diff options
Diffstat (limited to 'molecule')
| -rw-r--r-- | molecule/archlinux/Dockerfile.j2 | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/molecule/archlinux/Dockerfile.j2 b/molecule/archlinux/Dockerfile.j2 index 9e25e4f3..fd6791e7 100644 --- a/molecule/archlinux/Dockerfile.j2 +++ b/molecule/archlinux/Dockerfile.j2 @@ -2,6 +2,14 @@ FROM docker.io/library/archlinux ENV container docker +# pacman's syscall sandbox (alpm) doesn't work under QEMU user-mode +# emulation (e.g. building amd64 images on an arm64 host): the sandbox's +# seccomp filter needs syscalls QEMU doesn't emulate, so pacman fails +# with "error restricting syscalls via seccomp" before ever reaching the +# network. Disabling it only affects local cross-arch testing; native +# CI runners aren't emulated and are unaffected either way. +RUN sed -i '/^\[options\]/a DisableSandbox' /etc/pacman.conf + RUN pacman -Syu --noconfirm --needed python3 systemd udev dbus \ && pacman -Scc --noconfirm |