Skip to content

Update seccomp rules#166

Merged
amphi merged 2 commits into
cyberus-technology:gardenlinuxfrom
amphi:update-seccomp-rules
Jun 5, 2026
Merged

Update seccomp rules#166
amphi merged 2 commits into
cyberus-technology:gardenlinuxfrom
amphi:update-seccomp-rules

Conversation

@amphi
Copy link
Copy Markdown

@amphi amphi commented Jun 2, 2026

Updates the seccomp rules for the http-server and the event-monitor. Pipelines that failed because of seccomp violations are linked in the commits.

@amphi amphi requested review from Coffeeri, phip1611 and scholzp June 2, 2026 07:49
@amphi amphi self-assigned this Jun 2, 2026
Copy link
Copy Markdown
Member

@phip1611 phip1611 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Amazing, outstanding, best in class PR 🥳

I have a couple of questions:

  • did you check what causes the read() in the event monitor thread?
  • did you check if this is also broken on upstream?

@amphi
Copy link
Copy Markdown
Author

amphi commented Jun 2, 2026

I only added the seccomp rules, I did no further checks. If we want to do that we should open a ticket for it, because checking what causes the read() may take some time.

@phip1611
Copy link
Copy Markdown
Member

phip1611 commented Jun 2, 2026

because checking what causes the read() may take some time.

To clarify: My question was about a 3 minute quick search with looking at the code, not a deep investigation.

amphi added 2 commits June 5, 2026 13:40
Seccomp violation found in
https://gitlab.cyberus-technology.de/cyberus/cloud/libvirt/-/jobs/2109117

On-behalf-of: SAP sebastian.eydam@sap.com
Signed-off-by: Sebastian Eydam <sebastian.eydam@cyberus-technology.de>
Seccomp violation found in
https://gitlab.cyberus-technology.de/cyberus/cloud/libvirt/-/jobs/2109212

On-behalf-of: SAP sebastian.eydam@sap.com
Signed-off-by: Sebastian Eydam <sebastian.eydam@cyberus-technology.de>
@amphi amphi force-pushed the update-seccomp-rules branch from b4fe366 to ff6b179 Compare June 5, 2026 11:40
@amphi amphi enabled auto-merge (rebase) June 5, 2026 11:41
@amphi amphi merged commit 246bda5 into cyberus-technology:gardenlinux Jun 5, 2026
19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants