compatibility of runc 1.1.12 with CentOS 7.9 #4209
-
hi Team, We are running our production system in CentOS 7.9. We would like to address this issue for our environment https://nvd.nist.gov/vuln/detail/CVE-2024-21626 The above mentioned vulnerability has been fixed in the 1.1.12 release. We see runc 1.1.12 has a dependency with the libseccomp as well.
|
Beta Was this translation helpful? Give feedback.
Replies: 4 comments 7 replies
-
runc 1.1.12 is tested on CentOS 7.9 with libseccomp 2.3.1 |
Beta Was this translation helpful? Give feedback.
-
@AkihiroSuda : Trying to build binary for the CentOS 7.9 kernel and getting the following error. what is required to ensure the static binaries for the intel x86_64 architecture. `go build -v -trimpath "-buildmode=pie" -tags "seccomp" -gcflags "-I seccomp" -ldflags "-L '/var/v0.6/go-projects/src/github.com/opencontainers/runc/vendor/github.com/seccomp/libseccomp-golang' -X 'main.gitCommit=v1.1.12-0-g51d5e94' -X 'main.version=1.1.12'" -o runc . github.com/opencontainers/runc/usr/local/go/pkg/tool/linux_amd64/link: running gcc failed: exit status 1 pwd=/var/v0.6/go-projects/src/github.com/opencontainers/runc
|
Beta Was this translation helpful? Give feedback.
-
@AkihiroSuda : We are assuming the runc binary which has been packaged will not support the CentOS 7.9 kernel which we have in the production. So we tried to attempt manually and facing the above issues. |
Beta Was this translation helpful? Give feedback.
-
hi @AkihiroSuda : RPM actually, upgrades many binaries like containerd, containerd-shim, ctr, containerd-shim-runc-v1 and containerd-shim-runc-v2. We would like to only upgrade runc to overcome the vulnerability. Is it mandate to be upgrade all other binaries ? Is it have any dependencies and discrepancies. I have gone through the release notes. But I couldn't find one. Any help would be much appreciated. |
Beta Was this translation helpful? Give feedback.
runc 1.1.12 is tested on CentOS 7.9 with libseccomp 2.3.1
https://cirrus-ci.com/task/5994735848914944