From dfb8ed7ed1b61f52d8ab70273b8d4ba42c8a0593 Mon Sep 17 00:00:00 2001 From: Bo Chen Date: Tue, 25 Aug 2020 13:53:34 -0700 Subject: [PATCH] clh: Disable the 'seccomp' option temporarily We kept observing instabilities from CLH CI jobs periodically. To separate the random failures caused by `seccomp` from other failures, this patch disables the 'seccomp' option from clh in kata for now. We will bring this option back after completing the 'seccomp' filter lists based on Kata's CI workload. Fixes: #2899 Signed-off-by: Bo Chen --- virtcontainers/clh.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/virtcontainers/clh.go b/virtcontainers/clh.go index 7319449e76..a71865a7a9 100644 --- a/virtcontainers/clh.go +++ b/virtcontainers/clh.go @@ -955,6 +955,12 @@ func (clh *cloudHypervisor) LaunchClh() (string, int, error) { args = append(args, "-vv") } + // Disable the 'seccomp' option in clh for now. + // In this way, we can separate the periodic failures caused + // by incomplete `seccomp` filters from other failures. + // We will bring it back after completing the `seccomp` filter. + args = append(args, "--seccomp", "false") + clh.Logger().WithField("path", clhPath).Info() clh.Logger().WithField("args", strings.Join(args, " ")).Info()