@zygoon@kde@lemmy.kde.social@kde kernel 3.10 was released more than 10 years ago and received a last update in 2017. Is that really a kernel still used in the wild?
@zygoon@carlschwan@kde@lemmy.kde.social@kde@floss.social It's likely coming from some usage of libseccomp somewhere. This also afflicts the container stack and such, which is why RHEL 9 containers on RHEL 7 are not supported.
Container/sandbox runtimes using libseccomp need to explicitly always allow clone3() through, or otherwise it will not fail correctly on RHEL 7.
@zygoon@carlschwan@kde@lemmy.kde.social@kde@floss.social The clone3() call is done implicitly and automatically by glibc. It started witih glibc 2.34. This is most likely a problem in the Ubuntu Core runtime that KDE snaps are built on.
@zygoon@carlschwan@kde@lemmy.kde.social@kde@floss.social The clone3() call is done implicitly and automatically by glibc. It started with glibc 2.34. This is most likely a problem in the Ubuntu Core 22 runtime that KDE snaps are built on.
The fix is to patch out the logic that uses it for clone() in Ubuntu's glibc.