Skip to content

Seccomp violation with glibc 2.42 #7276

@RX14

Description

@RX14

Describe the bug
cloud-hypervisor crashes during calling isatty in glibc 2.42, because glibc commit 5cf101a85aae0d703cdd8ed7b25fe288e41fdacb changed isatty to use the TCGETS2 ioctl, whereas

To Reproduce
Steps to reproduce the behaviour:
Run any cloud-hypervisor command with --console tty (the default) linked with glibc 2.42

Version

Output of cloud-hypervisor --version:

cloud-hypervisor v47.0.0

Did you build from source, if so build command line (e.g. features):

Logs

Output of cloud-hypervisor -v from either standard error or via --log-file:

cloud-hypervisor: 3.407270ms: <vmm> INFO:vmm/src/api/mod.rs:830 -- API request event: VmCreate VmConfig { cpus: CpusConfig { boot_vcpus: 1, max_vcpus: 1, topology: None, kvm_hyperv: false, max_phys_bits: 46, affinity: None, features: CpuFeatures { amx: false } }, memory: MemoryConfig { size: 536870912, mergeable: false, hotplug_method: Acpi, hotplug_size: None, hotplugged_size: None, shared: false, hugepages: false, hugepage_size: None, prefault: false, zones: None, thp: true }, payload: Some(PayloadConfig { firmware: Some("/usr/lib/rust-hypervisor-firmware/hypervisor-fw"), kernel: None, cmdline: None, initramfs: None }), rate_limit_groups: None, disks: None, net: None, rng: RngConfig { src: "/dev/urandom", iommu: false }, balloon: None, fs: None, pmem: None, serial: ConsoleConfig { file: None, mode: Null, iommu: false, socket: None }, console: ConsoleConfig { file: None, mode: Tty, iommu: false, socket: None }, debug_console: DebugConsoleConfig { file: None, mode: Off, iobase: Some(233) }, devices: None, user_devices: None, vdpa: None, vsock: None, pvpanic: false, iommu: false, sgx_epc: None, numa: None, watchdog: false, pci_segments: None, platform: None, tpm: None, preserved_fds: None, landlock_enable: false, landlock_rules: None }

==== Possible seccomp violation ====
Try running with `strace -ff` to identify the cause and open an issue: https://github.com/cloud-hypervisor/cloud-hypervisor/issues/new
[1]    90096 invalid system call  sudo /usr/bin/cloud-hypervisor --firmware  -v

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions