I1108 16:14:55.291943 5452 main.go:188] *************************** I1108 16:14:55.292234 5452 main.go:189] Args: [/usr/local/bin/runsc --platform=kvm --network=host --debug-log=/tmp/runsc/ --debug --strace --root /var/run/docker/runtime-runc/moby --log /run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/log.json --log-format json --systemd-cgroup create --bundle /run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9 --pid-file /run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/init.pid 5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9] I1108 16:14:55.292354 5452 main.go:190] Version release-20231030.0 I1108 16:14:55.292400 5452 main.go:191] GOOS: linux I1108 16:14:55.292445 5452 main.go:192] GOARCH: arm64 I1108 16:14:55.292493 5452 main.go:193] PID: 5452 I1108 16:14:55.292543 5452 main.go:194] UID: 0, GID: 0 I1108 16:14:55.292589 5452 main.go:195] Configuration: I1108 16:14:55.292635 5452 main.go:196] RootDir: /var/run/docker/runtime-runc/moby I1108 16:14:55.292682 5452 main.go:197] Platform: kvm I1108 16:14:55.292733 5452 main.go:198] FileAccess: exclusive I1108 16:14:55.292789 5452 main.go:199] Directfs: true I1108 16:14:55.292837 5452 main.go:200] Overlay: root:self I1108 16:14:55.292890 5452 main.go:201] Network: host, logging: false I1108 16:14:55.292946 5452 main.go:202] Strace: true, max size: 1024, syscalls: I1108 16:14:55.292993 5452 main.go:203] IOURING: false I1108 16:14:55.293039 5452 main.go:204] Debug: true I1108 16:14:55.293108 5452 main.go:205] Systemd: true I1108 16:14:55.293161 5452 main.go:206] *************************** W1108 16:14:55.299557 5452 specutils.go:124] noNewPrivileges ignored. PR_SET_NO_NEW_PRIVS is assumed to always be set. D1108 16:14:55.300958 5452 specutils.go:86] Spec: { "ociVersion": "1.1.0-rc.2", "process": { "user": { "uid": 0, "gid": 0, "additionalGids": [ 0, 0, 1, 2, 3, 4, 6, 10, 11, 20, 26, 27 ] }, "args": [ "sh", "-c", "while true; do echo running; sleep 1; done" ], "env": [ "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "HOSTNAME=5407301c5d42" ], "cwd": "/", "oomScoreAdj": 0 }, "root": { "path": "/var/lib/docker/overlay2/e51c6d08833ca1ef08a7bcd94aa70dec5b5c24bb6d545627be5b8f869fe39364/merged" }, "hostname": "5407301c5d42", "mounts": [ { "destination": "/proc", "type": "proc", "source": "/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/proc", "options": [ "nosuid", "noexec", "nodev" ] }, { "destination": "/dev", "type": "tmpfs", "source": "/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/tmpfs", "options": [ "nosuid", "strictatime", "mode=755", "size=65536k" ] }, { "destination": "/dev/pts", "type": "devpts", "source": "/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/devpts", "options": [ "nosuid", "noexec", "newinstance", "ptmxmode=0666", "mode=0620", "gid=5" ] }, { "destination": "/sys", "type": "sysfs", "source": "/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/sysfs", "options": [ "nosuid", "noexec", "nodev", "ro" ] }, { "destination": "/sys/fs/cgroup", "type": "cgroup", "source": "/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/cgroup", "options": [ "ro", "nosuid", "noexec", "nodev" ] }, { "destination": "/dev/mqueue", "type": "mqueue", "source": "/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/mqueue", "options": [ "nosuid", "noexec", "nodev" ] }, { "destination": "/dev/shm", "type": "tmpfs", "source": "/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/shm", "options": [ "nosuid", "noexec", "nodev", "mode=1777", "size=67108864" ] }, { "destination": "/etc/resolv.conf", "type": "bind", "source": "/var/lib/docker/containers/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/resolv.conf", "options": [ "rbind", "rprivate" ] }, { "destination": "/etc/hostname", "type": "bind", "source": "/var/lib/docker/containers/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/hostname", "options": [ "rbind", "rprivate" ] }, { "destination": "/etc/hosts", "type": "bind", "source": "/var/lib/docker/containers/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/hosts", "options": [ "rbind", "rprivate" ] } ], "hooks": { "prestart": [ { "path": "/proc/5256/exe", "args": [ "libnetwork-setkey", "-exec-root=/var/run/docker", "5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9", "3ad6c1b809f3" ] } ] }, "linux": { "sysctl": { "net.ipv4.ip_unprivileged_port_start": "0", "net.ipv4.ping_group_range": "0 2147483647" }, "resources": { "blockIO": {} }, "cgroupsPath": "system.slice:docker:5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9", "namespaces": [ { "type": "mount" }, { "type": "network" }, { "type": "uts" }, { "type": "pid" }, { "type": "ipc" }, { "type": "cgroup" } ] } } D1108 16:14:55.301215 5452 container.go:196] Create container, cid: 5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9, rootDir: "/var/run/docker/runtime-runc/moby" D1108 16:14:55.301664 5452 container.go:258] Creating new sandbox for container, cid: 5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9 D1108 16:14:55.313647 5452 cgroup.go:410] New cgroup for pid: self, *cgroup.cgroupSystemd: &{cgroupV2:{Mountpoint:/sys/fs/cgroup Path:/system.slice/docker-5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9.scope Controllers:[cpuset cpu io memory pids] Own:[]} Name:5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9 Parent:system.slice ScopePrefix:docker properties:[] dbusConn:0x4000414280} D1108 16:14:55.313936 5452 systemd.go:98] Installing systemd cgroup resource controller under system.slice D1108 16:14:55.314523 5452 container.go:1002] Created filestore file at "/var/lib/docker/overlay2/e51c6d08833ca1ef08a7bcd94aa70dec5b5c24bb6d545627be5b8f869fe39364/merged/.gvisor.filestore.5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9" for mount source "/var/lib/docker/overlay2/e51c6d08833ca1ef08a7bcd94aa70dec5b5c24bb6d545627be5b8f869fe39364/merged" D1108 16:14:55.314725 5452 systemd.go:154] Joining systemd cgroup docker-5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9.scope D1108 16:14:55.346328 5452 donation.go:31] Donating FD 3: "/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/log.json" D1108 16:14:55.346491 5452 donation.go:31] Donating FD 4: "/tmp/runsc/runsc.log.20231108-161455.345119.gofer.txt" D1108 16:14:55.346584 5452 donation.go:31] Donating FD 5: "/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/config.json" D1108 16:14:55.346633 5452 donation.go:31] Donating FD 6: "|1" D1108 16:14:55.346670 5452 donation.go:31] Donating FD 7: "gofer IO FD" D1108 16:14:55.346708 5452 donation.go:31] Donating FD 8: "gofer IO FD" D1108 16:14:55.346752 5452 donation.go:31] Donating FD 9: "gofer IO FD" D1108 16:14:55.346789 5452 donation.go:31] Donating FD 10: "gofer IO FD" D1108 16:14:55.346827 5452 container.go:1259] Starting gofer: /proc/self/exe [runsc-gofer --root=/var/run/docker/runtime-runc/moby --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/log.json --debug-log=/tmp/runsc/ --network=host --platform=kvm --strace=true --systemd-cgroup=true --log-format=json --log-fd=3 --debug-log-fd=4 gofer --bundle /run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9 --gofer-mount-confs=2,0,0,0 --spec-fd=5 --mounts-fd=6 --io-fds=7 --io-fds=8 --io-fds=9 --io-fds=10] I1108 16:14:55.351316 5452 container.go:1263] Gofer started, PID: 5459 D1108 16:14:55.352514 5452 sandbox.go:83] Attempting to create socket file "/var/run/docker/runtime-runc/moby/runsc-5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9.sock" D1108 16:14:55.352984 5452 sandbox.go:86] Using socket file "/var/run/docker/runtime-runc/moby/runsc-5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9.sock" I1108 16:14:55.353057 5452 sandbox.go:773] Control socket path: "/var/run/docker/runtime-runc/moby/runsc-5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9.sock" I1108 16:14:55.353317 5452 sandbox.go:808] Sandbox will be started in new mount, IPC and UTS namespaces I1108 16:14:55.353382 5452 sandbox.go:820] Sandbox will be started in a new PID namespace I1108 16:14:55.353445 5452 sandbox.go:829] Sandbox will be started in the container's network namespace: {Type:network Path:} I1108 16:14:55.353567 5452 sandbox.go:869] Sandbox will be started in the current user namespace I1108 16:14:55.353956 5452 sandbox.go:881] Sandbox will be started in minimal chroot D1108 16:14:55.354054 5452 sandbox.go:1480] Changing "/dev/stdin" ownership to 0/0 D1108 16:14:55.354161 5452 sandbox.go:1480] Changing "/dev/stdout" ownership to 0/0 D1108 16:14:55.354221 5452 sandbox.go:1480] Changing "/dev/stderr" ownership to 0/0 D1108 16:14:55.354866 5452 donation.go:31] Donating FD 3: "/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/log.json" D1108 16:14:55.354971 5452 donation.go:31] Donating FD 4: "/tmp/runsc/runsc.log.20231108-161455.351768.boot.txt" D1108 16:14:55.355019 5452 donation.go:31] Donating FD 5: "sandbox IO FD" D1108 16:14:55.355060 5452 donation.go:31] Donating FD 6: "sandbox IO FD" D1108 16:14:55.355186 5452 donation.go:31] Donating FD 7: "sandbox IO FD" D1108 16:14:55.355235 5452 donation.go:31] Donating FD 8: "sandbox IO FD" D1108 16:14:55.355276 5452 donation.go:31] Donating FD 9: "/var/lib/docker/overlay2/e51c6d08833ca1ef08a7bcd94aa70dec5b5c24bb6d545627be5b8f869fe39364/merged/.gvisor.filestore.5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9" D1108 16:14:55.355394 5452 donation.go:31] Donating FD 10: "|0" D1108 16:14:55.355449 5452 donation.go:31] Donating FD 11: "|1" D1108 16:14:55.355488 5452 donation.go:31] Donating FD 12: "control_server_socket" D1108 16:14:55.355529 5452 donation.go:31] Donating FD 13: "/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/config.json" D1108 16:14:55.355580 5452 donation.go:31] Donating FD 14: "/dev/kvm" D1108 16:14:55.355620 5452 donation.go:31] Donating FD 15: "/dev/stdin" D1108 16:14:55.355660 5452 donation.go:31] Donating FD 16: "/dev/stdout" D1108 16:14:55.355758 5452 donation.go:31] Donating FD 17: "/dev/stderr" D1108 16:14:55.355801 5452 sandbox.go:1066] Starting sandbox: /proc/self/exe [runsc-sandbox --network=host --platform=kvm --systemd-cgroup=true --debug-log=/tmp/runsc/ --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9/log.json --log-format=json --strace=true --root=/var/run/docker/runtime-runc/moby --log-fd=3 --debug-log-fd=4 boot --bundle=/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9 --gofer-mount-confs=2,0,0,0 --pidns=true --apply-caps=true --setup-root --total-host-memory 954658816 --cpu-num 4 --total-memory 954658816 --io-fds=5 --io-fds=6 --io-fds=7 --io-fds=8 --gofer-filestore-fds=9 --mounts-fd=10 --start-sync-fd=11 --controller-fd=12 --spec-fd=13 --device-fd=14 --stdio-fds=15 --stdio-fds=16 --stdio-fds=17 5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9] D1108 16:14:55.355925 5452 sandbox.go:1067] SysProcAttr: &{Chroot: Credential: Ptrace:false Setsid:true Setpgid:false Setctty:false Noctty:false Ctty:0 Foreground:false Pgid:0 Pdeathsig:signal 0 Cloneflags:0 Unshareflags:0 UidMappings:[] GidMappings:[] GidMappingsEnableSetgroups:false AmbientCaps:[] UseCgroupFD:false CgroupFD:0} I1108 16:14:55.360451 5452 sandbox.go:1095] Sandbox started, PID: 5464 D1108 16:14:55.538517 5452 cgroup_v2.go:174] Deleting cgroup "/sys/fs/cgroup/system.slice/docker-5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9.scope" D1108 16:14:55.538693 5452 container.go:1040] Save container, cid: 5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9 D1108 16:14:55.540998 5452 hook.go:63] Executing hook {Path:/proc/5256/exe Args:[libnetwork-setkey -exec-root=/var/run/docker 5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9 3ad6c1b809f3] Env:[] Timeout:}, state: {Version:1.1.0-rc.1 ID:5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9 Status:created Pid:5464 Bundle:/run/containerd/io.containerd.runtime.v2.task/moby/5407301c5d42294275b4067c993e708de4b03bee36a55ffb721a6faa90d4fde9 Annotations:map[]} D1108 16:14:55.844446 5452 hook.go:118] Execute hook "/proc/5256/exe" success! I1108 16:14:55.844801 5452 main.go:223] Exiting with status: 0