Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AppArmor denied trace after installing NFS server with nfs-kernel-server package #323

Open
ggirard07 opened this issue Feb 20, 2025 · 0 comments

Comments

@ggirard07
Copy link

ggirard07 commented Feb 20, 2025

My secondary Debian server is running multiple stacks fine but since adding nfs-kernel-server my shell gets spammed with AppArmor audit traces like

[20761.583997] audit: type=1400 audit(1740021300.010:12129): apparmor="DENIED" operation="ptrace" profile="docker-default" pid=56093 comm="tokio-runtime-w" requested_mask="read" denied_mask="read" peer="unconfined"

The mentioned PID matches the Periphery container on that secondary server.

root@localhost:~/docker/periphery#ps -aux | grep 56093
root       56093  1.2  0.0 491916 12028 ?        Ssl  03:10   0:03 periphery
root       56912  0.0  0.0   3744  1860 ttyS0    S+   03:15   0:00 grep 56093

They started right after the apt install, I did not configure any NFS share yet.
I tried to removed all the stacks running on that server, except the Periphery agent, but traces are still reported in the shell.
Only ways to stop those traces is to either disable the Periphery agent or remove the nfs-kernel-server package.
From Komodo UI, looks like everything is working as expected with proper stats being reported by the server.
My setup is a Debian 12 VM running in a Proxmox 8 setup.

Is there something I can do to help investigate that issue?
Sorry if this issue is lacking debugging on my side, I am pretty new to Komodo and running containers on Linux (I have been using Windows or WSL2 up until recently).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant