unknown error after kill: runc did not terminate successfully: exit status 1: unable to signal init: permission denied
** Also affects: runc (Ubuntu) Importance: Undecided Status: New ** Bug watch added: github.com/containerd/containerd/issues #10542 https://github.com/containerd/containerd/issues/10542 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to alsa-driver in Ubuntu. https://bugs.launchpad.net/bugs/2072452 Title: AppArmor denies crun sending signals to containers Status in alsa-driver package in Ubuntu: Confirmed Status in runc package in Ubuntu: New Bug description: Environment: k8s 1.30.2, containerd 1.7.12 (package in ubuntu repo) When I do a k8s deployment update, the old pods stay in 'Terminating' status. The /var/log/syslog has the following messages: 2024-07-05T15:52:07.892132+08:00 km kernel: audit: type=1400 audit(1720165927.890:2191): apparmor="DENIED" operation="signal" class="signal" profile="cri-containerd.apparmor.d" pid=134029 comm="runc" requested_mask="receive" denied_mask="receive" signal=kill peer="runc" Workaround: currently I disable the apparmor.service and reboot the system. Info from github: https://github.com/moby/moby/pull/47749/files#diff-4a7aa58be335398fb04f9f1634143e158146b57c6256a2d605f9eb3c3c53d840 ProblemType: Bug DistroRelease: Ubuntu 24.04 Package: alsa-base (not installed) ProcVersionSignature: Ubuntu 6.8.0-36.36-generic 6.8.4 Uname: Linux 6.8.0-36-generic x86_64 ApportVersion: 2.28.1-0ubuntu3 Architecture: amd64 CasperMD5CheckResult: pass Date: Mon Jul 8 09:26:20 2024 InstallationDate: Installed on 2024-07-03 (5 days ago) InstallationMedia: Ubuntu-Server 24.04 LTS "Noble Numbat" - Release amd64 (20240423) SourcePackage: alsa-driver Symptom: audio UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/alsa-driver/+bug/2072452/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp