From d667171ba8a1c9b35d3edee63c51cf32d66ba337 Mon Sep 17 00:00:00 2001 From: Paco Xu Date: Fri, 26 Jun 2026 18:16:40 +0800 Subject: [PATCH] seccomp: ignore unsupported wait-kill flag probe Signed-off-by: Paco Xu (cherry picked from commit 4d84a3403b12fba631adf31896bf2cb71e0b6a6d) Signed-off-by: lifubang --- libcontainer/seccomp/patchbpf/enosys_linux.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libcontainer/seccomp/patchbpf/enosys_linux.go b/libcontainer/seccomp/patchbpf/enosys_linux.go index b9a0be8c8f8..34ecc1e2099 100644 --- a/libcontainer/seccomp/patchbpf/enosys_linux.go +++ b/libcontainer/seccomp/patchbpf/enosys_linux.go @@ -673,7 +673,7 @@ func filterFlags(config *configs.Seccomp, filter *libseccomp.ScmpFilter) (flags } } if apiLevel >= 7 { - if waitKill, err := filter.GetWaitKill(); err != nil { + if waitKill, err := filter.GetWaitKill(); err != nil && !errors.Is(err, unix.EINVAL) { return 0, false, fmt.Errorf("unable to fetch SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV bit: %w", err) } else if waitKill { flags |= uint(C.C_FILTER_FLAG_WAIT_KILLABLE_RECV)