From 68b1971fee85ae2ea6d68ce3e180595f63d75990 Mon Sep 17 00:00:00 2001 From: Saikrishna Arcot Date: Thu, 26 Oct 2023 14:17:13 -0700 Subject: [PATCH] Add note about minimum Docker version due to clone3 syscall usage Add a note saying if running on a recent kernel, then Docker 20.10.10 or newer needs to be used. This is because in Bookworm, glibc will use the `clone3` syscall, which is not properly handled by Docker's seccomp filter in versions older than 20.10.10. Signed-off-by: Saikrishna Arcot --- README.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/README.md b/README.md index fe0eb9d2fb91..534540e3edf7 100644 --- a/README.md +++ b/README.md @@ -131,6 +131,7 @@ pip3 install --user j2cli system to allow running the 'docker' command without 'sudo': * Add current user to the docker group: `sudo gpasswd -a ${USER} docker` * Log out and log back in so that your group membership is re-evaluated + * If you are using Linux kernel 5.3 or newer, then you must use Docker 20.10.10 or newer. This is because older Docker versions did not allow the `clone3` syscall, which is now used in Bookworm. > Note: If a previous installation of Docker using snap was present on the > system, remove it and also remove docker from snap before reinstallating docker. @@ -187,9 +188,6 @@ The supported ASIC vendors are: ## Usage for ARM Architecture -ARM build has dependency in docker version 18. -If docker version is 19, downgrade to 18 with: - ```shell sudo apt-get install --allow-downgrades -y docker-ce=5:18.09.0~3-0~ubuntu-xenial sudo apt-get install --allow-downgrades -y docker-ce-cli=5:18.09.0~3-0~ubuntu-xenial