- Code: Select all
[0824/164350:FATAL:sandbox_linux.cc(180)] Check failed: sandbox::Credentials::MoveToNewUserNS().
#0 0x7fd8d024fdce base::debug::StackTrace::StackTrace()
#1 0x7fd8d026409b logging::LogMessage::~LogMessage()
#2 0x7fd8d2811c82 content::LinuxSandbox::EngageNamespaceSandbox()
#3 0x7fd8d31fee8c content::ZygoteMain()
#4 0x7fd8d33820c6 content::RunZygote()
#5 0x7fd8d3383247 content::ContentMainRunnerImpl::Run()
#6 0x7fd8d3381de0 content::ContentMain()
#7 0x7fd8d015d864 CefExecuteProcess()
#8 0x7fd8d0103a77 cef_execute_process
#9 0x00000044746d CefExecuteProcess()
#10 0x00000041bfae main
#11 0x7fd8cd29ef45 __libc_start_main
#12 0x00000040d5f7 <unknown>
Received signal 6
#0 0x7fd8d024f957 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#1 0x7fd8cd652330 <unknown>
#2 0x7fd8cd2b3c37 gsignal
#3 0x7fd8cd2b7028 abort
#4 0x7fd8d024e6d2 base::debug::BreakDebugger()
#5 0x7fd8d026435a logging::LogMessage::~LogMessage()
#6 0x7fd8d2811c82 content::LinuxSandbox::EngageNamespaceSandbox()
#7 0x7fd8d31fee8c content::ZygoteMain()
#8 0x7fd8d33820c6 content::RunZygote()
#9 0x7fd8d3383247 content::ContentMainRunnerImpl::Run()
#10 0x7fd8d3381de0 content::ContentMain()
#11 0x7fd8d015d864 CefExecuteProcess()
#12 0x7fd8d0103a77 cef_execute_process
#13 0x00000044746d CefExecuteProcess()
#14 0x00000041bfae main
#15 0x7fd8cd29ef45 __libc_start_main
#16 0x00000040d5f7 <unknown>
r8: ffff936bc3be6ec8 r9: ffff936bc3be6eb8 r10: 0000000000000008 r11: 0000000000000202
r12: 000000000808b801 r13: 0000136a080b1c40 r14: 00007ffe44509458 r15: 00007ffe44509448
di: 0000000000000001 si: 0000000000000001 bp: 00007ffe44509aa0 bx: 0000000000000000
dx: 0000000000000006 ax: 0000000000000000 cx: ffffffffffffffff sp: 00007ffe44508b88
ip: 00007fd8cd2b3c37 efl: 0000000000000202 cgf: 316c000000000033 erf: 0000000000000000
trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000
[end of stack trace]
In logs I get
- Code: Select all
Looks like unprivileged CLONE_NEWUSER may not be available on this kernel.
When I run with --no-sandbox flag it works fine. Why is sandbox failing?