Error to call "docker" command in a snap

[Peng Liu]

Hi Seth,

Yes, thanks for your reminder. I found a kernel panic! The logs are below:

============================================================

[ 3629.333366] audit: type=1400 audit(1486525969.972:2717):
apparmor="ALLOWED" operation="create"
profile="snap.paradrop-daemon.paradrop//null-/usr/bin/snap" pid=2475
comm="docker" family="inet6" sock_type="stream" protocol=6
requested_mask="create" denied_mask="create"

[ 3629.712878] BUG: unable to handle kernel paging request at
fffffffffffffff3

[ 3629.796735] IP: [<ffffffff813ffce0>] strlen+0x0/0x20

[ 3629.856430] *PGD 1e0d067 PUD 1e0f067 PMD 0 *

[ 3629.906140] Oops*: 0000 [#4] SMP *

[ 3629.945243] Modules linked in*: xt_nat xt_tcpudp veth xt_comment
ipt_MASQUERADE nf_nat_masquerade_ipv4 iptable_nat nf_conntrack_ipv4
nf_defrag_ipv4 nf_nat_ipv4 xt_addrtype xt_conntrack nf_nat nf_conntrack
br_netfilter bridge stp llc overlay aufs arc4 ath10k_pci ath9k ath10k_core
ath9k_common ath9k_hw ath mac80211 kvm_amd kvm uas irqbypass cfg80211
k10temp sp5100_tco r8169 i2c_piix4 mii shpchp mac_hid iptable_filter
ip_tables ip6table_filter ip6_tables x_tables autofs4 mmc_block sdhci_acpi
sdhci_pci sdhci virtio_scsi nls_iso8859_1 usb_storage ahci libahci*

[ 3630.543640] CPU*: 0 PID: 2479 Comm: snap-confine Tainted: G      D
  4.4.0-59-generic #80-Ubuntu*

[ 3630.654077] Hardware name*: PC Engines APU/APU, BIOS 4.0 09/08/2014*

[ 3630.728123] task*: ffff88007a338000 ti: ffff88007a388000 task.ti:
ffff88007a388000*

[ 3630.817768] RIP*: 0010:[<ffffffff813ffce0>]  [<ffffffff813ffce0>]
strlen+0x0/0x20*

[ 3630.906581] RSP*: 0018:ffff88007a38ba20  EFLAGS: 00010246*

[ 3630.970226] RAX*: ffff88007a38bb20 RBX: fffffffffffffff3 RCX:
0000000000000000*

[ 3631.055710] RDX*: 0000000000000151 RSI: fffffffffffffff3 RDI:
fffffffffffffff3*

[ 3631.141195] RBP*: ffff88007a38ba38 R08: ffff880060a4c93b R09:
ffff88007a38ba94*

[ 3631.226679] R10*: 000000000000000e R11: ffff880060a4c934 R12:
ffff88007a701240*

[ 3631.312163] R13*: ffff88007a338000 R14: ffffffff8139b3d0 R15:
00000000fffffff3*

[ 3631.397650] FS*:  00007f0e8d98b740(0000) GS:ffff88007de00000(0000)
knlGS:0000000000000000*

[ 3631.494574] CS*:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033*

[ 3631.563417] CR2*: fffffffffffffff3 CR3: 000000006719a000 CR4:
00000000000006f0*

[ 3631.648901] *Stack:*

[ 3631.673030] * ffffffff8112333a ffff88007a701240 ffff88007a38bb00
ffff88007a38ba60*

[ 3631.762464] * ffffffff8139b438 ffff88007a701240 ffff88007a38bb00
ffff88007a338000*

[ 3631.851901] * ffff88007a38bad8 ffffffff81370498 ffffffff81229680
ffff88007a38baf0*

[ 3631.941337] *Call Trace:*

[ 3631.970675] * [<ffffffff8112333a>] ? audit_log_untrustedstring+0x1a/0x30*

[ 3632.049919] * [<ffffffff8139b438>] audit_cb+0x68/0x3f0*

[ 3632.110444] * [<ffffffff81370498>] common_lsm_audit+0x1b8/0x740*

[ 3632.180330] * [<ffffffff81229680>] ? alloc_inode+0x50/0x90*

[ 3632.245011] * [<ffffffff81227676>] ? prepend_path+0xc6/0x2a0*

[ 3632.311779] * [<ffffffff81382a2f>] aa_audit+0x5f/0x170*

[ 3632.372300] * [<ffffffff8139b3c2>] audit_mount+0x152/0x160*

[ 3632.436988] * [<ffffffff8139ba8d>] match_mnt_path_str+0x1dd/0x490*

[ 3632.508951] * [<ffffffff81228978>] ? dentry_path+0x18/0x70*

[ 3632.573638] * [<ffffffff8139be1a>] match_mnt+0xda/0x150*

[ 3632.635203] * [<ffffffff8139c690>] aa_bind_mount+0x100/0x180*

[ 3632.701969] * [<ffffffff813917f0>] wrap_apparmor_sb_mount+0x1c0/0x270*

[ 3632.778095] * [<ffffffff813471c7>] security_sb_mount+0x57/0x80*

[ 3632.846939] * [<ffffffff8123148b>] do_mount+0xab/0xda0*

[ 3632.907468] * [<ffffffff811f0af4>] ? __kmalloc_track_caller+0x1b4/0x250*

[ 3632.985668] * [<ffffffff810efa71>] ? hrtimer_try_to_cancel+0xd1/0x130*

[ 3633.061798] * [<ffffffff811ad9d2>] ? memdup_user+0x42/0x70*

[ 3633.126479] * [<ffffffff812324bf>] SyS_mount+0x9f/0x100*

[ 3633.188050] * [<ffffffff818384f2>] entry_SYSCALL_64_fastpath+0x16/0x71*

[ 3633.265205] Code*: 89 f8 48 89 e5 f6 82 e0 0d a5 81 20 74 10 48 83 c0 01
0f b6 10 f6 82 e0 0d a5 81 20 75 f0 5d c3 90 66 2e 0f 1f 84 00 00 00 00 00
<80> 3f 00 55 48 89 e5 74 11 48 89 f8 48 83 c0 01 80 38 00 75 f7 *

[ 3633.504601] RIP  [<ffffffff813ffce0>] strlen+0x0/0x20

[ 3633.565335] * RSP <ffff88007a38ba20>*

[ 3633.607143] CR2*: fffffffffffffff3*

[ 3633.646880] *---[ end trace 23ca1e52db270fbd ]---*
============================================================

Thanks.

Peng

On Tue, Feb 7, 2017 at 9:46 PM, Seth Arnold <seth.arnold at canonical.com>
wrote:

> On Tue, Feb 07, 2017 at 09:43:38PM -0600, Peng Liu wrote:
> > I built a snap which needs to call "docker" command instead of using
> > bindings like docker-py to get logs from a container. Unfortunately, the
> > command reported an error with messages "support process for mount
> > namespace capture exited abnormally".
>
> Are there any hints in dmesg or more detailed log files that might provide
> a direction to start looking?
>
> Thanks
>
> --
> Snapcraft mailing list
> Snapcraft at lists.snapcraft.io
> Modify settings or unsubscribe at: https://lists.ubuntu.com/
> mailman/listinfo/snapcraft
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/snapcraft/attachments/20170207/1d9547d9/attachment.html>