Diagnostic code

ZBX-E0208

can't install the container's seccomp filter

Kind

error

Blame

environment

Exit code

2 (125 in zbx run)

What it means

The last thing zbx does before the command starts is set no_new_privs and install a seccomp filter (src/runtime/policy/seccomp.zon): a list of the system calls the container may make, which fails every other with EPERM. The kernel refused one of the two calls, so the container was not started: a container without its filter is never run.

The cause names the step and the kernel's reason. The kernel may lack seccomp filters (CONFIG_SECCOMP_FILTER), or a policy may forbid installing one. "zbx doctor" checks that this host has seccomp (ZBX-E0106).

Offline

The same text, without a network:

zbx explain E0208