Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error creating mount with source ".../hostname": broken pipe: unknown. #1765

Open
fvoznika opened this issue Feb 5, 2020 · 0 comments
Open
Labels
area: container runtime Issue related to docker, kubernetes, OCI runtime area: integration Issue related to third party integrations type: bug Something isn't working

Comments

@fvoznika
Copy link
Member

fvoznika commented Feb 5, 2020

This error can happen running any image with kernel between 5.1 and 5.3.15, 5.4.2, or 5.5. This happens because root runs with more strict RLIMIT_MEMLOCK limit. Go 1.14 attempts to mlock thread stacks to workaround a Linux kernel bug, trips over the limit, and dies. You'll find messages like these in the gofer log:

runtime: mlock of signal stack failed: 12
runtime: increase the mlock limit (ulimit -l) or
runtime: update your kernel to 5.3.15+, 5.4.2+, or 5.5+
fatal error: mlock failed

To workaround it, add the following line to the [Service] section in /lib/systemd/system/containerd.service:

LimitMEMLOCK=infinity

Then run: systemctl daemon-reload && systemctl restart containerd

@fvoznika fvoznika added area: container runtime Issue related to docker, kubernetes, OCI runtime type: bug Something isn't working labels Feb 5, 2020
ianlewis added a commit to google/gvisor-website that referenced this issue Mar 12, 2020
ianlewis added a commit to google/gvisor-website that referenced this issue Mar 15, 2020
copybara-service bot pushed a commit that referenced this issue Apr 8, 2020
copybara-service bot pushed a commit that referenced this issue Apr 8, 2020
@ianlewis ianlewis added the area: integration Issue related to third party integrations label Aug 14, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area: container runtime Issue related to docker, kubernetes, OCI runtime area: integration Issue related to third party integrations type: bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants