Hello,
I and Stanislav have been setting up Travis CI for the
https://github.com/freeipa/freeipa-container
repository. We now run docker build operations for pull requests
and commits, and I've been trying to add docker run tests as well.
Example Travis build
https://travis-ci.org/adelton/freeipa-container/builds/400275700
from
https://github.com/adelton/freeipa-container/commit/16ced918f8492e583ff02...
seems to pass on CentOS and rawhide images but fails on other Fedoras.
All the failures are in the
Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
[1/28]: configuring certificate server instance
[error] RuntimeError: CA configuration failed.
step. I remember that due to the way systemd was handling KEYRING
operations, seccomp:unconfined was one of the things that has been
causing issues in our tests on Fedora hosts. Running
docker info
in Travis CI shows that it's running 17.09.0-ce and there are no
Security Options listed, unlike on my Fedora 28's
docker-1.13.1-59.gitaf6b32b.fc28.x86_64 which has
Security Options:
seccomp
Profile: /etc/docker/seccomp.json
selinux
Are there people around with Ubuntu knowledge who could check what
the docker 17.09.0-ce behaviour on that system is and if seccomp can
somehow be tweaked?
Thank you,
--
Jan Pazdziora
Senior Principal Software Engineer, Security Engineering, Red Hat