[GH-ISSUE #914] Issue: error adding seccomp filter rule for syscall clone3: permission denied": unknown #541

Closed
opened 2026-03-01 21:44:19 +03:00 by kerem · 9 comments
Owner

Originally created by @ghenry on GitHub (Dec 3, 2021).
Original GitHub issue: https://github.com/nektos/act/issues/914

Hi all,

This is known issue on Fedora 35 Docker and in other yml I do:

version: '3'

services:

  hydra:
    image: oryd/hydra:v1.10.7
...
    restart: unless-stopped
    security_opt:
      - seccomp:unconfined

Where would I add this last part ^^^ with GH actions and act?

Thanks.

Originally created by @ghenry on GitHub (Dec 3, 2021). Original GitHub issue: https://github.com/nektos/act/issues/914 Hi all, This is known issue on Fedora 35 Docker and in other yml I do: ``` version: '3' services: hydra: image: oryd/hydra:v1.10.7 ... restart: unless-stopped security_opt: - seccomp:unconfined ``` Where would I add this last part ^^^ with GH actions and act? Thanks.
kerem 2026-03-01 21:44:19 +03:00
Author
Owner

@catthehacker commented on GitHub (Dec 3, 2021):

Services are currently unsupported and we don't have a way to define seccomp policies for act containers

<!-- gh-comment-id:985417004 --> @catthehacker commented on GitHub (Dec 3, 2021): Services are currently unsupported and we don't have a way to define seccomp policies for act containers
Author
Owner

@ghenry commented on GitHub (Dec 3, 2021):

Ah shame. Thanks. Trying to debug this https://github.com/SentryPeer/SentryPeer/runs/4405983030?check_suite_focus=true

<!-- gh-comment-id:985471580 --> @ghenry commented on GitHub (Dec 3, 2021): Ah shame. Thanks. Trying to debug this https://github.com/SentryPeer/SentryPeer/runs/4405983030?check_suite_focus=true
Author
Owner

@catthehacker commented on GitHub (Dec 3, 2021):

@ghenry you can try build from https://github.com/nektos/act/actions/runs/1425103929

<!-- gh-comment-id:985482876 --> @catthehacker commented on GitHub (Dec 3, 2021): @ghenry you can try build from https://github.com/nektos/act/actions/runs/1425103929
Author
Owner

@ghenry commented on GitHub (Dec 3, 2021):

Thanks @catthehacker

So how would that allow me to add a global security_opt and not touch anything in my repo?

I should research more on how to set this globally within Docker, so apologies for the noise.

Thanks.

<!-- gh-comment-id:985500182 --> @ghenry commented on GitHub (Dec 3, 2021): Thanks @catthehacker So how would that allow me to add a global security_opt and not touch anything in my repo? I should research more on how to set this globally within Docker, so apologies for the noise. Thanks.
Author
Owner

@ghenry commented on GitHub (Dec 3, 2021):

Ah, so I'm presuming I could do something like this:

https://docs.docker.com/engine/security/seccomp/#run-without-the-default-seccomp-profile

act --security-opt seccomp=unconfined
<!-- gh-comment-id:985501860 --> @ghenry commented on GitHub (Dec 3, 2021): Ah, so I'm presuming I could do something like this: https://docs.docker.com/engine/security/seccomp/#run-without-the-default-seccomp-profile ``` act --security-opt seccomp=unconfined ```
Author
Owner

@catthehacker commented on GitHub (Dec 3, 2021):

No, because act doesn't support any other parameters/flags than what's present in act --help

<!-- gh-comment-id:985504332 --> @catthehacker commented on GitHub (Dec 3, 2021): No, because `act` doesn't support any other parameters/flags than what's present in `act --help`
Author
Owner

@ghenry commented on GitHub (Dec 3, 2021):

Thanks Ryan. So excuse my ignorance, but what are you looking for me to do (apart from go away) with:

@ghenry you can try build from https://github.com/nektos/act/actions/runs/1425103929

<!-- gh-comment-id:985505730 --> @ghenry commented on GitHub (Dec 3, 2021): Thanks Ryan. So excuse my ignorance, but what are you looking for me to do (apart from go away) with: > @ghenry you can try build from https://github.com/nektos/act/actions/runs/1425103929
Author
Owner

@catthehacker commented on GitHub (Dec 3, 2021):

never mind, I just noticed you posted a compose file and not part of your workflow

<!-- gh-comment-id:985509234 --> @catthehacker commented on GitHub (Dec 3, 2021): never mind, I just noticed you posted a compose file and not part of your workflow
Author
Owner

@github-actions[bot] commented on GitHub (Jan 3, 2022):

Issue is stale and will be closed in 14 days unless there is new activity

<!-- gh-comment-id:1003799284 --> @github-actions[bot] commented on GitHub (Jan 3, 2022): Issue is stale and will be closed in 14 days unless there is new activity
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/act#541
No description provided.