Pods failing with error loading seccomp filter into kernel: errno 524 in OpenShift 4

Solution Verified - Updated -

Issue

  • There are pods in CreateContainerError or Pending status:

    $ oc get pod -o wide -n openshift-marketplace
    NAME                                                             READY  STATUS     RESTARTS  AGE  IP            NODE
    certified-operators-fgtn7                                        1/1    Running    0         1d   192.0.2.1     node1.example.com
    certified-operators-jrmvp                                        0/1    Pending    0         1d   192.0.2.2     node1.example.com
    community-operators-4xtdk                                        0/1    Pending    0         1d   192.0.2.3     node1.example.com
    community-operators-6lp8p                                        1/1    Running    0         1d   192.0.2.10    node1.example.com
    marketplace-operator-6c44976d7f-kfzw5                            1/1    Running    0         76d  192.0.2.15    node2.example.com
    redhat-marketplace-nh2dh                                         1/1    Running    0         1d   192.0.2.123   node1.example.com
    redhat-marketplace-v8l2r                                         0/1    Pending    0         1d   192.0.2.100   node1.example.com
    redhat-operators-cnhjs                                           1/1    Running    0         1d   192.0.2.116   node1.example.com
    redhat-operators-vjzsn                                           0/1    Pending    0         1d   192.0.2.224   node1.example.com
    
  • Checking the events on the namespace where the pod is failing or running the oc describe pod command the following error appears runc create failed: unable to start container process: unable to init seccomp: error loading seccomp filter into kernel: error loading seccomp filter: errno 524:

    $ oc get events -n [namespace_name]
    LAST SEEN  TYPE     REASON     OBJECT                         MESSAGE
    4m7s       Warning  Unhealthy  pod/pod_name  (combined from similar events): Readiness probe errored: rpc error: code = Unknown desc = command error: time="2023-08-25T13:00:38Z" level=error msg="exec failed: unable to start container process: unable to init seccomp: error loading seccomp filter into kernel: error loading seccomp filter: errno 524", stdout: , stderr: , exit code -1
    40m        Warning  Failed     pod/pod_name  (combined from similar events): Error: container create failed: time="2023-08-25T12:24:32Z" level=error msg="runc create failed: unable to start container process: unable to init seccomp: error loading seccomp filter into kernel: error loading seccomp filter: errno 524"
    4m2s       Warning  Unhealthy  pod/pod_name  (combined from similar events): Liveness probe errored: rpc error: code = Unknown desc = command error: time="2023-08-25T13:00:43Z" level=error msg="exec failed: unable to start container process: unable to init seccomp: error loading seccomp filter into kernel: error loading seccomp filter: errno 524", stdout: , stderr: , exit code -1
    4m11s      Warning  Unhealthy  pod/pod_name   (combined from similar events): Readiness probe errored: rpc error: code = Unknown desc = command error: time="2023-08-25T13:00:34Z" level=error msg="exec failed: unable to start container process: unable to init seccomp: error loading seccomp filter into kernel: error loading seccomp filter: errno 524", stdout: , stderr: , exit code -1
    4m12s      Warning  Unhealthy  pod/pod_name     (combined from similar events): Readiness probe errored: rpc error: code = Unknown desc = command error: time="2023-08-25T13:00:33Z" level=error msg="exec failed: unable to start container process: unable to init seccomp: error loading seccomp filter into kernel: error loading seccomp filter: errno 524", stdout: , stderr: , exit code -1
    1h2m       Warning  Failed     pod/pod_name     (combined from similar events): Error: container create failed: time="2023-08-25T12:01:54Z" level=error msg="runc create failed: unable to start container process: unable to init seccomp: error loading seccomp filter into kernel: error loading seccomp filter: errno 524"
    

Environment

  • Red Hat OpenShift Container Platform (RHOCP)
    • 4.12
    • 4.13

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content