RFR: 8337966: (fs) Files.readAttributes fails with Operation not permitted on older docker releases
Alexey Bakhtin
abakhtin at openjdk.org
Fri Aug 30 16:44:27 UTC 2024
On Fri, 30 Aug 2024 10:48:21 GMT, Alan Bateman <alanb at openjdk.org> wrote:
>>> > I think it is some kind of regression for old Docker versions, but it could be easily fixed. I understand there is a workaround with an updated seccomp profile, but it is not easy to do in some environments.
>>>
>>> Is this not possible on the problematic system(s)?
>>
>> According to our customer, it is problematic. This is a reason for proposing a fix in OpenJDK.
>
>> According to our customer, it is problematic. This is a reason for proposing a fix in OpenJDK.
>
> @bplb and I discussed this yesterday and agreed that the proposal here isn't the right thing for main line. There will be other opinions but I think your options are:
>
> - Use a newer release of docker and/or the seccomp configuration where this is fixed. You mentioned that it was fixed in v19 which appears to have been released in 2019.
> - Request to jdk update maintainers to backout JDK-8338696 from 17u and 21u.
> - Propose the change to 17u and 21u to allow it work in seccomp config that blocks this sys call.
Hi @AlanBateman , @bplb
Thank you very much for your review and suggestions. I'll try to propose the changes to 21u and 17u
-------------
PR Comment: https://git.openjdk.org/jdk/pull/20484#issuecomment-2321939318
More information about the nio-dev
mailing list