET_NO_NEW_PRIVS is assumed to always be set.
D1127 12:59:00.170750 14141 specutils.go:86] Spec:
{
"ociVersion": "1.1.0-rc.2",
"process": {
"user": {
"uid": 0,
"gid": 0,
"additionalGids": [
0
]
},
"args": [
"/hello"
],
"env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"HOSTNAME=f752f1cdc8c4"
],
"cwd": "/",
"apparmorProfile": "docker-default",
"oomScoreAdj": 0
},
"root": {
"path": "/var/lib/docker/overlay2/f89a0cd58f5ec918c7e6319cab5882379c1ffaeb24bc3afa039779bbae4ed80e/merged"
},
"hostname": "f752f1cdc8c4",
"mounts": [
{
"destination": "/proc",
"type": "proc",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/proc",
"options": [
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev",
"type": "tmpfs",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/tmpfs",
"options": [
"nosuid",
"strictatime",
"mode=755",
"size=65536k"
]
},
{
"destination": "/dev/pts",
"type": "devpts",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/devpts",
"options": [
"nosuid",
"noexec",
"newinstance",
"ptmxmode=0666",
"mode=0620",
"gid=5"
]
},
{
"destination": "/sys",
"type": "sysfs",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/sysfs",
"options": [
"nosuid",
"noexec",
"nodev",
"ro"
]
},
{
"destination": "/sys/fs/cgroup",
"type": "cgroup",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/cgroup",
"options": [
"ro",
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev/mqueue",
"type": "mqueue",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/mqueue",
"options": [
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev/shm",
"type": "tmpfs",
"source": "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/shm",
"options": [
"nosuid",
"noexec",
"nodev",
"mode=1777",
"size=67108864"
]
},
{
"destination": "/etc/resolv.conf",
"type": "bind",
"source": "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/resolv.conf",
"options": [
"rbind",
"rprivate"
]
},
{
"destination": "/etc/hostname",
"type": "bind",
"source": "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hostname",
"options": [
"rbind",
"rprivate"
]
},
{
"destination": "/etc/hosts",
"type": "bind",
"source": "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hosts",
"options": [
"rbind",
"rprivate"
]
}
],
"hooks": {
"prestart": [
{
"path": "/proc/8084/exe",
"args": [
"libnetwork-setkey",
"-exec-root=/var/run/docker",
"f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6",
"c6dc330a7930"
]
}
]
},
"linux": {
"sysctl": {
"net.ipv4.ip_unprivileged_port_start": "0",
"net.ipv4.ping_group_range": "0 2147483647"
},
"resources": {
"memory": {
"disableOOMKiller": false
},
"blockIO": {}
},
"cgroupsPath": "/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6",
"namespaces": [
{
"type": "mount"
},
{
"type": "network"
},
{
"type": "uts"
},
{
"type": "pid"
},
{
"type": "ipc"
}
]
}
}
I1127 12:59:00.201634 14141 loader.go:653] Platform: systrap
D1127 12:59:00.201803 14141 seccomp.go:426] syscall filter rt_sigreturn: (arg0 == * && arg1 == * && arg2 == * && arg3 == * && arg4 == * && arg5 == * && rip > 0x7f2991281000) => 0x616c6c6f77
D1127 12:59:00.201843 14141 seccomp.go:426] syscall filter sched_yield: (arg0 == * && arg1 == * && arg2 == * && arg3 == * && arg4 == * && arg5 == * && rip > 0x7f2991281000) => 0x616c6c6f77
D1127 12:59:00.201849 14141 seccomp.go:426] syscall filter gettimeofday: true => 0x7472617020283029
D1127 12:59:00.201855 14141 seccomp.go:426] syscall filter arch_prctl: ((arg0 == 0x1002 && arg1 == * && arg2 == * && arg3 == * && arg4 == * && arg5 == * && rip > 0x7f2991280000) || (arg0 == 0x1003 && arg1 == * && arg2 == * && arg3 == * && arg4 == * && arg5 == * && rip > 0x7f2991280000)) => 0x616c6c6f77
D1127 12:59:00.201867 14141 seccomp.go:426] syscall filter time: true => 0x7472617020283029
D1127 12:59:00.201872 14141 seccomp.go:426] syscall filter futex: ((arg0 > 0x7f2991281000 && arg1 == 0x1 && arg2 == 0x1 && arg3 == 0x0 && arg4 == 0x0 && arg5 == 0x0 && rip > 0x7f2991281000) || (arg0 > 0x7f2991281000 && arg1 == 0x0 && arg2 == * && arg3 == 0x0 && arg4 == 0x0 && arg5 == 0x0 && rip > 0x7f2991281000)) => 0x616c6c6f77
D1127 12:59:00.201880 14141 seccomp.go:426] syscall filter getcpu: true => 0x7472617020283029
D1127 12:59:00.202861 14141 seccomp.go:391] Seccomp program optimized from 250 to 112 instructions; took 998.242µs to build and 65.242µs to optimize
D1127 12:59:00.202886 14141 stub_unsafe.go:245] stubStart 7f2991280000 stubSysmsgStart 7f2991281000 stubSysmsgStack 7f5330060000, stubContextQueue 7f5338061000, stubThreadContextRegion 7f533806b000, mapLen 9023000
D1127 12:59:00.202900 14141 stub_unsafe.go:246] sysmsg.ArchState{ xsaveMode 2 fsgsbase 1 fpLen 11008 }
D1127 12:59:00.202980 14141 seccomp.go:426] syscall filter mmap: true => 0x616c6c6f77
D1127 12:59:00.202990 14141 seccomp.go:426] syscall filter munmap: true => 0x616c6c6f77
D1127 12:59:00.202993 14141 seccomp.go:426] syscall filter rt_sigreturn: true => 0x616c6c6f77
D1127 12:59:00.203000 14141 seccomp.go:426] syscall filter sched_yield: true => 0x616c6c6f77
D1127 12:59:00.203003 14141 seccomp.go:426] syscall filter getpid: true => 0x616c6c6f77
D1127 12:59:00.203006 14141 seccomp.go:426] syscall filter clone: (arg0 == 0x409 || arg0 == 0x2700 || arg0 == 0x12f00) => 0x616c6c6f77
D1127 12:59:00.203010 14141 seccomp.go:426] syscall filter exit: true => 0x616c6c6f77
D1127 12:59:00.203013 14141 seccomp.go:426] syscall filter wait4: true => 0x616c6c6f77
D1127 12:59:00.203018 14141 seccomp.go:426] syscall filter kill: (arg0 == * && arg1 == 0x13) => 0x616c6c6f77
D1127 12:59:00.203022 14141 seccomp.go:426] syscall filter gettimeofday: true => 0x7472617020283029
D1127 12:59:00.203025 14141 seccomp.go:426] syscall filter getppid: true => 0x616c6c6f77
D1127 12:59:00.203028 14141 seccomp.go:426] syscall filter sigaltstack: true => 0x616c6c6f77
D1127 12:59:00.203031 14141 seccomp.go:426] syscall filter prctl: ((arg0 == 0x1 && arg1 == 0x9) || (arg0 == 0x26 && arg1 == 0x1)) => 0x616c6c6f77
D1127 12:59:00.203035 14141 seccomp.go:426] syscall filter arch_prctl: ((arg0 == 0x1012 && arg1 == 0x0) || arg0 == 0x1002 || arg0 == 0x1003) => 0x616c6c6f77
D1127 12:59:00.203039 14141 seccomp.go:426] syscall filter gettid: true => 0x616c6c6f77
D1127 12:59:00.203042 14141 seccomp.go:426] syscall filter tkill: (arg0 == * && arg1 == 0x13) => 0x616c6c6f77
D1127 12:59:00.203046 14141 seccomp.go:426] syscall filter time: true => 0x7472617020283029
D1127 12:59:00.203049 14141 seccomp.go:426] syscall filter futex: ((arg0 == * && arg1 == 0x0) || (arg0 == * && arg1 == 0x1)) => 0x616c6c6f77
D1127 12:59:00.203053 14141 seccomp.go:426] syscall filter getcpu: true => 0x7472617020283029
D1127 12:59:00.203056 14141 seccomp.go:426] syscall filter seccomp: (arg0 == 0x1 && arg1 == 0x0) => 0x616c6c6f77
D1127 12:59:00.204376 14141 seccomp.go:391] Seccomp program optimized from 308 to 129 instructions; took 1.320559ms to build and 81.123µs to optimize
I1127 12:59:00.210496 14141 loader.go:436] CPUs: 16
I1127 12:59:00.210518 14141 loader.go:450] Setting total memory to 61.78 GB
I1127 12:59:00.210610 14141 loader.go:489] Packet logging enabled
I1127 12:59:00.210616 14141 watchdog.go:182] Watchdog waiting 30s for startup
D1127 12:59:00.374102 14141 urpc.go:611] urpc: unmarshal success.
I1127 12:59:00.374327 14141 network.go:231] Enabling loopback interface "lo" with id 1 on addresses [127.0.0.1/8]
I1127 12:59:00.374470 14141 network.go:282] gso max size is: 65536
I1127 12:59:00.417718 14141 network.go:306] Enabling FIFO QDisc on "eth0"
I1127 12:59:00.417892 14141 network.go:310] Enabling interface "eth0" with id 2 on addresses [172.17.0.2/16] (02:42:ac:11:00:02) w/ 1 channels
I1127 12:59:00.418057 14141 network.go:448] Setting routes [127.0.0.0/8 nic 1 172.17.0.0/16 nic 2 0.0.0.0/0 via 172.17.0.1 nic 2]
D1127 12:59:00.418120 14141 urpc.go:568] urpc: successfully marshalled 37 bytes.
D1127 12:59:00.418586 14141 urpc.go:611] urpc: unmarshal success.
D1127 12:59:00.418622 14141 controller.go:226] containerManager.StartRoot, cid: f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6
W1127 12:59:00.420042 14141 filter.go:87] *** SECCOMP WARNING: host filesystem enabled: syscall filters less restrictive!
I1127 12:59:00.420087 14141 seccomp.go:61] Installing seccomp filters for 83 syscalls (action=kill process)
D1127 12:59:00.420229 14141 seccomp.go:426] syscall filter read: true => 0x616c6c6f77
D1127 12:59:00.420237 14141 seccomp.go:426] syscall filter write: true => 0x616c6c6f77
D1127 12:59:00.420241 14141 seccomp.go:426] syscall filter close: true => 0x616c6c6f77
D1127 12:59:00.420246 14141 seccomp.go:426] syscall filter fstat: true => 0x616c6c6f77
D1127 12:59:00.420251 14141 seccomp.go:426] syscall filter lseek: true => 0x616c6c6f77
D1127 12:59:00.420254 14141 seccomp.go:426] syscall filter mmap: (arg0 == * && arg1 == * && arg2 & 0x4 == 0x4) => 0x6b696c6c2070726f63657373
D1127 12:59:00.420268 14141 seccomp.go:426] syscall filter mmap: ((arg0 == * && arg1 == * && arg2 == * && arg3 == 0x1) || (arg0 == * && arg1 == * && arg2 == * && arg3 == 0x11) || (arg0 == * && arg1 == * && arg2 == * && arg3 == 0x2) || (arg0 == * && arg1 == * && arg2 == * && arg3 == 0x22) || (arg0 == * && arg1 == * && arg2 == * && arg3 == 0x20022) || (arg0 == * && arg1 == * && arg2 == * && arg3 == 0x4022) || (arg0 == * && arg1 == * && arg2 == 0x3 && arg3 == 0x32)) => 0x616c6c6f77
D1127 12:59:00.420279 14141 seccomp.go:426] syscall filter mprotect: (arg0 == * && arg1 == * && arg2 & 0x4 == 0x4) => 0x6b696c6c2070726f63657373
D1127 12:59:00.420284 14141 seccomp.go:426] syscall filter mprotect: true => 0x616c6c6f77
D1127 12:59:00.420288 14141 seccomp.go:426] syscall filter munmap: true => 0x616c6c6f77
D1127 12:59:00.420292 14141 seccomp.go:426] syscall filter rt_sigaction: true => 0x616c6c6f77
D1127 12:59:00.420295 14141 seccomp.go:426] syscall filter rt_sigprocmask: true => 0x616c6c6f77
D1127 12:59:00.420298 14141 seccomp.go:426] syscall filter rt_sigreturn: true => 0x616c6c6f77
D1127 12:59:00.420301 14141 seccomp.go:426] syscall filter ioctl: ((arg0 NonNegativeFD && arg1 == 0x541b) || (arg0 NonNegativeFD && arg1 == 0x5401) || (arg0 NonNegativeFD && arg1 == 0x5402) || (arg0 NonNegativeFD && arg1 == 0x5404) || (arg0 NonNegativeFD && arg1 == 0x5403) || (arg0 NonNegativeFD && arg1 == 0x5414) || (arg0 NonNegativeFD && arg1 == 0x5413) || (arg0 NonNegativeFD && arg1 == 0x8942)) => 0x616c6c6f77
D1127 12:59:00.420309 14141 seccomp.go:426] syscall filter pread64: true => 0x616c6c6f77
D1127 12:59:00.420312 14141 seccomp.go:426] syscall filter pwrite64: true => 0x616c6c6f77
D1127 12:59:00.420315 14141 seccomp.go:426] syscall filter writev: (arg0 == * && arg1 == * && arg2 > 0x0) => 0x616c6c6f77
D1127 12:59:00.420319 14141 seccomp.go:426] syscall filter sched_yield: true => 0x616c6c6f77
D1127 12:59:00.420322 14141 seccomp.go:426] syscall filter mincore: true => 0x616c6c6f77
D1127 12:59:00.420325 14141 seccomp.go:426] syscall filter madvise: true => 0x616c6c6f77
D1127 12:59:00.420328 14141 seccomp.go:426] syscall filter dup: true => 0x616c6c6f77
D1127 12:59:00.420347 14141 seccomp.go:426] syscall filter nanosleep: true => 0x616c6c6f77
D1127 12:59:00.420352 14141 seccomp.go:426] syscall filter setitimer: true => 0x616c6c6f77
D1127 12:59:00.420355 14141 seccomp.go:426] syscall filter getpid: true => 0x616c6c6f77
D1127 12:59:00.420358 14141 seccomp.go:426] syscall filter sendmsg: (arg0 == * && arg1 == * && arg2 == 0x4040) => 0x616c6c6f77
D1127 12:59:00.420361 14141 seccomp.go:426] syscall filter recvmsg: ((arg0 == * && arg1 == * && arg2 == 0x60) || (arg0 == * && arg1 == * && arg2 == 0x62)) => 0x616c6c6f77
D1127 12:59:00.420367 14141 seccomp.go:426] syscall filter shutdown: ((arg0 == * && arg1 == 0x0) || (arg0 == * && arg1 == 0x1) || (arg0 == * && arg1 == 0x2)) => 0x616c6c6f77
D1127 12:59:00.420374 14141 seccomp.go:426] syscall filter listen: (arg0 == 0xc && arg1 == 0x10) => 0x616c6c6f77
D1127 12:59:00.420378 14141 seccomp.go:426] syscall filter getsockopt: ((arg0 == * && arg1 == 0x1 && arg2 == 0x27) || (arg0 == * && arg1 == 0x1 && arg2 == 0x3) || (arg0 == * && arg1 == 0x1 && arg2 == 0x4) || (arg0 == * && arg1 == 0x1 && arg2 == 0x7) || (arg0 == * && arg1 == 0x1 && arg2 == 0x11)) => 0x616c6c6f77
D1127 12:59:00.420386 14141 seccomp.go:426] syscall filter clone: (arg0 == 0xd0f00 && arg1 == * && arg2 == 0x0 && arg3 == 0x0) => 0x616c6c6f77
D1127 12:59:00.420390 14141 seccomp.go:426] syscall filter exit: true => 0x616c6c6f77
D1127 12:59:00.420393 14141 seccomp.go:426] syscall filter wait4: true => 0x616c6c6f77
D1127 12:59:00.420396 14141 seccomp.go:426] syscall filter fcntl: ((arg0 == * && arg1 == 0x3) || (arg0 == * && arg1 == 0x4) || (arg0 == * && arg1 == 0x1)) => 0x616c6c6f77
D1127 12:59:00.420401 14141 seccomp.go:426] syscall filter fsync: true => 0x616c6c6f77
D1127 12:59:00.420404 14141 seccomp.go:426] syscall filter ftruncate: true => 0x616c6c6f77
D1127 12:59:00.420408 14141 seccomp.go:426] syscall filter fchmod: true => 0x616c6c6f77
D1127 12:59:00.420412 14141 seccomp.go:426] syscall filter gettimeofday: true => 0x616c6c6f77
D1127 12:59:00.420414 14141 seccomp.go:426] syscall filter ptrace: (arg0 == 0x10 || (arg0 == 0x7 && arg1 == * && arg2 == 0x0 && arg3 == 0x0) || arg0 == 0x4201 || (arg0 == 0x4204 && arg1 == * && arg2 == 0x1) || arg0 == 0x4202 || (arg0 == 0x4200 && arg1 == * && arg2 == 0x0 && arg3 == 0x100041) || (arg0 == 0x4205 && arg1 == * && arg2 == 0x1) || (arg0 == 0x420b && arg1 == * && arg2 == 0x8) || (arg0 == 0x1f && arg1 == * && arg2 == 0x0 && arg3 == 0x0) || arg0 == 0x11) => 0x616c6c6f77
D1127 12:59:00.420423 14141 seccomp.go:426] syscall filter sigaltstack: true => 0x616c6c6f77
D1127 12:59:00.420426 14141 seccomp.go:426] syscall filter fstatfs: arg0 NonNegativeFD => 0x616c6c6f77
D1127 12:59:00.420429 14141 seccomp.go:426] syscall filter setpriority: (arg0 == 0x0 && arg1 == * && arg2 == 0x1) => 0x616c6c6f77
D1127 12:59:00.420433 14141 seccomp.go:426] syscall filter mlock: true => 0x616c6c6f77
D1127 12:59:00.420436 14141 seccomp.go:426] syscall filter munlock: true => 0x616c6c6f77
D1127 12:59:00.420439 14141 seccomp.go:426] syscall filter gettid: true => 0x616c6c6f77
D1127 12:59:00.420443 14141 seccomp.go:426] syscall filter futex: ((arg0 == * && arg1 == 0x80) || (arg0 == * && arg1 == 0x81) || (arg0 == * && arg1 == 0x0) || (arg0 == * && arg1 == 0x1)) => 0x616c6c6f77
D1127 12:59:00.420448 14141 seccomp.go:426] syscall filter getdents64: arg0 NonNegativeFD => 0x616c6c6f77
D1127 12:59:00.420451 14141 seccomp.go:426] syscall filter restart_syscall: true => 0x616c6c6f77
D1127 12:59:00.420454 14141 seccomp.go:426] syscall filter timer_create: arg0 == 0x3 => 0x616c6c6f77
D1127 12:59:00.420458 14141 seccomp.go:426] syscall filter timer_settime: (arg0 == * && arg1 == 0x0 && arg2 == * && arg3 == 0x0) => 0x616c6c6f77
D1127 12:59:00.420461 14141 seccomp.go:426] syscall filter timer_delete: true => 0x616c6c6f77
D1127 12:59:00.420466 14141 seccomp.go:426] syscall filter clock_gettime: true => 0x616c6c6f77
D1127 12:59:00.420469 14141 seccomp.go:426] syscall filter exit_group: true => 0x616c6c6f77
D1127 12:59:00.420472 14141 seccomp.go:426] syscall filter epoll_ctl: true => 0x616c6c6f77
D1127 12:59:00.420475 14141 seccomp.go:426] syscall filter tgkill: true => 0x616c6c6f77
D1127 12:59:00.420478 14141 seccomp.go:426] syscall filter openat: (arg0 NonNegativeFD && arg1 == * && arg2 & 0x20000 == 0x20000) => 0x616c6c6f77
D1127 12:59:00.420484 14141 seccomp.go:426] syscall filter mkdirat: arg0 NonNegativeFD => 0x616c6c6f77
D1127 12:59:00.420487 14141 seccomp.go:426] syscall filter mknodat: arg0 NonNegativeFD => 0x616c6c6f77
D1127 12:59:00.420490 14141 seccomp.go:426] syscall filter fchownat: (arg0 NonNegativeFD && arg1 == * && arg2 == * && arg3 == * && arg4 == 0x1100) => 0x616c6c6f77
D1127 12:59:00.420495 14141 seccomp.go:426] syscall filter newfstatat: arg0 NonNegativeFD => 0x616c6c6f77
D1127 12:59:00.420498 14141 seccomp.go:426] syscall filter unlinkat: arg0 NonNegativeFD => 0x616c6c6f77
D1127 12:59:00.420501 14141 seccomp.go:426] syscall filter renameat: (arg0 NonNegativeFD && arg1 == * && arg2 NonNegativeFD) => 0x616c6c6f77
D1127 12:59:00.420505 14141 seccomp.go:426] syscall filter linkat: (arg0 NonNegativeFD && arg1 == * && arg2 NonNegativeFD && arg3 == * && arg4 == 0x0) => 0x616c6c6f77
D1127 12:59:00.420509 14141 seccomp.go:426] syscall filter symlinkat: (arg0 == * && arg1 NonNegativeFD) => 0x616c6c6f77
D1127 12:59:00.420513 14141 seccomp.go:426] syscall filter readlinkat: arg0 NonNegativeFD => 0x616c6c6f77
D1127 12:59:00.420516 14141 seccomp.go:426] syscall filter fchmodat: arg0 NonNegativeFD => 0x616c6c6f77
D1127 12:59:00.420519 14141 seccomp.go:426] syscall filter ppoll: true => 0x616c6c6f77
D1127 12:59:00.420522 14141 seccomp.go:426] syscall filter tee: (arg0 == * && arg1 == * && arg2 == 0x1 && arg3 == 0x2) => 0x616c6c6f77
D1127 12:59:00.420526 14141 seccomp.go:426] syscall filter sync_file_range: true => 0x616c6c6f77
D1127 12:59:00.420531 14141 seccomp.go:426] syscall filter utimensat: ((arg0 == * && arg1 == 0x0 && arg2 == * && arg3 == 0x0) || arg0 NonNegativeFD) => 0x616c6c6f77
D1127 12:59:00.420535 14141 seccomp.go:426] syscall filter epoll_pwait: (arg0 == * && arg1 == * && arg2 == * && arg3 == * && arg4 == 0x0) => 0x616c6c6f77
D1127 12:59:00.420539 14141 seccomp.go:426] syscall filter fallocate: true => 0x616c6c6f77
D1127 12:59:00.420542 14141 seccomp.go:426] syscall filter accept4: arg0 == 0xc => 0x616c6c6f77
D1127 12:59:00.420545 14141 seccomp.go:426] syscall filter eventfd2: (arg0 == 0x0 && arg1 == 0x0) => 0x616c6c6f77
D1127 12:59:00.420548 14141 seccomp.go:426] syscall filter epoll_create1: true => 0x616c6c6f77
D1127 12:59:00.420552 14141 seccomp.go:426] syscall filter dup3: (arg0 == * && arg1 == * && arg2 == 0x80000) => 0x616c6c6f77
D1127 12:59:00.420556 14141 seccomp.go:426] syscall filter preadv: true => 0x616c6c6f77
D1127 12:59:00.420559 14141 seccomp.go:426] syscall filter pwritev: true => 0x616c6c6f77
D1127 12:59:00.420562 14141 seccomp.go:426] syscall filter recvmmsg: (arg0 == * && arg1 == * && arg2 == 0x8 && arg3 == 0x40 && arg4 == 0x0) => 0x616c6c6f77
D1127 12:59:00.420566 14141 seccomp.go:426] syscall filter sendmmsg: (arg0 == * && arg1 == * && arg2 == * && arg3 == 0x40) => 0x616c6c6f77
D1127 12:59:00.420569 14141 seccomp.go:426] syscall filter getcpu: (arg0 == * && arg1 == 0x0 && arg2 == 0x0) => 0x616c6c6f77
D1127 12:59:00.420573 14141 seccomp.go:426] syscall filter getrandom: true => 0x616c6c6f77
D1127 12:59:00.420576 14141 seccomp.go:426] syscall filter membarrier: (arg0 == 0x1 && arg1 == 0x0) => 0x616c6c6f77
D1127 12:59:00.420580 14141 seccomp.go:426] syscall filter preadv2: true => 0x616c6c6f77
D1127 12:59:00.420583 14141 seccomp.go:426] syscall filter pwritev2: true => 0x616c6c6f77
D1127 12:59:00.420586 14141 seccomp.go:426] syscall filter statx: true => 0x616c6c6f77
D1127 12:59:00.453792 14141 seccomp.go:391] Seccomp program optimized from 1671 to 731 instructions; took 32.533155ms to build and 1.05676ms to optimize
D1127 12:59:00.454113 14141 seccomp.go:78] Seccomp program dump:
0: A <- P[4:4]
1: pc += (A == 3221225534) ? 1 [3] : 0 [2]
2: ret 2147483648
3: A <- P[0:4]
4: pc += (A >= 186) ? 0 [5] : 3 [8]
5: pc += (A > 186) ? 0 [6] : 1 [7]
6: pc += 430 [437]
7: ret 2147418112
8: pc += (A >= 38) ? 0 [9] : 2 [11]
9: pc += (A > 38) ? 172 [182] : 0 [10]
10: ret 2147418112
11: pc += (A >= 15) ? 0 [12] : 2 [14]
12: pc += (A > 15) ? 73 [86] : 0 [13]
13: ret 2147418112
14: pc += (A >= 9) ? 0 [15] : 42 [57]
15: pc += (A > 9) ? 54 [70] : 0 [16]
16: A <- P[32:4]
17: A <- A & 4
18: pc += (A == 4) ? 0 [19] : 4 [23]
19: A <- P[36:4]
20: A <- A & 0
21: pc += (A == 0) ? 0 [22] : 1 [23]
22: ret 2147483648
23: A <- P[40:4]
24: pc += (A == 1) ? 0 [25] : 2 [27]
25: A <- P[44:4]
26: pc += (A == 0) ? 28 [55] : 0 [27]
27: A <- P[40:4]
28: pc += (A == 17) ? 0 [29] : 2 [31]
29: A <- P[44:4]
30: pc += (A == 0) ? 24 [55] : 0 [31]
31: A <- P[40:4]
32: pc += (A == 2) ? 0 [33] : 2 [35]
33: A <- P[44:4]
34: pc += (A == 0) ? 20 [55] : 0 [35]
35: A <- P[40:4]
36: pc += (A == 34) ? 0 [37] : 2 [39]
37: A <- P[44:4]
38: pc += (A == 0) ? 16 [55] : 0 [39]
39: A <- P[40:4]
40: pc += (A == 131106) ? 0 [41] : 2 [43]
41: A <- P[44:4]
42: pc += (A == 0) ? 12 [55] : 0 [43]
43: A <- P[40:4]
44: pc += (A == 16418) ? 0 [45] : 2 [47]
45: A <- P[44:4]
46: pc += (A == 0) ? 8 [55] : 0 [47]
47: A <- P[32:4]
48: pc += (A == 3) ? 0 [49] : 7 [56]
49: A <- P[36:4]
50: pc += (A == 0) ? 0 [51] : 5 [56]
51: A <- P[40:4]
52: pc += (A == 50) ? 0 [53] : 3 [56]
53: A <- P[44:4]
54: pc += (A == 0) ? 0 [55] : 1 [56]
55: ret 2147418112
56: ret 2147483648
57: pc += (A >= 3) ? 0 [58] : 2 [60]
58: pc += (A > 3) ? 6 [65] : 0 [59]
59: ret 2147418112
60: pc += (A >= 1) ? 0 [61] : 3 [64]
61: pc += (A == 1) ? 1 [63] : 0 [62]
62: ret 2147483648
63: ret 2147418112
64: ret 2147418112
65: pc += (A >= 8) ? 0 [66] : 1 [67]
66: ret 2147418112
67: pc += (A == 5) ? 1 [69] : 0 [68]
68: ret 2147483648
69: ret 2147418112
70: pc += (A >= 13) ? 0 [71] : 2 [73]
71: pc += (A > 13) ? 13 [85] : 0 [72]
72: ret 2147418112
73: pc += (A >= 11) ? 0 [74] : 3 [77]
74: pc += (A == 11) ? 1 [76] : 0 [75]
75: ret 2147483648
76: ret 2147418112
77: A <- P[32:4]
78: A <- A & 4
79: pc += (A == 4) ? 0 [80] : 4 [84]
80: A <- P[36:4]
81: A <- A & 0
82: pc += (A == 0) ? 0 [83] : 1 [84]
83: ret 2147483648
84: ret 2147418112
85: ret 2147418112
86: pc += (A >= 24) ? 0 [87] : 2 [89]
87: pc += (A > 24) ? 81 [169] : 0 [88]
88: ret 2147418112
89: pc += (A >= 18) ? 0 [90] : 2 [92]
90: pc += (A > 18) ? 69 [160] : 0 [91]
91: ret 2147418112
92: pc += (A >= 17) ? 0 [93] : 1 [94]
93: ret 2147418112
94: A <- P[16:4]
95: pc += (A & 2147483648) ? 6 [102] : 0 [96]
96: A <- P[20:4]
97: pc += (A == 0) ? 0 [98] : 4 [102]
98: A <- P[24:4]
99: pc += (A == 21531) ? 0 [100] : 2 [102]
100: A <- P[28:4]
101: pc += (A == 0) ? 56 [158] : 0 [102]
102: A <- P[16:4]
103: pc += (A & 2147483648) ? 6 [110] : 0 [104]
104: A <- P[20:4]
105: pc += (A == 0) ? 0 [106] : 4 [110]
106: A <- P[24:4]
107: pc += (A == 21505) ? 0 [108] : 2 [110]
108: A <- P[28:4]
109: pc += (A == 0) ? 48 [158] : 0 [110]
110: A <- P[16:4]
111: pc += (A & 2147483648) ? 6 [118] : 0 [112]
112: A <- P[20:4]
113: pc += (A == 0) ? 0 [114] : 4 [118]
114: A <- P[24:4]
115: pc += (A == 21506) ? 0 [116] : 2 [118]
116: A <- P[28:4]
117: pc += (A == 0) ? 40 [158] : 0 [118]
118: A <- P[16:4]
119: pc += (A & 2147483648) ? 6 [126] : 0 [120]
120: A <- P[20:4]
121: pc += (A == 0) ? 0 [122] : 4 [126]
122: A <- P[24:4]
123: pc += (A == 21508) ? 0 [124] : 2 [126]
124: A <- P[28:4]
125: pc += (A == 0) ? 32 [158] : 0 [126]
126: A <- P[16:4]
127: pc += (A & 2147483648) ? 6 [134] : 0 [128]
128: A <- P[20:4]
129: pc += (A == 0) ? 0 [130] : 4 [134]
130: A <- P[24:4]
131: pc += (A == 21507) ? 0 [132] : 2 [134]
132: A <- P[28:4]
133: pc += (A == 0) ? 24 [158] : 0 [134]
134: A <- P[16:4]
135: pc += (A & 2147483648) ? 6 [142] : 0 [136]
136: A <- P[20:4]
137: pc += (A == 0) ? 0 [138] : 4 [142]
138: A <- P[24:4]
139: pc += (A == 21524) ? 0 [140] : 2 [142]
140: A <- P[28:4]
141: pc += (A == 0) ? 16 [158] : 0 [142]
142: A <- P[16:4]
143: pc += (A & 2147483648) ? 6 [150] : 0 [144]
144: A <- P[20:4]
145: pc += (A == 0) ? 0 [146] : 4 [150]
146: A <- P[24:4]
147: pc += (A == 21523) ? 0 [148] : 2 [150]
148: A <- P[28:4]
149: pc += (A == 0) ? 8 [158] : 0 [150]
150: A <- P[16:4]
151: pc += (A & 2147483648) ? 7 [159] : 0 [152]
152: A <- P[20:4]
153: pc += (A == 0) ? 0 [154] : 5 [159]
154: A <- P[24:4]
155: pc += (A == 35138) ? 0 [156] : 3 [159]
156: A <- P[28:4]
157: pc += (A == 0) ? 0 [158] : 1 [159]
158: ret 2147418112
159: ret 2147483648
160: pc += (A == 20) ? 1 [162] : 0 [161]
161: ret 2147483648
162: A <- P[36:4]
163: pc += (A >= 0) ? 0 [164] : 4 [168]
164: pc += (A == 0) ? 0 [165] : 2 [167]
165: A <- P[32:4]
166: pc += (A > 0) ? 0 [167] : 1 [168]
167: ret 2147418112
168: ret 2147483648
169: pc += (A >= 32) ? 0 [170] : 2 [172]
170: pc += (A > 32) ? 8 [179] : 0 [171]
171: ret 2147418112
172: pc += (A >= 28) ? 0 [173] : 3 [176]
173: pc += (A == 28) ? 1 [175] : 0 [174]
174: ret 2147483648
175: ret 2147418112
176: pc += (A == 27) ? 1 [178] : 0 [177]
177: ret 2147483648
178: ret 2147418112
179: pc += (A == 35) ? 1 [181] : 0 [180]
180: ret 2147483648
181: ret 2147418112
182: pc += (A >= 74) ? 0 [183] : 2 [185]
183: pc += (A > 74) ? 133 [317] : 0 [184]
184: ret 2147418112
185: pc += (A >= 55) ? 0 [186] : 43 [229]
186: pc += (A > 55) ? 93 [280] : 0 [187]
187: A <- P[24:4]
188: pc += (A == 1) ? 0 [189] : 6 [195]
189: A <- P[28:4]
190: pc += (A == 0) ? 0 [191] : 4 [195]
191: A <- P[32:4]
192: pc += (A == 39) ? 0 [193] : 2 [195]
193: A <- P[36:4]
194: pc += (A == 0) ? 32 [227] : 0 [195]
195: A <- P[24:4]
196: pc += (A == 1) ? 0 [197] : 6 [203]
197: A <- P[28:4]
198: pc += (A == 0) ? 0 [199] : 4 [203]
199: A <- P[32:4]
200: pc += (A == 3) ? 0 [201] : 2 [203]
201: A <- P[36:4]
202: pc += (A == 0) ? 24 [227] : 0 [203]
203: A <- P[24:4]
204: pc += (A == 1) ? 0 [205] : 6 [211]
205: A <- P[28:4]
206: pc += (A == 0) ? 0 [207] : 4 [211]
207: A <- P[32:4]
208: pc += (A == 4) ? 0 [209] : 2 [211]
209: A <- P[36:4]
210: pc += (A == 0) ? 16 [227] : 0 [211]
211: A <- P[24:4]
212: pc += (A == 1) ? 0 [213] : 6 [219]
213: A <- P[28:4]
214: pc += (A == 0) ? 0 [215] : 4 [219]
215: A <- P[32:4]
216: pc += (A == 7) ? 0 [217] : 2 [219]
217: A <- P[36:4]
218: pc += (A == 0) ? 8 [227] : 0 [219]
219: A <- P[24:4]
220: pc += (A == 1) ? 0 [221] : 7 [228]
221: A <- P[28:4]
222: pc += (A == 0) ? 0 [223] : 5 [228]
223: A <- P[32:4]
224: pc += (A == 17) ? 0 [225] : 3 [228]
225: A <- P[36:4]
226: pc += (A == 0) ? 0 [227] : 1 [228]
227: ret 2147418112
228: ret 2147483648
229: pc += (A >= 47) ? 0 [230] : 11 [241]
230: pc += (A > 47) ? 20 [251] : 0 [231]
231: A <- P[32:4]
232: pc += (A == 96) ? 0 [233] : 2 [235]
233: A <- P[36:4]
234: pc += (A == 0) ? 4 [239] : 0 [235]
235: A <- P[32:4]
236: pc += (A == 98) ? 0 [237] : 3 [240]
237: A <- P[36:4]
238: pc += (A == 0) ? 0 [239] : 1 [240]
239: ret 2147418112
240: ret 2147483648
241: pc += (A >= 46) ? 0 [242] : 6 [248]
242: A <- P[32:4]
243: pc += (A == 16448) ? 0 [244] : 3 [247]
244: A <- P[36:4]
245: pc += (A == 0) ? 0 [246] : 1 [247]
246: ret 2147418112
247: ret 2147483648
248: pc += (A == 39) ? 1 [250] : 0 [249]
249: ret 2147483648
250: ret 2147418112
251: pc += (A >= 50) ? 0 [252] : 12 [264]
252: pc += (A == 50) ? 1 [254] : 0 [253]
253: ret 2147483648
254: A <- P[16:4]
255: pc += (A == 12) ? 0 [256] : 7 [263]
256: A <- P[20:4]
257: pc += (A == 0) ? 0 [258] : 5 [263]
258: A <- P[24:4]
259: pc += (A == 16) ? 0 [260] : 3 [263]
260: A <- P[28:4]
261: pc += (A == 0) ? 0 [262] : 1 [263]
262: ret 2147418112
263: ret 2147483648
264: pc += (A == 48) ? 1 [266] : 0 [265]
265: ret 2147483648
266: A <- P[24:4]
267: pc += (A == 0) ? 0 [268] : 2 [270]
268: A <- P[28:4]
269: pc += (A == 0) ? 8 [278] : 0 [270]
270: A <- P[24:4]
271: pc += (A == 1) ? 0 [272] : 2 [274]
272: A <- P[28:4]
273: pc += (A == 0) ? 4 [278] : 0 [274]
274: A <- P[24:4]
275: pc += (A == 2) ? 0 [276] : 3 [279]
276: A <- P[28:4]
277: pc += (A == 0) ? 0 [278] : 1 [279]
278: ret 2147418112
279: ret 2147483648
280: pc += (A >= 61) ? 0 [281] : 2 [283]
281: pc += (A > 61) ? 19 [301] : 0 [282]
282: ret 2147418112
283: pc += (A >= 60) ? 0 [284] : 1 [285]
284: ret 2147418112
285: pc += (A == 56) ? 1 [287] : 0 [286]
286: ret 2147483648
287: A <- P[16:4]
288: pc += (A == 855808) ? 0 [289] : 11 [300]
289: A <- P[20:4]
290: pc += (A == 0) ? 0 [291] : 9 [300]
291: A <- P[32:4]
292: pc += (A == 0) ? 0 [293] : 7 [300]
293: A <- P[36:4]
294: pc += (A == 0) ? 0 [295] : 5 [300]
295: A <- P[40:4]
296: pc += (A == 0) ? 0 [297] : 3 [300]
297: A <- P[44:4]
298: pc += (A == 0) ? 0 [299] : 1 [300]
299: ret 2147418112
300: ret 2147483648
301: pc += (A == 72) ? 1 [303] : 0 [302]
302: ret 2147483648
303: A <- P[24:4]
304: pc += (A == 3) ? 0 [305] : 2 [307]
305: A <- P[28:4]
306: pc += (A == 0) ? 8 [315] : 0 [307]
307: A <- P[24:4]
308: pc += (A == 4) ? 0 [309] : 2 [311]
309: A <- P[28:4]
310: pc += (A == 0) ? 4 [315] : 0 [311]
311: A <- P[24:4]
312: pc += (A == 1) ? 0 [313] : 3 [316]
313: A <- P[28:4]
314: pc += (A == 0) ? 0 [315] : 1 [316]
315: ret 2147418112
316: ret 2147483648
317: pc += (A >= 131) ? 0 [318] : 2 [320]
318: pc += (A > 131) ? 91 [410] : 0 [319]
319: ret 2147418112
320: pc += (A >= 96) ? 0 [321] : 2 [323]
321: pc += (A > 96) ? 8 [330] : 0 [322]
322: ret 2147418112
323: pc += (A >= 91) ? 0 [324] : 3 [327]
324: pc += (A == 91) ? 1 [326] : 0 [325]
325: ret 2147483648
326: ret 2147418112
327: pc += (A == 77) ? 1 [329] : 0 [328]
328: ret 2147483648
329: ret 2147418112
330: pc += (A == 101) ? 1 [332] : 0 [331]
331: ret 2147483648
332: A <- P[16:4]
333: pc += (A == 16) ? 0 [334] : 2 [336]
334: A <- P[20:4]
335: pc += (A == 0) ? 72 [408] : 0 [336]
336: A <- P[16:4]
337: pc += (A == 7) ? 0 [338] : 10 [348]
338: A <- P[20:4]
339: pc += (A == 0) ? 0 [340] : 8 [348]
340: A <- P[32:4]
341: pc += (A == 0) ? 0 [342] : 6 [348]
342: A <- P[36:4]
343: pc += (A == 0) ? 0 [344] : 4 [348]
344: A <- P[40:4]
345: pc += (A == 0) ? 0 [346] : 2 [348]
346: A <- P[44:4]
347: pc += (A == 0) ? 60 [408] : 0 [348]
348: A <- P[16:4]
349: pc += (A == 16897) ? 0 [350] : 2 [352]
350: A <- P[20:4]
351: pc += (A == 0) ? 56 [408] : 0 [352]
352: A <- P[16:4]
353: pc += (A == 16900) ? 0 [354] : 6 [360]
354: A <- P[20:4]
355: pc += (A == 0) ? 0 [356] : 4 [360]
356: A <- P[32:4]
357: pc += (A == 1) ? 0 [358] : 2 [360]
358: A <- P[36:4]
359: pc += (A == 0) ? 48 [408] : 0 [360]
360: A <- P[16:4]
361: pc += (A == 16898) ? 0 [362] : 2 [364]
362: A <- P[20:4]
363: pc += (A == 0) ? 44 [408] : 0 [364]
364: A <- P[16:4]
365: pc += (A == 16896) ? 0 [366] : 10 [376]
366: A <- P[20:4]
367: pc += (A == 0) ? 0 [368] : 8 [376]
368: A <- P[32:4]
369: pc += (A == 0) ? 0 [370] : 6 [376]
370: A <- P[36:4]
371: pc += (A == 0) ? 0 [372] : 4 [376]
372: A <- P[40:4]
373: pc += (A == 1048641) ? 0 [374] : 2 [376]
374: A <- P[44:4]
375: pc += (A == 0) ? 32 [408] : 0 [376]
376: A <- P[16:4]
377: pc += (A == 16901) ? 0 [378] : 6 [384]
378: A <- P[20:4]
379: pc += (A == 0) ? 0 [380] : 4 [384]
380: A <- P[32:4]
381: pc += (A == 1) ? 0 [382] : 2 [384]
382: A <- P[36:4]
383: pc += (A == 0) ? 24 [408] : 0 [384]
384: A <- P[16:4]
385: pc += (A == 16907) ? 0 [386] : 6 [392]
386: A <- P[20:4]
387: pc += (A == 0) ? 0 [388] : 4 [392]
388: A <- P[32:4]
389: pc += (A == 8) ? 0 [390] : 2 [392]
390: A <- P[36:4]
391: pc += (A == 0) ? 16 [408] : 0 [392]
392: A <- P[16:4]
393: pc += (A == 31) ? 0 [394] : 10 [404]
394: A <- P[20:4]
395: pc += (A == 0) ? 0 [396] : 8 [404]
396: A <- P[32:4]
397: pc += (A == 0) ? 0 [398] : 6 [404]
398: A <- P[36:4]
399: pc += (A == 0) ? 0 [400] : 4 [404]
400: A <- P[40:4]
401: pc += (A == 0) ? 0 [402] : 2 [404]
402: A <- P[44:4]
403: pc += (A == 0) ? 4 [408] : 0 [404]
404: A <- P[16:4]
405: pc += (A == 17) ? 0 [406] : 3 [409]
406: A <- P[20:4]
407: pc += (A == 0) ? 0 [408] : 1 [409]
408: ret 2147418112
409: ret 2147483648
410: pc += (A >= 149) ? 0 [411] : 2 [413]
411: pc += (A > 149) ? 22 [434] : 0 [412]
412: ret 2147418112
413: pc += (A >= 141) ? 0 [414] : 12 [426]
414: pc += (A == 141) ? 1 [416] : 0 [415]
415: ret 2147483648
416: A <- P[16:4]
417: pc += (A == 0) ? 0 [418] : 7 [425]
418: A <- P[20:4]
419: pc += (A == 0) ? 0 [420] : 5 [425]
420: A <- P[32:4]
421: pc += (A == 1) ? 0 [422] : 3 [425]
422: A <- P[36:4]
423: pc += (A == 0) ? 0 [424] : 1 [425]
424: ret 2147418112
425: ret 2147483648
426: pc += (A == 138) ? 1 [428] : 0 [427]
427: ret 2147483648
428: A <- P[16:4]
429: pc += (A & 2147483648) ? 3 [433] : 0 [430]
430: A <- P[20:4]
431: pc += (A == 0) ? 0 [432] : 1 [433]
432: ret 2147418112
433: ret 2147483648
434: pc += (A == 150) ? 1 [436] : 0 [435]
435: ret 2147483648
436: ret 2147418112
437: pc += (A >= 268) ? 0 [438] : 7 [445]
438: pc += (A > 268) ? 169 [608] : 0 [439]
439: A <- P[16:4]
440: pc += (A & 2147483648) ? 3 [444] : 0 [441]
441: A <- P[20:4]
442: pc += (A == 0) ? 0 [443] : 1 [444]
443: ret 2147418112
444: ret 2147483648
445: pc += (A >= 257) ? 0 [446] : 13 [459]
446: pc += (A > 257) ? 81 [528] : 0 [447]
447: A <- P[16:4]
448: pc += (A & 2147483648) ? 9 [458] : 0 [449]
449: A <- P[20:4]
450: pc += (A == 0) ? 0 [451] : 7 [458]
451: A <- P[32:4]
452: A <- A & 131072
453: pc += (A == 131072) ? 0 [454] : 4 [458]
454: A <- P[36:4]
455: A <- A & 0
456: pc += (A == 0) ? 0 [457] : 1 [458]
457: ret 2147418112
458: ret 2147483648
459: pc += (A >= 226) ? 0 [460] : 2 [462]
460: pc += (A > 226) ? 54 [515] : 0 [461]
461: ret 2147418112
462: pc += (A >= 219) ? 0 [463] : 2 [465]
463: pc += (A > 219) ? 30 [494] : 0 [464]
464: ret 2147418112
465: pc += (A >= 217) ? 0 [466] : 8 [474]
466: pc += (A == 217) ? 1 [468] : 0 [467]
467: ret 2147483648
468: A <- P[16:4]
469: pc += (A & 2147483648) ? 3 [473] : 0 [470]
470: A <- P[20:4]
471: pc += (A == 0) ? 0 [472] : 1 [473]
472: ret 2147418112
473: ret 2147483648
474: pc += (A == 202) ? 1 [476] : 0 [475]
475: ret 2147483648
476: A <- P[24:4]
477: pc += (A == 128) ? 0 [478] : 2 [480]
478: A <- P[28:4]
479: pc += (A == 0) ? 12 [492] : 0 [480]
480: A <- P[24:4]
481: pc += (A == 129) ? 0 [482] : 2 [484]
482: A <- P[28:4]
483: pc += (A == 0) ? 8 [492] : 0 [484]
484: A <- P[24:4]
485: pc += (A == 0) ? 0 [486] : 2 [488]
486: A <- P[28:4]
487: pc += (A == 0) ? 4 [492] : 0 [488]
488: A <- P[24:4]
489: pc += (A == 1) ? 0 [490] : 3 [493]
490: A <- P[28:4]
491: pc += (A == 0) ? 0 [492] : 1 [493]
492: ret 2147418112
493: ret 2147483648
494: pc += (A >= 223) ? 0 [495] : 12 [507]
495: pc += (A == 223) ? 1 [497] : 0 [496]
496: ret 2147483648
497: A <- P[24:4]
498: pc += (A == 0) ? 0 [499] : 7 [506]
499: A <- P[28:4]
500: pc += (A == 0) ? 0 [501] : 5 [506]
501: A <- P[40:4]
502: pc += (A == 0) ? 0 [503] : 3 [506]
503: A <- P[44:4]
504: pc += (A == 0) ? 0 [505] : 1 [506]
505: ret 2147418112
506: ret 2147483648
507: pc += (A == 222) ? 1 [509] : 0 [508]
508: ret 2147483648
509: A <- P[16:4]
510: pc += (A == 3) ? 0 [511] : 3 [514]
511: A <- P[20:4]
512: pc += (A == 0) ? 0 [513] : 1 [514]
513: ret 2147418112
514: ret 2147483648
515: pc += (A >= 233) ? 0 [516] : 2 [518]
516: pc += (A > 233) ? 8 [525] : 0 [517]
517: ret 2147418112
518: pc += (A >= 231) ? 0 [519] : 3 [522]
519: pc += (A == 231) ? 1 [521] : 0 [520]
520: ret 2147483648
521: ret 2147418112
522: pc += (A == 228) ? 1 [524] : 0 [523]
523: ret 2147483648
524: ret 2147418112
525: pc += (A == 234) ? 1 [527] : 0 [526]
526: ret 2147483648
527: ret 2147418112
528: pc += (A >= 263) ? 0 [529] : 7 [536]
529: pc += (A > 263) ? 39 [569] : 0 [530]
530: A <- P[16:4]
531: pc += (A & 2147483648) ? 3 [535] : 0 [532]
532: A <- P[20:4]
533: pc += (A == 0) ? 0 [534] : 1 [535]
534: ret 2147418112
535: ret 2147483648
536: pc += (A >= 260) ? 0 [537] : 11 [548]
537: pc += (A > 260) ? 23 [561] : 0 [538]
538: A <- P[16:4]
539: pc += (A & 2147483648) ? 7 [547] : 0 [540]
540: A <- P[20:4]
541: pc += (A == 0) ? 0 [542] : 5 [547]
542: A <- P[48:4]
543: pc += (A == 4352) ? 0 [544] : 3 [547]
544: A <- P[52:4]
545: pc += (A == 0) ? 0 [546] : 1 [547]
546: ret 2147418112
547: ret 2147483648
548: pc += (A >= 259) ? 0 [549] : 6 [555]
549: A <- P[16:4]
550: pc += (A & 2147483648) ? 3 [554] : 0 [551]
551: A <- P[20:4]
552: pc += (A == 0) ? 0 [553] : 1 [554]
553: ret 2147418112
554: ret 2147483648
555: A <- P[16:4]
556: pc += (A & 2147483648) ? 3 [560] : 0 [557]
557: A <- P[20:4]
558: pc += (A == 0) ? 0 [559] : 1 [560]
559: ret 2147418112
560: ret 2147483648
561: pc += (A == 262) ? 1 [563] : 0 [562]
562: ret 2147483648
563: A <- P[16:4]
564: pc += (A & 2147483648) ? 3 [568] : 0 [565]
565: A <- P[20:4]
566: pc += (A == 0) ? 0 [567] : 1 [568]
567: ret 2147418112
568: ret 2147483648
569: pc += (A >= 266) ? 0 [570] : 7 [577]
570: pc += (A > 266) ? 31 [602] : 0 [571]
571: A <- P[24:4]
572: pc += (A & 2147483648) ? 3 [576] : 0 [573]
573: A <- P[28:4]
574: pc += (A == 0) ? 0 [575] : 1 [576]
575: ret 2147418112
576: ret 2147483648
577: pc += (A >= 265) ? 0 [578] : 14 [592]
578: A <- P[16:4]
579: pc += (A & 2147483648) ? 11 [591] : 0 [580]
580: A <- P[20:4]
581: pc += (A == 0) ? 0 [582] : 9 [591]
582: A <- P[32:4]
583: pc += (A & 2147483648) ? 7 [591] : 0 [584]
584: A <- P[36:4]
585: pc += (A == 0) ? 0 [586] : 5 [591]
586: A <- P[48:4]
587: pc += (A == 0) ? 0 [588] : 3 [591]
588: A <- P[52:4]
589: pc += (A == 0) ? 0 [590] : 1 [591]
590: ret 2147418112
591: ret 2147483648
592: A <- P[16:4]
593: pc += (A & 2147483648) ? 7 [601] : 0 [594]
594: A <- P[20:4]
595: pc += (A == 0) ? 0 [596] : 5 [601]
596: A <- P[32:4]
597: pc += (A & 2147483648) ? 3 [601] : 0 [598]
598: A <- P[36:4]
599: pc += (A == 0) ? 0 [600] : 1 [601]
600: ret 2147418112
601: ret 2147483648
602: A <- P[16:4]
603: pc += (A & 2147483648) ? 3 [607] : 0 [604]
604: A <- P[20:4]
605: pc += (A == 0) ? 0 [606] : 1 [607]
606: ret 2147418112
607: ret 2147483648
608: pc += (A >= 295) ? 0 [609] : 2 [611]
609: pc += (A > 295) ? 66 [676] : 0 [610]
610: ret 2147418112
611: pc += (A >= 285) ? 0 [612] : 2 [614]
612: pc += (A > 285) ? 38 [651] : 0 [613]
613: ret 2147418112
614: pc += (A >= 277) ? 0 [615] : 2 [617]
615: pc += (A > 277) ? 14 [630] : 0 [616]
616: ret 2147418112
617: pc += (A >= 276) ? 0 [618] : 10 [628]
618: A <- P[32:4]
619: pc += (A == 1) ? 0 [620] : 7 [627]
620: A <- P[36:4]
621: pc += (A == 0) ? 0 [622] : 5 [627]
622: A <- P[40:4]
623: pc += (A == 2) ? 0 [624] : 3 [627]
624: A <- P[44:4]
625: pc += (A == 0) ? 0 [626] : 1 [627]
626: ret 2147418112
627: ret 2147483648
628: pc += (A == 271) ? 0 [629] : 101 [730]
629: ret 2147418112
630: pc += (A >= 281) ? 0 [631] : 6 [637]
631: pc += (A == 281) ? 0 [632] : 98 [730]
632: A <- P[48:4]
633: pc += (A == 0) ? 0 [634] : 96 [730]
634: A <- P[52:4]
635: pc += (A == 0) ? 0 [636] : 94 [730]
636: ret 2147418112
637: pc += (A == 280) ? 0 [638] : 92 [730]
638: A <- P[24:4]
639: pc += (A == 0) ? 0 [640] : 6 [646]
640: A <- P[28:4]
641: pc += (A == 0) ? 0 [642] : 4 [646]
642: A <- P[40:4]
643: pc += (A == 0) ? 0 [644] : 2 [646]
644: A <- P[44:4]
645: pc += (A == 0) ? 4 [650] : 0 [646]
646: A <- P[16:4]
647: pc += (A & 2147483648) ? 82 [730] : 0 [648]
648: A <- P[20:4]
649: pc += (A == 0) ? 0 [650] : 80 [730]
650: ret 2147418112
651: pc += (A >= 291) ? 0 [652] : 2 [654]
652: pc += (A > 291) ? 17 [670] : 0 [653]
653: ret 2147418112
654: pc += (A >= 290) ? 0 [655] : 9 [664]
655: A <- P[16:4]
656: pc += (A == 0) ? 0 [657] : 73 [730]
657: A <- P[20:4]
658: pc += (A == 0) ? 0 [659] : 71 [730]
659: A <- P[24:4]
660: pc += (A == 0) ? 0 [661] : 69 [730]
661: A <- P[28:4]
662: pc += (A == 0) ? 0 [663] : 67 [730]
663: ret 2147418112
664: pc += (A == 288) ? 0 [665] : 65 [730]
665: A <- P[16:4]
666: pc += (A == 12) ? 0 [667] : 63 [730]
667: A <- P[20:4]
668: pc += (A == 0) ? 0 [669] : 61 [730]
669: ret 2147418112
670: pc += (A == 292) ? 0 [671] : 59 [730]
671: A <- P[32:4]
672: pc += (A == 524288) ? 0 [673] : 57 [730]
673: A <- P[36:4]
674: pc += (A == 0) ? 0 [675] : 55 [730]
675: ret 2147418112
676: pc += (A >= 318) ? 0 [677] : 2 [679]
677: pc += (A > 318) ? 35 [713] : 0 [678]
678: ret 2147418112
679: pc += (A >= 307) ? 0 [680] : 6 [686]
680: pc += (A > 307) ? 22 [703] : 0 [681]
681: A <- P[40:4]
682: pc += (A == 64) ? 0 [683] : 47 [730]
683: A <- P[44:4]
684: pc += (A == 0) ? 0 [685] : 45 [730]
685: ret 2147418112
686: pc += (A >= 299) ? 0 [687] : 14 [701]
687: pc += (A == 299) ? 0 [688] : 42 [730]
688: A <- P[32:4]
689: pc += (A == 8) ? 0 [690] : 40 [730]
690: A <- P[36:4]
691: pc += (A == 0) ? 0 [692] : 38 [730]
692: A <- P[40:4]
693: pc += (A == 64) ? 0 [694] : 36 [730]
694: A <- P[44:4]
695: pc += (A == 0) ? 0 [696] : 34 [730]
696: A <- P[48:4]
697: pc += (A == 0) ? 0 [698] : 32 [730]
698: A <- P[52:4]
699: pc += (A == 0) ? 0 [700] : 30 [730]
700: ret 2147418112
701: pc += (A == 296) ? 0 [702] : 28 [730]
702: ret 2147418112
703: pc += (A == 309) ? 0 [704] : 26 [730]
704: A <- P[24:4]
705: pc += (A == 0) ? 0 [706] : 24 [730]
706: A <- P[28:4]
707: pc += (A == 0) ? 0 [708] : 22 [730]
708: A <- P[32:4]
709: pc += (A == 0) ? 0 [710] : 20 [730]
710: A <- P[36:4]
711: pc += (A == 0) ? 0 [712] : 18 [730]
712: ret 2147418112
713: pc += (A >= 328) ? 0 [714] : 2 [716]
714: pc += (A > 328) ? 13 [728] : 0 [715]
715: ret 2147418112
716: pc += (A >= 327) ? 0 [717] : 1 [718]
717: ret 2147418112
718: pc += (A == 324) ? 0 [719] : 11 [730]
719: A <- P[16:4]
720: pc += (A == 1) ? 0 [721] : 9 [730]
721: A <- P[20:4]
722: pc += (A == 0) ? 0 [723] : 7 [730]
723: A <- P[24:4]
724: pc += (A == 0) ? 0 [725] : 5 [730]
725: A <- P[28:4]
726: pc += (A == 0) ? 0 [727] : 3 [730]
727: ret 2147418112
728: pc += (A == 332) ? 0 [729] : 1 [730]
729: ret 2147418112
730: ret 2147483648
I1127 12:59:00.454992 14141 seccomp.go:89] Seccomp filters installed.
I1127 12:59:00.455080 14141 vfs.go:428] Configuring container's file system
I1127 12:59:00.455088 14141 vfs.go:510] Mounting root with 9p, ioFD: 5
I1127 12:59:00.455092 14141 vfs.go:513] Adding overlay on top of root
D1127 12:59:00.455133 14141 client.go:400] send [sockComm 5] MountReq{}
D1127 12:59:00.455295 14141 loader.go:1067] Monitoring gofer health for container "f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.455443 14141 client.go:400] recv [sockComm 5] MountResp{Root: Inode{ControlFD: 1, Stat: Statx{Mask: 0x7ff, Mode: S_IFDIR|0o755, UID: 0, GID: 0, Ino: 519969, DevMajor: 0, DevMinor: 55, Size: 4096, Blocks: 8, Blksize: 4096, Nlink: 1, Atime: 2023-11-27 12:58:59.954857689 +0000 UTC, Btime: 1970-01-01 00:00:00 +0000 UTC, Ctime: 2023-11-27 12:59:00.066857048 +0000 UTC, Mtime: 2023-11-27 12:59:00.066857048 +0000 UTC, Attributes: 0, AttributesMask: 0, RdevMajor: 0, RdevMinor: 0}}, MaxMessageSize: 2093056, SupportedMs: [1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 21 22 23 24 25 26 29 30 31]}
D1127 12:59:00.455556 14141 vfs.go:689] Mounting "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/tmpfs" to "/dev", type: dev, options: [nosuid strictatime mode=755 size=65536k]
W1127 12:59:00.455566 14141 vfs.go:917] ignoring unknown mount option "nosuid"
W1127 12:59:00.455571 14141 vfs.go:917] ignoring unknown mount option "strictatime"
W1127 12:59:00.455573 14141 vfs.go:917] ignoring unknown mount option "mode=755"
W1127 12:59:00.455576 14141 vfs.go:917] ignoring unknown mount option "size=65536k"
I1127 12:59:00.455658 14141 vfs.go:820] Mounted "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/tmpfs" to "/dev" type: dev, internal-options: ""
D1127 12:59:00.455665 14141 vfs.go:689] Mounting "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/sysfs" to "/sys", type: sysfs, options: [nosuid noexec nodev ro]
W1127 12:59:00.455671 14141 vfs.go:917] ignoring unknown mount option "nosuid"
W1127 12:59:00.455674 14141 vfs.go:917] ignoring unknown mount option "nodev"
D1127 12:59:00.455788 14141 sys.go:155] Setting product_name: "m7i.4xlarge"
I1127 12:59:00.455811 14141 vfs.go:820] Mounted "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/sysfs" to "/sys" type: sysfs, internal-options: ""
D1127 12:59:00.455816 14141 vfs.go:689] Mounting "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/proc" to "/proc", type: proc, options: [nosuid noexec nodev]
W1127 12:59:00.455821 14141 vfs.go:917] ignoring unknown mount option "nosuid"
W1127 12:59:00.455824 14141 vfs.go:917] ignoring unknown mount option "nodev"
I1127 12:59:00.456186 14141 vfs.go:820] Mounted "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/proc" to "/proc" type: proc, internal-options: ""
D1127 12:59:00.456192 14141 vfs.go:689] Mounting "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/devpts" to "/dev/pts", type: devpts, options: [nosuid noexec newinstance ptmxmode=0666 mode=0620 gid=5]
W1127 12:59:00.456197 14141 vfs.go:917] ignoring unknown mount option "nosuid"
W1127 12:59:00.456200 14141 vfs.go:917] ignoring unknown mount option "newinstance"
W1127 12:59:00.456202 14141 vfs.go:917] ignoring unknown mount option "ptmxmode=0666"
W1127 12:59:00.456205 14141 vfs.go:917] ignoring unknown mount option "mode=0620"
W1127 12:59:00.456207 14141 vfs.go:917] ignoring unknown mount option "gid=5"
I1127 12:59:00.456217 14141 vfs.go:820] Mounted "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/devpts" to "/dev/pts" type: devpts, internal-options: ""
D1127 12:59:00.456222 14141 vfs.go:689] Mounting "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/shm" to "/dev/shm", type: tmpfs, options: [nosuid noexec nodev mode=1777 size=67108864]
W1127 12:59:00.456227 14141 vfs.go:917] ignoring unknown mount option "nosuid"
W1127 12:59:00.456230 14141 vfs.go:917] ignoring unknown mount option "nodev"
W1127 12:59:00.456232 14141 vfs.go:917] ignoring unknown mount option "mode=1777"
W1127 12:59:00.456236 14141 vfs.go:917] ignoring unknown mount option "size=67108864"
I1127 12:59:00.456246 14141 vfs.go:820] Mounted "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/shm" to "/dev/shm" type: tmpfs, internal-options: "mode=1777,size=67108864"
D1127 12:59:00.456253 14141 vfs.go:689] Mounting "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hosts" to "/etc/hosts", type: bind, options: [rbind rprivate]
W1127 12:59:00.456259 14141 vfs.go:917] ignoring unknown mount option "rprivate"
D1127 12:59:00.456287 14141 client.go:400] send [sockComm 8] MountReq{}
D1127 12:59:00.456390 14141 client.go:400] recv [sockComm 8] MountResp{Root: Inode{ControlFD: 1, Stat: Statx{Mask: 0x7ff, Mode: S_IFREG|0o644, UID: 0, GID: 0, Ino: 519985, DevMajor: 259, DevMinor: 1, Size: 174, Blocks: 8, Blksize: 4096, Nlink: 1, Atime: 2023-11-27 12:58:59.978857553 +0000 UTC, Btime: 1970-01-01 00:00:00 +0000 UTC, Ctime: 2023-11-27 12:58:59.986857507 +0000 UTC, Mtime: 2023-11-27 12:58:59.978857553 +0000 UTC, Attributes: 0, AttributesMask: 0, RdevMajor: 0, RdevMinor: 0}}, MaxMessageSize: 2093056, SupportedMs: [1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 21 22 23 24 25 26 29 30 31]}
I1127 12:59:00.456403 14141 vfs.go:820] Mounted "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hosts" to "/etc/hosts" type: bind, internal-options: "trans=fd,rfdno=8,wfdno=8,cache=remote_revalidating,directfs,disable_fifo_open"
D1127 12:59:00.456408 14141 vfs.go:689] Mounting "/run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/mqueue" to "/dev/mqueue", type: mqueue, options: [nosuid noexec nodev]
W1127 12:59:00.456412 14141 vfs.go:882] ignoring unknown filesystem type "mqueue"
D1127 12:59:00.456417 14141 vfs.go:689] Mounting "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hostname" to "/etc/hostname", type: bind, options: [rbind rprivate]
W1127 12:59:00.456421 14141 vfs.go:917] ignoring unknown mount option "rprivate"
D1127 12:59:00.456437 14141 client.go:400] send [sockComm 7] MountReq{}
D1127 12:59:00.456699 14141 client.go:400] recv [sockComm 7] MountResp{Root: Inode{ControlFD: 1, Stat: Statx{Mask: 0x7ff, Mode: S_IFREG|0o644, UID: 0, GID: 0, Ino: 519983, DevMajor: 259, DevMinor: 1, Size: 13, Blocks: 8, Blksize: 4096, Nlink: 1, Atime: 2023-11-27 12:58:59.986857507 +0000 UTC, Btime: 1970-01-01 00:00:00 +0000 UTC, Ctime: 2023-11-27 12:58:59.986857507 +0000 UTC, Mtime: 2023-11-27 12:58:59.986857507 +0000 UTC, Attributes: 0, AttributesMask: 0, RdevMajor: 0, RdevMinor: 0}}, MaxMessageSize: 2093056, SupportedMs: [1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 21 22 23 24 25 26 29 30 31]}
I1127 12:59:00.456709 14141 vfs.go:820] Mounted "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/hostname" to "/etc/hostname" type: bind, internal-options: "trans=fd,rfdno=7,wfdno=7,cache=remote_revalidating,directfs,disable_fifo_open"
D1127 12:59:00.456714 14141 vfs.go:689] Mounting "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/resolv.conf" to "/etc/resolv.conf", type: bind, options: [rbind rprivate]
W1127 12:59:00.456718 14141 vfs.go:917] ignoring unknown mount option "rprivate"
D1127 12:59:00.456734 14141 client.go:400] send [sockComm 6] MountReq{}
D1127 12:59:00.457129 14141 client.go:400] recv [sockComm 6] MountResp{Root: Inode{ControlFD: 1, Stat: Statx{Mask: 0x7ff, Mode: S_IFREG|0o644, UID: 0, GID: 0, Ino: 519986, DevMajor: 259, DevMinor: 1, Size: 620, Blocks: 8, Blksize: 4096, Nlink: 1, Atime: 2023-11-27 12:58:59.978857553 +0000 UTC, Btime: 1970-01-01 00:00:00 +0000 UTC, Ctime: 2023-11-27 12:58:59.986857507 +0000 UTC, Mtime: 2023-11-27 12:58:59.978857553 +0000 UTC, Attributes: 0, AttributesMask: 0, RdevMajor: 0, RdevMinor: 0}}, MaxMessageSize: 2093056, SupportedMs: [1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 21 22 23 24 25 26 29 30 31]}
I1127 12:59:00.457175 14141 vfs.go:820] Mounted "/var/lib/docker/containers/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/resolv.conf" to "/etc/resolv.conf" type: bind, internal-options: "trans=fd,rfdno=6,wfdno=6,cache=remote_revalidating,directfs,disable_fifo_open"
W1127 12:59:00.457215 14141 vfs.go:917] ignoring unknown mount option "mode=01777"
I1127 12:59:00.457246 14141 vfs.go:820] Mounted "" to "/tmp" type: tmpfs, internal-options: "mode=01777"
I1127 12:59:00.457258 14141 kernel.go:860] EXEC: [/hello]
D1127 12:59:00.457435 14141 syscalls.go:262] Allocating stack with size of 8388608 bytes
W1127 12:59:00.457722 14141 loader.go:1039] Seccomp spec is being ignored
I1127 12:59:00.461134 14141 loader.go:808] Process should have started...
I1127 12:59:00.461154 14141 watchdog.go:205] Starting watchdog, period: 45s, timeout: 3m0s, action: logWarning
D1127 12:59:00.461272 14141 urpc.go:568] urpc: successfully marshalled 37 bytes.
I1127 12:59:00.372048 14184 main.go:189] ***************************
I1127 12:59:00.372085 14184 main.go:190] Args: [/usr/local/bin/runsc --debug --debug-log=/tmp/runsc/ --strace --log-packets --root /var/run/docker/runtime-runc/moby --log /run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/log.json --log-format json start f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6]
I1127 12:59:00.372094 14184 main.go:191] Version release-20231113.0
I1127 12:59:00.372098 14184 main.go:192] GOOS: linux
I1127 12:59:00.372101 14184 main.go:193] GOARCH: amd64
I1127 12:59:00.372104 14184 main.go:194] PID: 14184
I1127 12:59:00.372108 14184 main.go:195] UID: 0, GID: 0
I1127 12:59:00.372111 14184 main.go:196] Configuration:
I1127 12:59:00.372115 14184 main.go:197] RootDir: /var/run/docker/runtime-runc/moby
I1127 12:59:00.372118 14184 main.go:198] Platform: systrap
I1127 12:59:00.372122 14184 main.go:199] FileAccess: exclusive
I1127 12:59:00.372126 14184 main.go:200] Directfs: true
I1127 12:59:00.372129 14184 main.go:201] Overlay: root:self
I1127 12:59:00.372134 14184 main.go:202] Network: sandbox, logging: true
I1127 12:59:00.372138 14184 main.go:203] Strace: true, max size: 1024, syscalls:
I1127 12:59:00.372142 14184 main.go:204] IOURING: false
I1127 12:59:00.372145 14184 main.go:205] Debug: true
I1127 12:59:00.372151 14184 main.go:206] Systemd: false
I1127 12:59:00.372154 14184 main.go:207] ***************************
D1127 12:59:00.372168 14184 state_file.go:78] Load container, rootDir: "/var/run/docker/runtime-runc/moby", id: {SandboxID: ContainerID:f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6}, opts: {Exact:false SkipCheck:false TryLock:false RootContainer:false}
W1127 12:59:00.373251 14184 specutils.go:118] AppArmor profile "docker-default" is being ignored
W1127 12:59:00.373268 14184 specutils.go:124] noNewPrivileges ignored. PR_SET_NO_NEW_PRIVS is assumed to always be set.
D1127 12:59:00.373275 14184 container.go:422] Start container, cid: f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6
D1127 12:59:00.373284 14184 sandbox.go:385] Start root sandbox "f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6", PID: 14141
D1127 12:59:00.373289 14184 sandbox.go:613] Connecting to sandbox "f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
I1127 12:59:00.373328 14184 network.go:58] Setting up network
I1127 12:59:00.373386 14184 namespace.go:108] Applying namespace network at path "/proc/14141/ns/net"
D1127 12:59:00.373704 14184 network.go:282] Setting up network channels
D1127 12:59:00.373711 14184 network.go:285] Creating Channel 0
D1127 12:59:00.373729 14184 network.go:332] Setting up network, config: {FilePayload:{Files:[0xc000272d58]} LoopbackLinks:[{Name:lo Addresses:[127.0.0.1/8] Routes:[{Destination:{IP:127.0.0.0 Mask:ff000000} Gateway:<nil>}] GvisorGROTimeout:0s}] FDBasedLinks:[{Name:eth0 InterfaceIndex:0 MTU:1500 Addresses:[172.17.0.2/16] Routes:[{Destination:{IP:172.17.0.0 Mask:ffff0000} Gateway:<nil>}] GSOMaxSize:65536 GvisorGSOEnabled:false GvisorGROTimeout:0s TXChecksumOffload:false RXChecksumOffload:true LinkAddress:02:42:ac:11:00:02 QDisc:fifo Neighbors:[] NumChannels:1}] XDPLinks:[] Defaultv4Gateway:{Route:{Destination:{IP:0.0.0.0 Mask:00000000000000000000ffff00000000} Gateway:172.17.0.1} Name:eth0} Defaultv6Gateway:{Route:{Destination:{IP:<nil> Mask:<nil>} Gateway:<nil>} Name:} PCAP:false NATBlob:false}
D1127 12:59:00.373878 14184 urpc.go:568] urpc: successfully marshalled 878 bytes.
D1127 12:59:00.418197 14184 urpc.go:611] urpc: unmarshal success.
I1127 12:59:00.418220 14184 namespace.go:129] Restoring namespace network
D1127 12:59:00.418262 14184 urpc.go:568] urpc: successfully marshalled 112 bytes.
D1127 12:59:00.461487 14184 urpc.go:611] urpc: unmarshal success.
D1127 12:59:00.461532 14184 container.go:1073] Save container, cid: f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6
D1127 12:59:00.461937 14184 state_file.go:78] Load container, rootDir: "/var/run/docker/runtime-runc/moby", id: {SandboxID:f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 ContainerID:f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6}, opts: {Exact:true SkipCheck:true TryLock:false RootContainer:false}
I1127 12:59:00.462238 14184 main.go:224] Exiting with status: 0
I1127 12:59:00.692088 14207 main.go:189] ***************************
I1127 12:59:00.692127 14207 main.go:190] Args: [/usr/local/bin/runsc --debug --debug-log=/tmp/runsc/ --strace --log-packets --root /var/run/docker/runtime-runc/moby --log /run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/log.json --log-format json delete f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6]
I1127 12:59:00.692136 14207 main.go:191] Version release-20231113.0
I1127 12:59:00.692140 14207 main.go:192] GOOS: linux
I1127 12:59:00.692144 14207 main.go:193] GOARCH: amd64
I1127 12:59:00.692148 14207 main.go:194] PID: 14207
I1127 12:59:00.692152 14207 main.go:195] UID: 0, GID: 0
I1127 12:59:00.692156 14207 main.go:196] Configuration:
I1127 12:59:00.692160 14207 main.go:197] RootDir: /var/run/docker/runtime-runc/moby
I1127 12:59:00.692164 14207 main.go:198] Platform: systrap
I1127 12:59:00.692168 14207 main.go:199] FileAccess: exclusive
I1127 12:59:00.692173 14207 main.go:200] Directfs: true
I1127 12:59:00.692177 14207 main.go:201] Overlay: root:self
I1127 12:59:00.692182 14207 main.go:202] Network: sandbox, logging: true
I1127 12:59:00.692187 14207 main.go:203] Strace: true, max size: 1024, syscalls:
I1127 12:59:00.692192 14207 main.go:204] IOURING: false
I1127 12:59:00.692195 14207 main.go:205] Debug: true
I1127 12:59:00.692202 14207 main.go:206] Systemd: false
I1127 12:59:00.692205 14207 main.go:207] ***************************
D1127 12:59:00.692217 14207 state_file.go:78] Load container, rootDir: "/var/run/docker/runtime-runc/moby", id: {SandboxID: ContainerID:f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6}, opts: {Exact:false SkipCheck:false TryLock:false RootContainer:false}
D1127 12:59:00.693088 14207 container.go:673] Signal container, cid: f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6, signal: signal 0 (0)
W1127 12:59:00.693098 14207 state_file.go:124] Cannot signal container f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 for sandbox f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6 (err: sandbox is not running); assuming container is in stopped state
D1127 12:59:00.693103 14207 container.go:790] Destroy container, cid: f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6
D1127 12:59:00.693111 14207 container.go:1087] Destroying container, cid: f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6
D1127 12:59:00.693114 14207 sandbox.go:1437] Destroying root container by destroying sandbox, cid: f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6
D1127 12:59:00.693119 14207 sandbox.go:1186] Destroying sandbox "f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693128 14207 sandbox.go:1195] Killing sandbox "f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693141 14207 container.go:1101] Killing gofer for container, cid: f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6, PID: 14136
W1127 12:59:00.693146 14207 container.go:1104] Error sending signal 9 to gofer 14136: no such process
D1127 12:59:00.693151 14207 cgroup.go:549] Deleting cgroup "/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693170 14207 cgroup.go:557] Removing cgroup controller for key="blkio" path="/sys/fs/cgroup/blkio/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693184 14207 cgroup.go:557] Removing cgroup controller for key="net_cls" path="/sys/fs/cgroup/net_cls/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693189 14207 cgroup.go:557] Removing cgroup controller for key="perf_event" path="/sys/fs/cgroup/perf_event/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693196 14207 cgroup.go:557] Removing cgroup controller for key="cpuset" path="/sys/fs/cgroup/cpuset/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693213 14207 cgroup.go:557] Removing cgroup controller for key="pids" path="/sys/fs/cgroup/pids/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693219 14207 cgroup.go:557] Removing cgroup controller for key="rdma" path="/sys/fs/cgroup/rdma/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693223 14207 cgroup.go:557] Removing cgroup controller for key="systemd" path="/sys/fs/cgroup/systemd/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693228 14207 cgroup.go:557] Removing cgroup controller for key="hugetlb" path="/sys/fs/cgroup/hugetlb/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693233 14207 cgroup.go:557] Removing cgroup controller for key="memory" path="/sys/fs/cgroup/memory/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693240 14207 cgroup.go:557] Removing cgroup controller for key="net_prio" path="/sys/fs/cgroup/net_prio/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693244 14207 cgroup.go:557] Removing cgroup controller for key="cpuacct" path="/sys/fs/cgroup/cpuacct/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693248 14207 cgroup.go:557] Removing cgroup controller for key="freezer" path="/sys/fs/cgroup/freezer/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693253 14207 cgroup.go:557] Removing cgroup controller for key="cpu" path="/sys/fs/cgroup/cpu/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
D1127 12:59:00.693267 14207 cgroup.go:557] Removing cgroup controller for key="devices" path="/sys/fs/cgroup/devices/docker/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6"
I1127 12:59:00.693710 14207 main.go:224] Exiting with status: 0
I1127 12:59:00.744109 14220 main.go:189] ***************************
I1127 12:59:00.744141 14220 main.go:190] Args: [/usr/local/bin/runsc --debug --debug-log=/tmp/runsc/ --strace --log-packets --root /var/run/docker/runtime-runc/moby --log /run/containerd/io.containerd.runtime.v2.task/moby/f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6/log.json --log-format json delete --force f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6]
I1127 12:59:00.744152 14220 main.go:191] Version release-20231113.0
I1127 12:59:00.744156 14220 main.go:192] GOOS: linux
I1127 12:59:00.744159 14220 main.go:193] GOARCH: amd64
I1127 12:59:00.744163 14220 main.go:194] PID: 14220
I1127 12:59:00.744167 14220 main.go:195] UID: 0, GID: 0
I1127 12:59:00.744170 14220 main.go:196] Configuration:
I1127 12:59:00.744174 14220 main.go:197] RootDir: /var/run/docker/runtime-runc/moby
I1127 12:59:00.744178 14220 main.go:198] Platform: systrap
I1127 12:59:00.744181 14220 main.go:199] FileAccess: exclusive
I1127 12:59:00.744186 14220 main.go:200] Directfs: true
I1127 12:59:00.744189 14220 main.go:201] Overlay: root:self
I1127 12:59:00.744194 14220 main.go:202] Network: sandbox, logging: true
I1127 12:59:00.744198 14220 main.go:203] Strace: true, max size: 1024, syscalls:
I1127 12:59:00.744202 14220 main.go:204] IOURING: false
I1127 12:59:00.744206 14220 main.go:205] Debug: true
I1127 12:59:00.744209 14220 main.go:206] Systemd: false
I1127 12:59:00.744216 14220 main.go:207] ***************************
D1127 12:59:00.744226 14220 state_file.go:78] Load container, rootDir: "/var/run/docker/runtime-runc/moby", id: {SandboxID: ContainerID:f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6}, opts: {Exact:false SkipCheck:false TryLock:false RootContainer:false}
W1127 12:59:00.744274 14220 delete.go:75] couldn't find container "f752f1cdc8c4dd00aefcbc55843da0adeacb13c07589d43f5c892b3a314cbed6": file does not exist
I1127 12:59:00.744281 14220 main.go:224] Exiting with status: 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment