Hi, glad to know it worked. There is some heuristics behind the default
bpf_jit_limit [1], it isn't a simple hardcoded value. We may discuss
bumping the default in Ubuntu, but I don't think that's a good idea: the
in-kernel heuristics has certainly been well thought, and just bumping
the number is likely to have other unintended consequences.

My take here is: your setup needs tuning, and that's what those config
knobs are for. Note that it's better to add a config file under
/etc/sysctl.d rather than modifying the default /etc/sysctl.conf.

Let me know if this makes sense for you. I'm leaving this bug marked
Incomplete for now.

[1]
https://github.com/torvalds/linux/blob/8efd0d9c316af470377894a6a0f9ff63ce18c177/kernel/bpf/core.c#L826

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1956954

Title:
  Can't load seccomp filter

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libseccomp/+bug/1956954/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to