RISCV上正常创建容器网络不可用

**【缺陷描述】：请补充详细的缺陷问题现象描述**

在容器中调用curl无法正常工作

```
$ docker run xfan1024/openeuler:24.03 curl https://www.bing.com/
curl: (6) getaddrinfo() thread failed to start
```

禁用掉seccomp后可正常工作

```
$ docker run --security-opt seccomp=unconfined xfan1024/openeuler:24.03 curl https://www.bing.com/
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   137  100   137    0     0    274      0 --:--:-- --:--:-- --:--:--   275
<html><head><title>Object moved</title></head><body>
<h2>Object moved to <a href="https://cn.bing.com/">here</a>.</h2>
</body></html>
```

通过strace分析应该和 [#IAHVVM](https://gitee.com/src-openeuler/containerd/issues/IAHVVM) 问题成因类似

```
$ docker run --rm -itd --name strace-curl --cap-add SYS_PTRACE xfan1024/openeuler:24.03
$ docker cp strace-6.6-2.oe2403.riscv64.rpm strace-curl:/tmp
$ docker exec rpm -ivh /tmp/strace-6.6-2.oe2403.riscv64.rpm
$ docker exec strace-curl rpm -ivh /tmp/strace-6.6-2.oe2403.riscv64.rpm
warning: /tmp/strace-6.6-2.oe2403.riscv64.rpm: Header V4 RSA/SHA256 Signature, key ID fb37bc6f: NOKEY
Verifying...                          ########################################
Preparing...                          ########################################
Updating / installing...
strace-6.6-2.oe2403                   ########################################
[xiaofan@openeuler-riscv64 rpms]$ docker exec strace-curl strace curl https://www.bing.com/
...
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x3f8cfcc000
mprotect(0x3f8cfcd000, 8388608, PROT_READ|PROT_WRITE) = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x3f8d7cc130, parent_tid=0x3f8d7cc130, exit_signal=0, stack=0x3f8cfcc000, stack_size=0x7ff920, tls=0x3f8d7cc7c0}, 88) = -1 EPERM (Operation not permitted)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
close(6)                                = 0
close(5)                                = 0
rt_sigaction(SIGPIPE, {sa_handler=SIG_IGN, sa_mask=[PIPE], sa_flags=SA_RESTART}, NULL, 8) = 0
rt_sigaction(SIGPIPE, {sa_handler=SIG_IGN, sa_mask=[PIPE], sa_flags=SA_RESTART}, NULL, 8) = 0
write(2, "c", 1c)                        = 1
write(2, "u", 1u)                        = 1
write(2, "r", 1r)                        = 1
write(2, "l", 1l)                        = 1
write(2, ":", 1:)                        = 1
...
```

**【内核版本】（如kernel-5.10.0-60.138.0.165，参考命令"uname -r"结果）**
6.6.0-27.0.0.31.oe2403.riscv64

**【缺陷所属软件及版本号】（如kernel-5.10.0-60.138.0.165，参考命令"rpm -q 包名"结果）**
docker-engine-18.09.0-336.oe2403.riscv64

**【环境信息】**
CPU: SG2042
OS: openEuler 24.03 (LTS)

src-openEuler/docker
关闭

内容风险标识

评论 (8)

src-openEuler/docker关闭 .gitee-modal { width: 500px !important; }

内容风险标识