The runc container runtime 1.2.5 leading to container creation failure in RHOCP 4
Issue
-
The pods that have set
shareProcessNamespace: truebecome stuck in theInitstate post upgrade for Rook-Ceph (ODF), GPU and MetalLB FRR pods. -
After upgrading from 4.19.17 to 4.19.19 the
frr-k8spods are stuck in Init state with similar errors:Failed to create pod sandbox: rpc error: code = Unknown desc = container create failed: time="2025-11-21T09:35:58Z" level=error msg="runc create failed: unable to start container process: error during container init: error closing exec fds: get handle to /proc/thread-self/fd: unsafe procfs detected: openat2 fsmount:fscontext:proc/thread-self/fd/: operation not permitted"
Environment
- Red Hat OpenShift Container Platform (RHOCP)
- 4.20.4+
- 4.19.19
- 4.19.20
- 4.18.29
- 4.17.44
- 4.16.53
- 4.14.59
- 4.12.83+
- runc as the container runtime
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.