{"action":"created","issue":{"url":"https://api.github.com/repos/coreos/bugs/issues/2343","repository_url":"https://api.github.com/repos/coreos/bugs","labels_url":"https://api.github.com/repos/coreos/bugs/issues/2343/labels{/name}","comments_url":"https://api.github.com/repos/coreos/bugs/issues/2343/comments","events_url":"https://api.github.com/repos/coreos/bugs/issues/2343/events","html_url":"https://github.com/coreos/bugs/issues/2343","id":294204403,"number":2343,"title":"Support BPF/cgroup based firewalling","user":{"login":"sanmai-NL","id":3374183,"avatar_url":"https://avatars3.githubusercontent.com/u/3374183?v=4","gravatar_id":"","url":"https://api.github.com/users/sanmai-NL","html_url":"https://github.com/sanmai-NL","followers_url":"https://api.github.com/users/sanmai-NL/followers","following_url":"https://api.github.com/users/sanmai-NL/following{/other_user}","gists_url":"https://api.github.com/users/sanmai-NL/gists{/gist_id}","starred_url":"https://api.github.com/users/sanmai-NL/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sanmai-NL/subscriptions","organizations_url":"https://api.github.com/users/sanmai-NL/orgs","repos_url":"https://api.github.com/users/sanmai-NL/repos","events_url":"https://api.github.com/users/sanmai-NL/events{/privacy}","received_events_url":"https://api.github.com/users/sanmai-NL/received_events","type":"User","site_admin":false},"labels":[{"id":264722860,"url":"https://api.github.com/repos/coreos/bugs/labels/area/usability","name":"area/usability","color":"bfe5bf","default":false},{"id":113340623,"url":"https://api.github.com/repos/coreos/bugs/labels/component/systemd","name":"component/systemd","color":"0052cc","default":false},{"id":91823382,"url":"https://api.github.com/repos/coreos/bugs/labels/kind/enhancement","name":"kind/enhancement","color":"c7def8","default":false},{"id":275179790,"url":"https://api.github.com/repos/coreos/bugs/labels/team/os","name":"team/os","color":"ffffff","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-02-04T15:15:37Z","updated_at":"2018-04-25T02:47:53Z","closed_at":null,"author_association":"NONE","body":"# Issue Report #\r\n\r\n## Bug ##\r\n\r\n### Container Linux Version ###\r\n\r\n```\r\nNAME=\"Container Linux by CoreOS\"\r\nID=coreos\r\nVERSION=1632.2.1\r\nVERSION_ID=1632.2.1\r\nBUILD_ID=2018-02-01-2053\r\nPRETTY_NAME=\"Container Linux by CoreOS 1632.2.1 (Ladybug)\"\r\nANSI_COLOR=\"38;5;75\"\r\nHOME_URL=\"https://coreos.com/\"\r\nBUG_REPORT_URL=\"https://issues.coreos.com\"\r\nCOREOS_BOARD=\"amd64-usr\"\r\n```\r\n\r\n### Environment ###\r\n\r\nKVM guest.\r\n\r\n### Expected Behavior ###\r\n\r\nNo error. See https://github.com/systemd/systemd/issues/7188.\r\n\r\n### Actual Behavior ###\r\n\r\n```sh\r\nsudo journalctl -xefb\r\n```\r\n```\r\nFeb 04 15:05:45 server dbus[654]: [system] Activating via systemd: service name='org.freedesktop.machine1' unit='dbus-org.freedesktop.machine1.service'\r\nFeb 04 15:05:45 server systemd[1]: File /usr/lib/systemd/system/systemd-machined.service:27 configures an IP firewall (IPAddressDeny=any), but the local system does not support BPF/cgroup based firewalling.\r\nFeb 04 15:05:45 server systemd[1]: Proceeding WITHOUT firewalling in effect!\r\nFeb 04 15:05:45 server systemd[1]: Starting Virtual Machine and Container Registration Service.\r\n```\r\n\r\n### Reproduction Steps ###\r\n\r\n  1. Run `machinectl`?\r\n"},"comment":{"url":"https://api.github.com/repos/coreos/bugs/issues/comments/384144405","html_url":"https://github.com/coreos/bugs/issues/2343#issuecomment-384144405","issue_url":"https://api.github.com/repos/coreos/bugs/issues/2343","id":384144405,"user":{"login":"VinceMD","id":121187,"avatar_url":"https://avatars0.githubusercontent.com/u/121187?v=4","gravatar_id":"","url":"https://api.github.com/users/VinceMD","html_url":"https://github.com/VinceMD","followers_url":"https://api.github.com/users/VinceMD/followers","following_url":"https://api.github.com/users/VinceMD/following{/other_user}","gists_url":"https://api.github.com/users/VinceMD/gists{/gist_id}","starred_url":"https://api.github.com/users/VinceMD/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/VinceMD/subscriptions","organizations_url":"https://api.github.com/users/VinceMD/orgs","repos_url":"https://api.github.com/users/VinceMD/repos","events_url":"https://api.github.com/users/VinceMD/events{/privacy}","received_events_url":"https://api.github.com/users/VinceMD/received_events","type":"User","site_admin":false},"created_at":"2018-04-25T02:47:53Z","updated_at":"2018-04-25T02:47:53Z","author_association":"NONE","body":"I'm using kube-aws v0.9.10-rc.5 with CoreOs 1632.3.0 and getting plenty of those\r\n\r\n\"File /usr/lib/systemd/system/systemd-journald.service:33 configures an IP firewall (IPAddressDeny=any), but the local system does not support BPF/cgroup based firewalling.\"\r\n\r\nIs that concerning? what would you recommend?"}}
{"actor":{"display_login":"VinceMD"}}