Uploaded image for project: 'Bitbucket Cloud'
  1. Bitbucket Cloud
  2. BCLOUD-19698

Update Docker seccomp profiles to allow "ADDR_NO_RANDOMIZE" for cargo-tarpaulin app to work with pipeline

    XMLWordPrintable

Details

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

    Description

      Currently, the "cargo-tarpaulin" app no longer works with the pipeline.

      The user suggest adding "ADDR_NO_RANDOMIZE" in Docker seccomp profiles to get it working again:

      {
  "names": [
    "personality"
  ],
  "action": "SCMP_ACT_ALLOW",
  "args": [
    {
      "index": 0,
      "value": 262144,
      "valueTwo": 0,
      "op": "SCMP_CMP_EQ"
    }
  ],
  "comment": "Enable personality(ADDR_NO_RANDOMIZE) syscall",
  "includes": {},
  "excludes": {}
}

      Please review if it's possible to allow this in our current seccomp profiles.

      Attachments

        Activity

          People

            Unassigned Unassigned
            mabdrahim Syahrul
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: