8241354: ZGC: fatal error: Failed to get NUMA id due to get_mempolicy operation not permitted(Internet mail)

[jiefu(傅杰)]

Hi Florian,

On 2020/3/21, 8:52 PM, "Florian Weimer" <fw at deneb.enyo.de> wrote:

    > A VM fatal error may be observed if ZGC is used.
    
    Is warning() printed to standard output or standard error?
It will print to the standard error.
    
    > The background is that some of our products will run in the docker.
    > For some safety reason, SYS_get_mempolicy is not allowed in the docker.
    
    Various container runtimes randomly disable system calls they deem
    unworthy.  It's a common problem for the first widespread use of any
    system call.  Some of the runtimes also do not simply return ENOSYS
    errors (which the kernel would use to indicate that the system call is
    not supported).

According to the docker docs[1], for safety reasons, the get_mempolicy is blocked by default, not randomly disabled.
And for that reason, our customers refused to support it in their runtime env.

Thanks.
Best regards,
Jie

[1] https://docs.docker.com/engine/security/seccomp/