6

Why can I only install libpaper1 on CircleCI after upgrading to "remote Docker" version 20.10.7?

If you look at the two most recent commits, the second-to-last fails to build. But the final one builds, and the only difference is that the Docker version has been upgraded.

The error on the second-to-last commit is:

Creating config file /etc/papersize with new version
stat: cannot statx '/etc/papersize.dpkg-inst': Operation not permitted
dpkg: error processing package libpaper1:amd64 (--configure):
 installed libpaper1:amd64 package post-installation script subprocess returned error exit status 1

Why is version 17.0.9 the default if it is less capable than version 20.10.7?

Janus Troelsen
  • 20,267
  • 14
  • 135
  • 196
  • Note that it may just be *changing* the engine version that invalidates a cache and makes the build succeed. Would need to understand how Docker versions interact with cache validation... – Janus Troelsen Mar 24 '22 at 20:40

1 Answers1

2

The error comes from statx not from libepaper1. statx wasn't included in the default seccomp whitelist used by Docker before version 18.04.0, as we can see in the Docker Engine 18.04 release notes page.

Whitelist statx syscall. moby/moby#36417

Thats why upgrading docker is the solution.

Sources:

Mickael Rahmine
  • 372
  • 1
  • 7