4.42.0 and io_uring

rimelek · June 28, 2025, 10:06pm

I think I saw a related issue on GitHub. Not the one I will share, but I found this one

Cannot use io_uring from 4.42.0 onwards

opened 03:36PM - 23 Jun 25 UTC

status/triage

### Description I can see from the release notes > Block io_uring syscalls in …containers. But I can't find any details about why and how can it be enabled again. Even if I try with `--privileged --security-opt seccomp=unconfined` it doesn't work. ### Reproduce Try to use MariaDB 11.8 container and you can see a warning with EPERM error. ### Expected behavior _No response_ ### docker version ```bash Client: Version: 28.2.2 API version: 1.50 Go version: go1.24.3 Git commit: e6534b4 Built: Fri May 30 12:07:35 2025 OS/Arch: darwin/arm64 Context: desktop-linux Server: Docker Desktop 4.42.1 (196648) Engine: Version: 28.2.2 API version: 1.50 (minimum version 1.24) Go version: go1.24.3 Git commit: 45873be Built: Fri May 30 12:07:27 2025 OS/Arch: linux/arm64 Experimental: false containerd: Version: 1.7.27 GitCommit: 05044ec0a9a75232cad458027ca83437aae3f4da runc: Version: 1.2.5 GitCommit: v1.2.5-0-g59923ef docker-init: Version: 0.19.0 GitCommit: de40ad0 ``` ### docker info ```bash Client: Version: 28.2.2 Context: desktop-linux Debug Mode: false Plugins: ai: Docker AI Agent - Ask Gordon (Docker Inc.) Version: v1.4.0 Path: /Users/lucalooz/.docker/cli-plugins/docker-ai buildx: Docker Buildx (Docker Inc.) Version: v0.24.0-desktop.2 Path: /Users/lucalooz/.docker/cli-plugins/docker-buildx cloud: Docker Cloud (Docker Inc.) Version: v0.3.9 Path: /Users/lucalooz/.docker/cli-plugins/docker-cloud compose: Docker Compose (Docker Inc.) Version: v2.37.1-desktop.1 Path: /Users/lucalooz/.docker/cli-plugins/docker-compose debug: Get a shell into any image or container (Docker Inc.) Version: 0.0.41 Path: /Users/lucalooz/.docker/cli-plugins/docker-debug desktop: Docker Desktop commands (Docker Inc.) Version: v0.1.9 Path: /Users/lucalooz/.docker/cli-plugins/docker-desktop extension: Manages Docker extensions (Docker Inc.) Version: v0.2.29 Path: /Users/lucalooz/.docker/cli-plugins/docker-extension init: Creates Docker-related starter files for your project (Docker Inc.) Version: v1.4.0 Path: /Users/lucalooz/.docker/cli-plugins/docker-init mcp: Docker MCP Plugin (Docker Inc.) Version: dev Path: /Users/lucalooz/.docker/cli-plugins/docker-mcp model: Docker Model Runner (Docker Inc.) Version: v0.1.24 Path: /Users/lucalooz/.docker/cli-plugins/docker-model sbom: View the packaged-based Software Bill Of Materials (SBOM) for an image (Anchore Inc.) Version: 0.6.0 Path: /Users/lucalooz/.docker/cli-plugins/docker-sbom scout: Docker Scout (Docker Inc.) Version: v1.18.1 Path: /Users/lucalooz/.docker/cli-plugins/docker-scout WARNING: Plugin "/Users/lucalooz/.docker/cli-plugins/docker-dev" is not valid: failed to fetch metadata: fork/exec /Users/lucalooz/.docker/cli-plugins/docker-dev: no such file or directory WARNING: Plugin "/Users/lucalooz/.docker/cli-plugins/docker-feedback" is not valid: failed to fetch metadata: fork/exec /Users/lucalooz/.docker/cli-plugins/docker-feedback: no such file or directory Server: Containers: 10 Running: 1 Paused: 0 Stopped: 9 Images: 191 Server Version: 28.2.2 Storage Driver: overlay2 Backing Filesystem: extfs Supports d_type: true Using metacopy: false Native Overlay Diff: true userxattr: false Logging Driver: json-file Cgroup Driver: cgroupfs Cgroup Version: 2 Plugins: Volume: local Network: bridge host ipvlan macvlan null overlay Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog CDI spec directories: /etc/cdi /var/run/cdi Discovered Devices: cdi: docker.com/gpu=webgpu Swarm: inactive Runtimes: io.containerd.runc.v2 runc Default Runtime: runc Init Binary: docker-init containerd version: 05044ec0a9a75232cad458027ca83437aae3f4da runc version: v1.2.5-0-g59923ef init version: de40ad0 Security Options: seccomp Profile: builtin cgroupns Kernel Version: 6.10.14-linuxkit Operating System: Docker Desktop OSType: linux Architecture: aarch64 CPUs: 10 Total Memory: 7.654GiB Name: docker-desktop ID: 2885a756-9270-40a5-981a-948b243d9eda Docker Root Dir: /var/lib/docker Debug Mode: false HTTP Proxy: http.docker.internal:3128 HTTPS Proxy: http.docker.internal:3128 No Proxy: hubproxy.docker.internal Labels: com.docker.desktop.address=unix:///Users/lucalooz/Library/Containers/com.docker.docker/Data/docker-cli.sock Experimental: false Insecure Registries: hubproxy.docker.internal:5555 ::1/128 127.0.0.0/8 Live Restore Enabled: false WARNING: DOCKER_INSECURE_NO_IPTABLES_RAW is set ``` ### Diagnostics ID C6EC0647-6565-41AA-A156-4DF30DEDEC9F/20250623153428 ### Additional Info _No response_

The link will take you to the post of a contributor who shared a docker desktop release that fixes the issue.

But I guess you already knew that since I believe you commented there as well.

Topic		Replies	Views
Unable to get seccomp=unconfined working via API Docker Desktop macos	2	1709	November 12, 2018
Lock Down Docker for Mac Docker Desktop	0	1020	April 7, 2017
Can't Get Past: Docker for Mac needs privileged access to install its networking components and links to the Docker apps Docker Desktop docker , macos	27	27700	November 7, 2022
Latest version of Docker Desktop Macos very unstable Docker Desktop macos	3	2599	January 16, 2023
Is there a way to add/enable CONFIG_MODIFY_LDT_SYSCALL Docker Desktop macos	1	967	July 2, 2017

4.42.0 and io_uring

Related topics