{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/22870","repository_url":"https://api.github.com/repos/docker/docker","labels_url":"https://api.github.com/repos/docker/docker/issues/22870/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/22870/comments","events_url":"https://api.github.com/repos/docker/docker/issues/22870/events","html_url":"https://github.com/docker/docker/issues/22870","id":156070016,"number":22870,"title":"Docker may easily support seccomp on Ubuntu 14.04 without the need for static binaries","user":{"login":"ricardobranco777","id":10237751,"avatar_url":"https://avatars.githubusercontent.com/u/10237751?v=3","gravatar_id":"","url":"https://api.github.com/users/ricardobranco777","html_url":"https://github.com/ricardobranco777","followers_url":"https://api.github.com/users/ricardobranco777/followers","following_url":"https://api.github.com/users/ricardobranco777/following{/other_user}","gists_url":"https://api.github.com/users/ricardobranco777/gists{/gist_id}","starred_url":"https://api.github.com/users/ricardobranco777/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ricardobranco777/subscriptions","organizations_url":"https://api.github.com/users/ricardobranco777/orgs","repos_url":"https://api.github.com/users/ricardobranco777/repos","events_url":"https://api.github.com/users/ricardobranco777/events{/privacy}","received_events_url":"https://api.github.com/users/ricardobranco777/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels/area/security/seccomp","name":"area/security/seccomp","color":"fbca04"},{"url":"https://api.github.com/repos/docker/docker/labels/kind/feature","name":"kind/feature","color":"AAB3AB"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":27,"created_at":"2016-05-20T23:42:38Z","updated_at":"2016-05-27T17:50:08Z","closed_at":null,"body":"Quoting [https://github.com/docker/docker/blob/master/docs/security/seccomp.md](https://github.com/docker/docker/blob/master/docs/security/seccomp.md):\r\n\r\n> Note: seccomp profiles require seccomp 2.2.1 and are only available starting with Debian 9 \"Stretch\", Ubuntu 15.10 \"Wily\", Fedora 22, CentOS 7 and Oracle Linux 7. To use this feature on Ubuntu 14.04, Debian Wheezy, or Debian Jessie, you must download the latest static Docker Linux binary. This feature is currently not available on other distributions.\r\n\r\nIn Ubuntu 14.04 I'm able to install the Ubuntu 16.04 kernel (currently 4.4.8) by installing the [linux-generic-lts-xenial](http://packages.ubuntu.com/trusty/linux-generic-lts-xenial) package _and_ the current version of [seccomp](http://packages.ubuntu.com/trusty-backports/seccomp) (2.2.3) by installing from the [trusty-backports](http://packages.ubuntu.com/trusty-backports/allpackages) repository.  All the SECCOMP kernel configuration variables are enabled in /boot/config-$(uname -r).\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/222211059","html_url":"https://github.com/docker/docker/issues/22870#issuecomment-222211059","issue_url":"https://api.github.com/repos/docker/docker/issues/22870","id":222211059,"user":{"login":"jfrazelle","id":1445228,"avatar_url":"https://avatars.githubusercontent.com/u/1445228?v=3","gravatar_id":"","url":"https://api.github.com/users/jfrazelle","html_url":"https://github.com/jfrazelle","followers_url":"https://api.github.com/users/jfrazelle/followers","following_url":"https://api.github.com/users/jfrazelle/following{/other_user}","gists_url":"https://api.github.com/users/jfrazelle/gists{/gist_id}","starred_url":"https://api.github.com/users/jfrazelle/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jfrazelle/subscriptions","organizations_url":"https://api.github.com/users/jfrazelle/orgs","repos_url":"https://api.github.com/users/jfrazelle/repos","events_url":"https://api.github.com/users/jfrazelle/events{/privacy}","received_events_url":"https://api.github.com/users/jfrazelle/received_events","type":"User","site_admin":false},"created_at":"2016-05-27T17:50:07Z","updated_at":"2016-05-27T17:50:07Z","body":"The docker apt repo gets hit by CIs, people building AMIs, etc etc, this\nresults in _millions_ of downloads per day. I cannot recommend this. I'm\nsorry.\n\nOn Fri, May 27, 2016 at 10:48 AM, Jessica Frazelle <me@jessfraz.com> wrote:\n\n> Trusty is one of the most popular distros. I really fear doing this.\n>\n> On Fri, May 27, 2016 at 10:48 AM, Jessica Frazelle <me@jessfraz.com>\n> wrote:\n>\n>> See the problem is many many users do not do this, and there will be\n>> massive amounts of issues to us when people cannot upgrade docker.\n>>\n>> On Fri, May 27, 2016 at 10:45 AM, Ricardo Branco <\n>> notifications@github.com> wrote:\n>>\n>>> The trusty-backports repository comes in a line commented by default in\n>>> /etc/apt/sources.list. Any security conscious user would just uncomment\n>>> that line, run \"apt-get update\" and \"apt-get install\n>>> libseccomp2/trusty-backports\" and the issue is gone.\n>>>\n>>> —\n>>> You are receiving this because you were mentioned.\n>>> Reply to this email directly, view it on GitHub\n>>> <https://github.com/docker/docker/issues/22870#issuecomment-222209560>,\n>>> or mute the thread\n>>> <https://github.com/notifications/unsubscribe/ABYNbIGRtaK8HXpH3pGAfbLzuvY69E0Lks5qFy21gaJpZM4IjpKD>\n>>> .\n>>>\n>>\n>>\n>>\n>> --\n>>\n>>\n>> Jessie Frazelle\n>> 4096R / D4C4 DD60 0D66 F65A 8EFC  511E 18F3 685C 0022 BFF3\n>> pgp.mit.edu\n>> <http://pgp.mit.edu/pks/lookup?op=get&search=0x18F3685C0022BFF3>\n>>\n>\n>\n>\n> --\n>\n>\n> Jessie Frazelle\n> 4096R / D4C4 DD60 0D66 F65A 8EFC  511E 18F3 685C 0022 BFF3\n> pgp.mit.edu\n> <http://pgp.mit.edu/pks/lookup?op=get&search=0x18F3685C0022BFF3>\n>\n\n\n\n-- \n\n\nJessie Frazelle\n4096R / D4C4 DD60 0D66 F65A 8EFC  511E 18F3 685C 0022 BFF3\npgp.mit.edu <http://pgp.mit.edu/pks/lookup?op=get&search=0x18F3685C0022BFF3>\n"}}
{"actor":{"display_login":"jfrazelle"}}