Repository navigation
CI: in-host / docker < linux failing since ubuntu-24.04 image 20260615.205.1 #4978
Description
Passing: 20260607.184.1 https://github.com/containerd/nerdctl/actions/runs/27760717653/job/82134091152
Failing: 20260615.205.1 https://github.com/containerd/nerdctl/actions/runs/27800042033/job/82268185286
FAIL cmd/nerdctl/container.TestUpdateRestartPolicy (0.28s)
container_run_restart_linux_test.go:304:
+============================================================================================================+
| 🧽 | "TestUpdateRestartPolicy": initial cleanup |
+============================================================================================================+
container_run_restart_linux_test.go:289:
+------------------------------------------------------------------------------------------------------------+
| ➡️ | ⚙️ /usr/bin/docker rm -f testupdaterestartpolicy-0311c453 |
+------------------------------------------------------------------------------------------------------------+
| | 🟠 Error response from daemon: No such container: testupdaterestartpolicy-0311c453 |
+------------------------------------------------------------------------------------------------------------+
| 🌱 | PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin |
| | HOME=/root |
| | XDG_CONFIG_HOME=/home/runner/.config |
| | XDG_RUNTIME_DIR=/run/user/1001 |
| | DOCKER_CONFIG=/tmp/TestUpdateRestartPolicy1804885801/003 |
+------------------------------------------------------------------------------------------------------------+
| ⏰ | <1s (limit: 3m0s) |
+------------------------------------------------------------------------------------------------------------+
| 📁 | /tmp/TestUpdateRestartPolicy1804885801/002 |
+------------------------------------------------------------------------------------------------------------+
container_run_restart_linux_test.go:304:
+============================================================================================================+
| 🏗 | "TestUpdateRestartPolicy": setup |
+============================================================================================================+
container_run_restart_linux_test.go:284:
+------------------------------------------------------------------------------------------------------------+
| ➡️ | ⚙️ /usr/bin/docker run -d --restart=on-failure:1 --name testupdaterestartpolicy-0311c453 ghcr.io |
| | /stargz-containers/alpine:3.13-org sh -c exit 1 |
+------------------------------------------------------------------------------------------------------------+
| | 🟢 693023370d72bbb413283a92610b39dc48716cc32e532203edf3b3a738edbbdc |
+------------------------------------------------------------------------------------------------------------+
| | 🟠 WARNING: The requested image's platform (linux/arm) does not match the detected host platform |
| | (linux/amd64/v3) and no specific platform was requested |
+------------------------------------------------------------------------------------------------------------+
| 🌱 | PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin |
| | HOME=/root |
| | XDG_CONFIG_HOME=/home/runner/.config |
| | XDG_RUNTIME_DIR=/run/user/1001 |
| | DOCKER_CONFIG=/tmp/TestUpdateRestartPolicy1804885801/003 |
+------------------------------------------------------------------------------------------------------------+
| ⏰ | <1s (limit: 3m0s) |
+------------------------------------------------------------------------------------------------------------+
| 📁 | /tmp/TestUpdateRestartPolicy1804885801/002 |
+------------------------------------------------------------------------------------------------------------+
container_run_restart_linux_test.go:285:
+------------------------------------------------------------------------------------------------------------+
| ➡️ | ⚙️ /usr/bin/docker update --restart=on-failure:2 testupdaterestartpolicy-0311c453 |
+------------------------------------------------------------------------------------------------------------+
| | 🚫 command returned a non-zero exit code |
+------------------------------------------------------------------------------------------------------------+
| | ⚠️ 1 |
+------------------------------------------------------------------------------------------------------------+
| | 🟠 Error response from daemon: Cannot update container 693023370d72bbb413283a92610b39dc48716cc32 |
| | e532203edf3b3a738edbbdc: runc did not terminate successfully: exit status 1: container not runni |
| | ng |
+------------------------------------------------------------------------------------------------------------+
| 🌱 | PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin |
| | HOME=/root |
| | XDG_CONFIG_HOME=/home/runner/.config |
| | XDG_RUNTIME_DIR=/run/user/1001 |
| | DOCKER_CONFIG=/tmp/TestUpdateRestartPolicy1804885801/003 |
+------------------------------------------------------------------------------------------------------------+
| ⏰ | <1s (limit: 3m0s) |
+------------------------------------------------------------------------------------------------------------+
| 📁 | /tmp/TestUpdateRestartPolicy1804885801/002 |
+------------------------------------------------------------------------------------------------------------+
container_run_restart_linux_test.go:285: 🔗
<<<<<<<<<<<<<<<<<<<<
🖊️ Command should succeed
👀 testing: `command returned a non-zero exit code`
❌ FAILED! is `<nil>`
>>>>>>>>>>>>>>>>>>>>
container_run_restart_linux_test.go:304:
+============================================================================================================+
| 🧽 | "TestUpdateRestartPolicy": post-cleanup |
+============================================================================================================+
container_run_restart_linux_test.go:289:
+------------------------------------------------------------------------------------------------------------+
| ➡️ | ⚙️ /usr/bin/docker rm -f testupdaterestartpolicy-0311c453 |
+------------------------------------------------------------------------------------------------------------+
| | 🟢 testupdaterestartpolicy-0311c453 |
+------------------------------------------------------------------------------------------------------------+
| 🌱 | PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin |
| | HOME=/root |
| | XDG_CONFIG_HOME=/home/runner/.config |
| | XDG_RUNTIME_DIR=/run/user/1001 |
| | DOCKER_CONFIG=/tmp/TestUpdateRestartPolicy1804885801/003 |
+------------------------------------------------------------------------------------------------------------+
| ⏰ | <1s (limit: 3m0s) |
+------------------------------------------------------------------------------------------------------------+
| 📁 | /tmp/TestUpdateRestartPolicy1804885801/002 |
+------------------------------------------------------------------------------------------------------------+
Failing (another one): 20260615.205.1 https://github.com/containerd/nerdctl/actions/runs/27800991835/job/82271038422
FAIL cmd/nerdctl/container.TestRunSeccompCapSysPtrace (5.57s)
container_run_security_linux_test.go:353:
+============================================================================================================+
| 🚀 | "TestRunSeccompCapSysPtrace": starting test! |
+============================================================================================================+
| ⏳ | /tmp/TestRunSeccompCapSysPtrace603572387/001/a4cba602 |
+============================================================================================================+
| | |
+============================================================================================================+
| config | { |
| | "PrivateMode": "" |
| | } |
+============================================================================================================+
| labels | {} |
+============================================================================================================+
container_run_security_linux_test.go:353:
+------------------------------------------------------------------------------------------------------------+
| ➡️ | ⚙️ /usr/bin/docker run --rm --cap-add sys_ptrace ghcr.io/stargz-containers/alpine:3.13-org sh -e |
| | uxc apk add -q strace && strace true |
+------------------------------------------------------------------------------------------------------------+
| | 🚫 command returned a non-zero exit code |
+------------------------------------------------------------------------------------------------------------+
| | ⚠️ 1 |
+------------------------------------------------------------------------------------------------------------+
| | 🟠 WARNING: The requested image's platform (linux/arm64) does not match the detected host platfo |
| | rm (linux/amd64/v3) and no specific platform was requested |
| | + apk add -q strace |
| | + strace true |
| | strace: test_ptrace_get_syscall_info: PTRACE_TRACEME: Function not implemented |
| | strace: ptrace(PTRACE_TRACEME, ...): Function not implemented |
| | strace: PTRACE_SETOPTIONS: Function not implemented |
| | strace: detach: waitpid(22): No child process |
| | strace: Process 22 detached |
+------------------------------------------------------------------------------------------------------------+
| 🌱 | PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin |
| | HOME=/root |
| | XDG_CONFIG_HOME=/home/runner/.config |
| | XDG_RUNTIME_DIR=/run/user/1001 |
| | DOCKER_CONFIG=/tmp/TestRunSeccompCapSysPtrace603572387/003 |
+------------------------------------------------------------------------------------------------------------+
| ⏰ | 5.516048896s (limit: 3m0s) |
+------------------------------------------------------------------------------------------------------------+
| 📁 | /tmp/TestRunSeccompCapSysPtrace603572387/002 |
+------------------------------------------------------------------------------------------------------------+
container_run_security_linux_test.go:353: 🔗
<<<<<<<<<<<<<<<<<<<<
🖊️ Command should succeed
👀 testing: `command returned a non-zero exit code`
❌ FAILED! is `<nil>`
>>>>>>>>>>>>>>>>>>>>
Activity
AkihiroSuda commentedon Jun 19, 2026
Workaround was applied to skip the failing tests:
filipPlevjak commentedon Sep 11, 2026
Root cause identified and reproduced locally.
Both TestUpdateRestartPolicy and TestRunSeccompCapSysPtrace run the multi-arch image ghcr.io/stargz-containers/alpine:3.13-org without --platform. On the runner image 20260615.205.1 (Docker 28.0.4 + containerd image store + binfmt/QEMU), the engine resolves the default platform to linux/arm instead of the host linux/amd64, so the container runs under QEMU. QEMU does not implement ptrace(2) (breaking strace), and runc update fails on the emulated container.
I reproduced the exact CI failure on Docker 28.0.4 by explicitly forcing the platform the buggy runner picked implicitly:
docker run --rm --platform linux/arm --cap-add sys_ptrace ghcr.io/stargz-containers/alpine:3.13-org sh -euxc "apk add -q strace && strace true"# strace: PTRACE_TRACEME: Function not implemented <-- identical to CI
With the host platform it passes:
docker run --rm --platform linux/amd64 --cap-add sys_ptrace ghcr.io/stargz-containers/alpine:3.13-org sh -euxc "apk add -q strace && strace true"# +++ exited with 0 +++
Proposed fix: pin --platform=linux/$GOARCH in both tests and remove the temporary Docker skip from #4981. This makes the tests deterministic regardless of Docker version / image store. Verified locally: both tests PASS against Docker 28.0.4 with the containerd image store + binfmt enabled.
I'd like to work on this — could you please assign it to me? @AkihiroSuda
AkihiroSuda commentedon Sep 11, 2026
How does it resolve the default platform to
linux/arm(32-bit)?