Critical Description of problem:
CRI-O applies a deafults seccomp profile that prevents containers from using the userfaultfd syscall. This in turn prevents Openshift Virtualization Virtual machines from migrating using the post-copy mode. This sudden change causes a regression for CNV users.
Version-Release number of selected component (if applicable):
How reproducible:
Migrate an Openshift Virtualization Virtual Machine while switchig to post-copy migration.
Steps to Reproduce:
1. 2. 3.
Actual results:
Migration will fail with the following error cause by the lack of access to userfaultd syscall : virError(Code=1, Domain=10, Message='internal error: unable to execute QEMU command 'migrate-set-capabilities': Postcopy is not supported')
Expected results:
Additional info:
