Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add send, recv, and x32 so we can install i386 pkgs on amd64 #19432

Merged
merged 1 commit into from
Jan 19, 2016

Conversation

jessfraz
Copy link
Contributor

makes sure this works:

docker run --rm -it debian:jessie bash
# dpkg --add-architecture i386
# apt-get update && apt-get install curl:i386
# curl -sSL ifconfig.co

before patch
curl: (55) Send failure: Operation not permitted

after patch
WORKS!

Signed-off-by: Jessica Frazelle <acidburn@docker.com>
@justincormack
Copy link
Contributor

Ah send, recv: have checked the other socketcalls again, these are not present on x86_64, but they are present as socketcalls on x86, but probably werent being used in what I tested as they are legacy (at least Musl libc just uses sendto with null args for send). I can't see anything else in that situation.

Congratulations on adding x32, Linux's least useful architecture.

LGTM.

@unclejack
Copy link
Contributor

@jfrazelle Last time I've looked, we were able to cross-compile Go binaries for i386. Would you like to add an integration-cli test which tries to run a i386 binary on amd64?

@justincormack
Copy link
Contributor

@unclejack to be fair, almost all i386 binaries did run before this change, just not Debian's version of curl, so that would not have caught this. I am looking at further tests for seccomp changes for the next release. Not that having a test would do any harm.

@cpuguy83
Copy link
Member

LGTM

1 similar comment
@tiborvass
Copy link
Contributor

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants