From 3eacbe106b956e5f75ae1be7399293ee83f76e39 Mon Sep 17 00:00:00 2001 From: Christian Brauner Date: Wed, 8 Dec 2021 10:41:59 +0100 Subject: [PATCH] api-extensions: don't advertise seccomp notify support if it's not compiled in Link: https://discuss.linuxcontainers.org/t/runtimeerror-failed-to-read-zi-bytes-from-dev-urandom Signed-off-by: Christian Brauner --- src/lxc/api_extensions.h | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/lxc/api_extensions.h b/src/lxc/api_extensions.h index ea5011c12..334f470fe 100644 --- a/src/lxc/api_extensions.h +++ b/src/lxc/api_extensions.h @@ -27,7 +27,9 @@ static char *api_extensions[] = { "cgroup_relative", "mount_injection_file", "seccomp_allow_nesting", +#ifdef HAVE_SECCOMP_NOTIFY "seccomp_notify", +#endif /* HAVE_SECCOMP_NOTIFY */ "network_veth_routes", "network_ipvlan", "network_l2proxy", @@ -42,8 +44,10 @@ static char *api_extensions[] = { "time_namespace", "seccomp_allow_deny_syntax", "devpts_fd", +#ifdef HAVE_SECCOMP_NOTIFY "seccomp_notify_fd_active", "seccomp_proxy_send_notify_fd", +#endif /* HAVE_SECCOMP_NOTIFY */ "idmapped_mounts", "idmapped_mounts_v2", "core_scheduling", -- 2.47.2