{"id":808723,"url":"http://patchwork.ozlabs.org/api/1.0/patches/808723/?format=json","project":{"id":14,"url":"http://patchwork.ozlabs.org/api/1.0/projects/14/?format=json","name":"QEMU Development","link_name":"qemu-devel","list_id":"qemu-devel.nongnu.org","list_email":"qemu-devel@nongnu.org","web_url":"","scm_url":"","webscm_url":""},"msgid":"<20170901152200.5953-2-famz@redhat.com>","date":"2017-09-01T15:21:58","name":"[v3,1/3] docker: Use unconfined security profile","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"dc50115a3a1b70cfdfd2cde455f308b21e3b7e40","submitter":{"id":24872,"url":"http://patchwork.ozlabs.org/api/1.0/people/24872/?format=json","name":"Fam Zheng","email":"famz@redhat.com"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/qemu-devel/patch/20170901152200.5953-2-famz@redhat.com/mbox/","series":[{"id":1047,"url":"http://patchwork.ozlabs.org/api/1.0/series/1047/?format=json","date":"2017-09-01T15:21:57","name":"docker: Add test-block","version":3,"mbox":"http://patchwork.ozlabs.org/series/1047/mbox/"}],"check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/808723/checks/","tags":{},"headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@bilbo.ozlabs.org","Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=nongnu.org\n\t(client-ip=2001:4830:134:3::11; helo=lists.gnu.org;\n\tenvelope-from=qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org;\n\treceiver=)","ext-mx05.extmail.prod.ext.phx2.redhat.com;\n\tdmarc=none (p=none dis=none) header.from=redhat.com","ext-mx05.extmail.prod.ext.phx2.redhat.com;\n\tspf=fail smtp.mailfrom=famz@redhat.com"],"Received":["from lists.gnu.org (lists.gnu.org [IPv6:2001:4830:134:3::11])\n\t(using TLSv1 with cipher AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xkNgR6TNZz9t1t\n\tfor ;\n\tSat, 2 Sep 2017 01:38:27 +1000 (AEST)","from localhost ([::1]:46252 helo=lists.gnu.org)\n\tby lists.gnu.org with esmtp (Exim 4.71) (envelope-from\n\t)\n\tid 1dno1Z-00069J-U9\n\tfor incoming@patchwork.ozlabs.org; Fri, 01 Sep 2017 11:38:25 -0400","from eggs.gnu.org ([2001:4830:134:3::10]:46607)\n\tby lists.gnu.org with esmtp (Exim 4.71)\n\t(envelope-from ) id 1dnnlq-0001Kj-1g\n\tfor qemu-devel@nongnu.org; Fri, 01 Sep 2017 11:22:10 -0400","from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)\n\t(envelope-from ) id 1dnnlp-00031R-7q\n\tfor qemu-devel@nongnu.org; Fri, 01 Sep 2017 11:22:10 -0400","from mx1.redhat.com ([209.132.183.28]:38544)\n\tby eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)\n\t(Exim 4.71) (envelope-from ) id 1dnnlp-000319-2c\n\tfor qemu-devel@nongnu.org; Fri, 01 Sep 2017 11:22:09 -0400","from smtp.corp.redhat.com\n\t(int-mx03.intmail.prod.int.phx2.redhat.com [10.5.11.13])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby mx1.redhat.com (Postfix) with ESMTPS id 3B1EE13AB3;\n\tFri, 1 Sep 2017 15:22:08 +0000 (UTC)","from lemon.redhat.com (ovpn-12-135.pek2.redhat.com [10.72.12.135])\n\tby smtp.corp.redhat.com (Postfix) with ESMTP id 52CA27821B;\n\tFri, 1 Sep 2017 15:22:05 +0000 (UTC)"],"DMARC-Filter":"OpenDMARC Filter v1.3.2 mx1.redhat.com 3B1EE13AB3","From":"Fam Zheng ","To":"qemu-devel@nongnu.org","Date":"Fri, 1 Sep 2017 23:21:58 +0800","Message-Id":"<20170901152200.5953-2-famz@redhat.com>","In-Reply-To":"<20170901152200.5953-1-famz@redhat.com>","References":"<20170901152200.5953-1-famz@redhat.com>","X-Scanned-By":"MIMEDefang 2.79 on 10.5.11.13","X-Greylist":"Sender IP whitelisted, not delayed by milter-greylist-4.5.16\n\t(mx1.redhat.com [10.5.110.29]);\n\tFri, 01 Sep 2017 15:22:08 +0000 (UTC)","X-detected-operating-system":"by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]\n\t[fuzzy]","X-Received-From":"209.132.183.28","Subject":"[Qemu-devel] [PATCH v3 1/3] docker: Use unconfined security profile","X-BeenThere":"qemu-devel@nongnu.org","X-Mailman-Version":"2.1.21","Precedence":"list","List-Id":"","List-Unsubscribe":",\n\t","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n\t","Cc":"Fam Zheng , kchamart@redhat.com, =?utf-8?q?Philippe_M?=\n\t=?utf-8?q?athieu-Daud=C3=A9?= ,\n\t=?utf-8?q?Alex_Benn=C3=A9e?= ","Errors-To":"qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org","Sender":"\"Qemu-devel\"\n\t"},"content":"Some by default blocked syscalls are required to run tests for example\nuserfaultfd.\n\nSigned-off-by: Fam Zheng \n---\n tests/docker/Makefile.include | 1 +\n 1 file changed, 1 insertion(+)","diff":"diff --git a/tests/docker/Makefile.include b/tests/docker/Makefile.include\nindex aaab1a4208..8ded838b20 100644\n--- a/tests/docker/Makefile.include\n+++ b/tests/docker/Makefile.include\n@@ -145,6 +145,7 @@ docker-run: docker-qemu-src\n \t$(call quiet-command,\t\t\t\t\t\t\\\n \t\t$(SRC_PATH)/tests/docker/docker.py run \t\t\t\\\n \t\t\t$(if $(NOUSER),,-u $(shell id -u)) -t \t\t\\\n+\t\t\t--security-opt seccomp=unconfined\t\t\\\n \t\t\t$(if $V,,--rm) \t\t\t\t\t\\\n \t\t\t$(if $(DEBUG),-i,)\t\t\t\t\\\n \t\t\t$(if $(NETWORK),$(if $(subst $(NETWORK),,1),--net=$(NETWORK)),--net=none) \\\n","prefixes":["v3","1/3"]}