{"action":"created","issue":{"url":"https://api.github.com/repos/checkpoint-restore/criu/issues/509","repository_url":"https://api.github.com/repos/checkpoint-restore/criu","labels_url":"https://api.github.com/repos/checkpoint-restore/criu/issues/509/labels{/name}","comments_url":"https://api.github.com/repos/checkpoint-restore/criu/issues/509/comments","events_url":"https://api.github.com/repos/checkpoint-restore/criu/issues/509/events","html_url":"https://github.com/checkpoint-restore/criu/issues/509","id":332297482,"node_id":"MDU6SXNzdWUzMzIyOTc0ODI=","number":509,"title":"docker checkpoint failed in docker-dev environment with busybox for testing","user":{"login":"Botongou","id":26356127,"node_id":"MDQ6VXNlcjI2MzU2MTI3","avatar_url":"https://avatars0.githubusercontent.com/u/26356127?v=4","gravatar_id":"","url":"https://api.github.com/users/Botongou","html_url":"https://github.com/Botongou","followers_url":"https://api.github.com/users/Botongou/followers","following_url":"https://api.github.com/users/Botongou/following{/other_user}","gists_url":"https://api.github.com/users/Botongou/gists{/gist_id}","starred_url":"https://api.github.com/users/Botongou/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Botongou/subscriptions","organizations_url":"https://api.github.com/users/Botongou/orgs","repos_url":"https://api.github.com/users/Botongou/repos","events_url":"https://api.github.com/users/Botongou/events{/privacy}","received_events_url":"https://api.github.com/users/Botongou/received_events","type":"User","site_admin":false},"labels":[{"id":264104647,"node_id":"MDU6TGFiZWwyNjQxMDQ2NDc=","url":"https://api.github.com/repos/checkpoint-restore/criu/labels/docker","name":"docker","color":"fef2c0","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2018-06-14T08:19:16Z","updated_at":"2018-06-19T09:10:21Z","closed_at":null,"author_association":"NONE","body":"When I followed the instructions to build a docker-dev environment and tested the `docker checkpoint` command, an error came.\r\n\r\nKernel version:\r\n`Linux 4.13.0-36-generic`\r\n\r\nHere is the `docker version` in the docker-dev environment:\r\n```\r\nClient:\r\n Version:      18.06.0-ce-dev\r\n API version:  1.38\r\n Go version:   go1.10.2\r\n Git commit:   \r\n Built:        Wed Jun 13 04:34:18 2018\r\n OS/Arch:      linux/amd64\r\n Experimental: false\r\n Orchestrator: swarm\r\n\r\nServer:\r\n Engine:\r\n  Version:      18.06.0-ce-dev\r\n  API version:  1.38 (minimum version 1.12)\r\n  Go version:   go1.10.3\r\n  Git commit:   ccbd518\r\n  Built:        Wed Jun 13 04:34:58 2018\r\n  OS/Arch:      linux/amd64\r\n  Experimental: true\r\n```\r\nAnd the `docker info`:\r\n```\r\nContainers: 1\r\n Running: 1\r\n Paused: 0\r\n Stopped: 0\r\nImages: 1\r\nServer Version: 18.06.0-ce-dev\r\nStorage Driver: aufs\r\n Root Dir: /var/lib/docker/aufs\r\n Backing Filesystem: extfs\r\n Dirs: 3\r\n Dirperm1 Supported: true\r\nLogging Driver: json-file\r\nCgroup Driver: cgroupfs\r\nPlugins:\r\n Volume: local\r\n Network: bridge host ipvlan macvlan null overlay\r\n Log: awslogs fluentd gcplogs gelf journald json-file logentries splunk syslog\r\nSwarm: inactive\r\nRuntimes: runc\r\nDefault Runtime: runc\r\nInit Binary: docker-init\r\ncontainerd version: 395068d2b7256518259816ae19e45824b15da071\r\nrunc version: 69663f0bd4b60df09991c08812a60108003fa340\r\ninit version: fec3683\r\nSecurity Options:\r\n apparmor\r\n seccomp\r\n  Profile: default\r\nKernel Version: 4.13.0-36-generic\r\nOperating System: Debian GNU/Linux 9 (stretch) (containerized)\r\nOSType: linux\r\nArchitecture: x86_64\r\nCPUs: 2\r\nTotal Memory: 980.2MiB\r\nName: cbd792e6fa2c\r\nID: LFU7:EZU5:DAGG:O7Q6:CGD4:FDOM:SQ3Y:RUT4:XVX5:GEJW:ADYM:GZIZ\r\nDocker Root Dir: /var/lib/docker\r\nDebug Mode (client): false\r\nDebug Mode (server): true\r\n File Descriptors: 24\r\n Goroutines: 46\r\n System Time: 2018-06-14T08:14:57.409366662Z\r\n EventsListeners: 0\r\nRegistry: https://index.docker.io/v1/\r\nLabels:\r\nExperimental: true\r\nInsecure Registries:\r\n 127.0.0.0/8\r\nLive Restore Enabled: false\r\n\r\nWARNING: No swap limit support\r\nWARNING: bridge-nf-call-iptables is disabled\r\nWARNING: bridge-nf-call-ip6tables is disabled)\r\n\r\n```\r\nThe `criu --version`:\r\n```\r\nWarn  (criu/kerndat.c:659): Can't load /run/criu.kdat\r\nError (criu/util.c:714): exited, status=3\r\nWarn  (criu/kerndat.c:698): Can't keep kdat cache on non-tempfs\r\nVersion: 3.6\r\n```\r\nAnd finally is the **criu-dump.log** file (/var/run/docker/containerd/daemon/io.containerd.runtime.v1.linux/moby/98c68b285893227a86fa09e01d25d03407dc8fa8a49a761fab04a92b7a404484/criu-dump.log):\r\n```\r\n(00.000038) ========================================\r\n(00.000052) Dumping processes (pid: 233)\r\n(00.000054) ========================================\r\n(00.000057) Running pre-dump scripts\r\n(00.000058) \tRPC\r\n(00.000242) irmap: Searching irmap cache in work dir\r\n(00.000254) No irmap-cache image\r\n(00.000257) irmap: Searching irmap cache in parent\r\n(00.000261) irmap: No irmap cache\r\n(00.000275) cpu: fpu:1 fxsr:1 xsave:1\r\n(00.000359) cg-prop: Parsing controller \"cpu\"\r\n(00.000362) cg-prop: \tStrategy \"replace\"\r\n(00.000366) cg-prop: \tProperty \"cpu.shares\"\r\n(00.000368) cg-prop: \tProperty \"cpu.cfs_period_us\"\r\n(00.000369) cg-prop: \tProperty \"cpu.cfs_quota_us\"\r\n(00.000371) cg-prop: \tProperty \"cpu.rt_period_us\"\r\n(00.000372) cg-prop: \tProperty \"cpu.rt_runtime_us\"\r\n(00.000374) cg-prop: Parsing controller \"memory\"\r\n(00.000379) cg-prop: \tStrategy \"replace\"\r\n(00.000381) cg-prop: \tProperty \"memory.limit_in_bytes\"\r\n(00.000382) cg-prop: \tProperty \"memory.memsw.limit_in_bytes\"\r\n(00.000384) cg-prop: \tProperty \"memory.swappiness\"\r\n(00.000385) cg-prop: \tProperty \"memory.soft_limit_in_bytes\"\r\n(00.000387) cg-prop: \tProperty \"memory.move_charge_at_immigrate\"\r\n(00.000388) cg-prop: \tProperty \"memory.oom_control\"\r\n(00.000390) cg-prop: \tProperty \"memory.use_hierarchy\"\r\n(00.000391) cg-prop: \tProperty \"memory.kmem.limit_in_bytes\"\r\n(00.000393) cg-prop: \tProperty \"memory.kmem.tcp.limit_in_bytes\"\r\n(00.000394) cg-prop: Parsing controller \"cpuset\"\r\n(00.000396) cg-prop: \tStrategy \"replace\"\r\n(00.000397) cg-prop: \tProperty \"cpuset.cpus\"\r\n(00.000399) cg-prop: \tProperty \"cpuset.mems\"\r\n(00.000400) cg-prop: \tProperty \"cpuset.memory_migrate\"\r\n(00.000402) cg-prop: \tProperty \"cpuset.cpu_exclusive\"\r\n(00.000403) cg-prop: \tProperty \"cpuset.mem_exclusive\"\r\n(00.000405) cg-prop: \tProperty \"cpuset.mem_hardwall\"\r\n(00.000406) cg-prop: \tProperty \"cpuset.memory_spread_page\"\r\n(00.000408) cg-prop: \tProperty \"cpuset.memory_spread_slab\"\r\n(00.000409) cg-prop: \tProperty \"cpuset.sched_load_balance\"\r\n(00.000411) cg-prop: \tProperty \"cpuset.sched_relax_domain_level\"\r\n(00.000412) cg-prop: Parsing controller \"blkio\"\r\n(00.000414) cg-prop: \tStrategy \"replace\"\r\n(00.000415) cg-prop: \tProperty \"blkio.weight\"\r\n(00.000417) cg-prop: Parsing controller \"freezer\"\r\n(00.000418) cg-prop: \tStrategy \"replace\"\r\n(00.000420) cg-prop: Parsing controller \"perf_event\"\r\n(00.000421) cg-prop: \tStrategy \"replace\"\r\n(00.000423) cg-prop: Parsing controller \"net_cls\"\r\n(00.000424) cg-prop: \tStrategy \"replace\"\r\n(00.000426) cg-prop: \tProperty \"net_cls.classid\"\r\n(00.000427) cg-prop: Parsing controller \"net_prio\"\r\n(00.000429) cg-prop: \tStrategy \"replace\"\r\n(00.000430) cg-prop: \tProperty \"net_prio.ifpriomap\"\r\n(00.000432) cg-prop: Parsing controller \"pids\"\r\n(00.000433) cg-prop: \tStrategy \"replace\"\r\n(00.000435) cg-prop: \tProperty \"pids.max\"\r\n(00.000436) cg-prop: Parsing controller \"devices\"\r\n(00.000438) cg-prop: \tStrategy \"replace\"\r\n(00.000439) cg-prop: \tProperty \"devices.list\"\r\n(00.000484) Perparing image inventory (version 1)\r\n(00.000507) Add pid ns 1 pid 325\r\n(00.000517) Add net ns 2 pid 325\r\n(00.000526) Add ipc ns 3 pid 325\r\n(00.000532) Add uts ns 4 pid 325\r\n(00.000537) Add mnt ns 5 pid 325\r\n(00.000542) Add user ns 6 pid 325\r\n(00.000548) Add cgroup ns 7 pid 325\r\n(00.000550) cg: Dumping cgroups for 325\r\n(00.000570) cg:  `- New css ID 1\r\n(00.000572) cg:     `- [blkio] -> [/docker/cbd792e6fa2c443ad41410926a281a9a63143ff79d78eeaf8b3dca1f13d99fc4] [0]\r\n(00.000573) cg:     `- [cpu,cpuacct] -> [/docker/cbd792e6fa2c443ad41410926a281a9a63143ff79d78eeaf8b3dca1f13d99fc4] [0]\r\n(00.000575) cg:     `- [cpuset] -> [/docker/cbd792e6fa2c443ad41410926a281a9a63143ff79d78eeaf8b3dca1f13d99fc4] [0]\r\n(00.000576) cg:     `- [devices] -> [/docker/cbd792e6fa2c443ad41410926a281a9a63143ff79d78eeaf8b3dca1f13d99fc4] [0]\r\n(00.000578) cg:     `- [freezer] -> [/docker/cbd792e6fa2c443ad41410926a281a9a63143ff79d78eeaf8b3dca1f13d99fc4] [0]\r\n(00.000579) cg:     `- [hugetlb] -> [/docker/cbd792e6fa2c443ad41410926a281a9a63143ff79d78eeaf8b3dca1f13d99fc4] [0]\r\n(00.000580) cg:     `- [memory] -> [/docker/cbd792e6fa2c443ad41410926a281a9a63143ff79d78eeaf8b3dca1f13d99fc4] [0]\r\n(00.000582) cg:     `- [name=systemd] -> [/docker/cbd792e6fa2c443ad41410926a281a9a63143ff79d78eeaf8b3dca1f13d99fc4] [0]\r\n(00.000588) cg:     `- [net_cls,net_prio] -> [/docker/cbd792e6fa2c443ad41410926a281a9a63143ff79d78eeaf8b3dca1f13d99fc4] [0]\r\n(00.000590) cg:     `- [perf_event] -> [/docker/cbd792e6fa2c443ad41410926a281a9a63143ff79d78eeaf8b3dca1f13d99fc4] [0]\r\n(00.000591) cg:     `- [pids] -> [/docker/cbd792e6fa2c443ad41410926a281a9a63143ff79d78eeaf8b3dca1f13d99fc4] [0]\r\n(00.000592) cg:     `- [rdma] -> [/] [0]\r\n(00.000594) cg: Set 1 is criu one\r\n(00.000606) freezing processes: 100000 attempst with 100 ms steps\r\n(00.000622) freezer.state=FROZEN\r\n(00.000650) SEIZE 233: success\r\n(00.000666) SEIZE 294: success\r\n(00.000772) Seized task 233, state 1\r\n(00.000786) Collected (0 attempts, 0 in_progress)\r\n(00.000799) Seized task 294, state 0\r\n(00.000837) Collected (0 attempts, 0 in_progress)\r\n(00.000847) Collected (0 attempts, 0 in_progress)\r\n(00.000852) Collected 294 in 1 state\r\n(00.000866) Collected (-1 attempts, 0 in_progress)\r\n(00.000870) Collected 233 in 1 state\r\n(00.000882) Will take pid namespace in the image\r\n(00.000884) Add pid ns 8 pid 233\r\n(00.000889) Will take net namespace in the image\r\n(00.000891) Add net ns 9 pid 233\r\n(00.000896) Will take ipc namespace in the image\r\n(00.000897) Add ipc ns 10 pid 233\r\n(00.000902) Will take uts namespace in the image\r\n(00.000903) Add uts ns 11 pid 233\r\n(00.000908) Will take mnt namespace in the image\r\n(00.000910) Add mnt ns 12 pid 233\r\n(00.000943) Lock network\r\n(00.000945) Running network-lock scripts\r\n(00.000946) \tRPC\r\niptables-restore: invalid option -- 'w'\r\nip6tables-restore: invalid option -- 'w'\r\nip6tables-restore v1.6.0: ip6tables-restore: unable to initialize table 'filter'\r\n\r\nError occurred at line: 1\r\nTry `ip6tables-restore -h' or 'ip6tables-restore --help' for more information.\r\n(00.016529) Error (criu/util.c:714): exited, status=2\r\n(00.016551) Error (criu/net.c:2019): Locking network failed: iptables-restore returned -1. This may be connected to disabled CONFIG_NETFILTER_XT_MARK kernel build config option.\r\n(00.016567) Unlock network\r\n(00.016570) Running network-unlock scripts\r\n(00.016572) \tRPC\r\niptables-restore: invalid option -- 'w'\r\nip6tables-restore: invalid option -- 'w'\r\nip6tables-restore v1.6.0: ip6tables-restore: unable to initialize table 'filter'\r\n\r\nError occurred at line: 1\r\nTry `ip6tables-restore -h' or 'ip6tables-restore --help' for more information.\r\n(00.030575) Error (criu/util.c:714): exited, status=2\r\n(00.030618) Unfreezing tasks into 1\r\n(00.030643) Error (criu/cr-dump.c:1709): Dumping FAILED.\r\n\r\n```\r\nAll the process was running in a docker-dev container.\r\nAlso, I tried to mount the `/lib/modules` but it didn't help."},"comment":{"url":"https://api.github.com/repos/checkpoint-restore/criu/issues/comments/398330586","html_url":"https://github.com/checkpoint-restore/criu/issues/509#issuecomment-398330586","issue_url":"https://api.github.com/repos/checkpoint-restore/criu/issues/509","id":398330586,"node_id":"MDEyOklzc3VlQ29tbWVudDM5ODMzMDU4Ng==","user":{"login":"adrianreber","id":8724298,"node_id":"MDQ6VXNlcjg3MjQyOTg=","avatar_url":"https://avatars3.githubusercontent.com/u/8724298?v=4","gravatar_id":"","url":"https://api.github.com/users/adrianreber","html_url":"https://github.com/adrianreber","followers_url":"https://api.github.com/users/adrianreber/followers","following_url":"https://api.github.com/users/adrianreber/following{/other_user}","gists_url":"https://api.github.com/users/adrianreber/gists{/gist_id}","starred_url":"https://api.github.com/users/adrianreber/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adrianreber/subscriptions","organizations_url":"https://api.github.com/users/adrianreber/orgs","repos_url":"https://api.github.com/users/adrianreber/repos","events_url":"https://api.github.com/users/adrianreber/events{/privacy}","received_events_url":"https://api.github.com/users/adrianreber/received_events","type":"User","site_admin":false},"created_at":"2018-06-19T09:10:21Z","updated_at":"2018-06-19T09:10:21Z","author_association":"CONTRIBUTOR","body":"I am not using docker at all, so my environment (Fedora, CentOS) is probably not really important.\r\n\r\nThere is this message in the log:\r\n```This may be connected to disabled CONFIG_NETFILTER_XT_MARK kernel build config option```\r\n\r\nHave you verified that your kernel supports this?"}}
{"actor":{"display_login":"adrianreber"}}