Uploaded image for project: 'Cloud Infrastructure Security & Compliance'
  1. Cloud Infrastructure Security & Compliance
  2. CMP-4070

The spod pods failed to run on a 4.12 cluster due to "runtime/cgo: pthread_create failed: Operation not permitted" issue

XMLWordPrintable

    • True
    • Hide

      operator installation failed on 4.12

      Show
      operator installation failed on 4.12
    • False
    • CMP Sprint 110, CMP Sprint 111
    • Important

      Description of problem:

      Security Profiles Operatorv0.10.0 installation failed on a 4.12 cluster. The spod pods failed to start due to "runtime/cgo: pthread_create failed: Operation not permitted" issue.
      $ oc get pod
      NAME                                                  READY   STATUS             RESTARTS      AGE
      security-profiles-operator-678c94bc97-fxqch           1/1     Running            0             32s
      security-profiles-operator-678c94bc97-j7bvb           1/1     Running            0             93s
      security-profiles-operator-678c94bc97-vbbnk           1/1     Running            0             2m13s
      security-profiles-operator-webhook-5c9d44d744-9v69n   1/1     Running            0             2m3s
      security-profiles-operator-webhook-5c9d44d744-g6hb7   1/1     Running            0             93s
      security-profiles-operator-webhook-5c9d44d744-l5hk9   1/1     Running            0             2m3s
      spod-8wshb                                            1/2     CrashLoopBackOff   3 (27s ago)   2m2s
      spod-9jmbz                                            1/2     CrashLoopBackOff   3 (18s ago)   2m2s
      spod-bjlvf                                            1/2     Error              3 (35s ago)   2m2s
      spod-mtd22                                            1/2     CrashLoopBackOff   3 (28s ago)   2m2s
      spod-vm9tx                                            1/2     Error              3 (36s ago)   2m2s
      spod-w95pr                                            1/2     CrashLoopBackOff   3 (4s ago)    2m2s
      $ oc logs pod/spod-8wshb -c security-profiles-operator
      runtime/cgo: pthread_create failed: Operation not permitted
      SIGABRT: abort
      PC=0x7f70383b394c m=0 sigcode=18446744073709551610
      
      goroutine 0 gp=0x6ef7ca0 m=0 mp=0x6ef9bc0 [idle]:
      runtime: g 0 gp=0x6ef7ca0: unknown pc 0x7f70383b394c
      stack: frame={sp:0x7fff0553de60, fp:0x0} stack=[0x7fff04d3f000,0x7fff0553e3c0)
      0x00007fff0553dd60:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dd70:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dd80:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dd90:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dda0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553ddb0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553ddc0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553ddd0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dde0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553ddf0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de00:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de10:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de20:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de30:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de40:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de50:  0x0000000000000000  0x00007f70383b393e 
      0x00007fff0553de60: <0x0000000000000000  0x0000000000000000 
      0x00007fff0553de70:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de80:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de90:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dea0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553deb0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dec0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553ded0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dee0:  0x0000000000000000  0x7fb7d36c51121300 
      0x00007fff0553def0:  0x00007f7038323740  0x0000000000000006 
      0x00007fff0553df00:  0x0000000006ffb2a0  0x00007fff0553e230 
      0x00007fff0553df10:  0x0000000006ef7ca0  0x00007f7038366646 
      0x00007fff0553df20:  0x00007f7038523e90  0x00007f70383507f3 
      0x00007fff0553df30:  0x0000000000000020  0x0000000000000000 
      0x00007fff0553df40:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553df50:  0x0000000000000000  0x0000000000000000 
      runtime: g 0 gp=0x6ef7ca0: unknown pc 0x7f70383b394c
      stack: frame={sp:0x7fff0553de60, fp:0x0} stack=[0x7fff04d3f000,0x7fff0553e3c0)
      0x00007fff0553dd60:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dd70:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dd80:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dd90:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dda0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553ddb0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553ddc0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553ddd0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dde0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553ddf0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de00:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de10:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de20:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de30:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de40:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de50:  0x0000000000000000  0x00007f70383b393e 
      0x00007fff0553de60: <0x0000000000000000  0x0000000000000000 
      0x00007fff0553de70:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de80:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553de90:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dea0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553deb0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dec0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553ded0:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553dee0:  0x0000000000000000  0x7fb7d36c51121300 
      0x00007fff0553def0:  0x00007f7038323740  0x0000000000000006 
      0x00007fff0553df00:  0x0000000006ffb2a0  0x00007fff0553e230 
      0x00007fff0553df10:  0x0000000006ef7ca0  0x00007f7038366646 
      0x00007fff0553df20:  0x00007f7038523e90  0x00007f70383507f3 
      0x00007fff0553df30:  0x0000000000000020  0x0000000000000000 
      0x00007fff0553df40:  0x0000000000000000  0x0000000000000000 
      0x00007fff0553df50:  0x0000000000000000  0x0000000000000000 
      
      goroutine 1 gp=0xc000002380 m=0 mp=0x6ef9bc0 [running]:
      runtime.systemstack_switch()
       runtime/asm_amd64.s:479 +0x8 fp=0xc0000a0750 sp=0xc0000a0740 pc=0x484ce8
      runtime.main()
       runtime/proc.go:172 +0x67 fp=0xc0000a07e0 sp=0xc0000a0750 pc=0x449127
      runtime.goexit({})
       runtime/asm_amd64.s:1700 +0x1 fp=0xc0000a07e8 sp=0xc0000a07e0 pc=0x486d01
      
      rax    0x0
      rbx    0x7f7038323740
      rcx    0x7f70383b394c
      rdx    0x6
      rdi    0x1
      rsi    0x1
      rbp    0x1
      rsp    0x7fff0553de60
      r8     0x7fff0553df30
      r9     0x7f70384d94e0
      r10    0x8
      r11    0x246
      r12    0x6
      r13    0x7fff0553e230
      r14    0x6ef7ca0
      r15    0xc000002c40
      rip    0x7f70383b394c
      rflags 0x246
      cs     0x33
      fs     0x0
      gs     0x0
      

       

      Version-Release number of selected component (if applicable):
         4.12

      How reproducible:
         Always

      Steps to Reproduce:
         1. Install SPOv0.10.0 with index image quay.io/redhat-user-workloads/ocp-isc-tenant/security-profiles-operator-fbc-4-12@sha256:8c411ae336e45f654e70b45b25035b2fb5ff6ce15ebbed15ca143fddb550a3e1
         
      Actual results:
      The spod pods failed to run due to "runtime/cgo: pthread_create failed: Operation not permitted" issue

      Expected results:
      The security profiles operator should be installed successfully without any errors.

       

              wenshen@redhat.com Vincent Shen
              xiyuan@redhat.com Xiaojie Yuan
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: