bitflicker64 commented on issue #3072:
URL: https://github.com/apache/hugegraph/issues/3072#issuecomment-4829012228

   Not a HugeGraph bug. The pthread_create failed (EPERM) is the Docker host's 
seccomp profile blocking the clone syscall the JVM needs to spawn GC threads at 
startup. The image uses standard container-aware JVM flags 
(-XX:+UseContainerSupport -XX:MaxRAMPercentage=50) on 
eclipse-temurin:11-jre-jammy, nothing here causing it.
   
   Fix is host-side:
   
   docker run -itd --name=hugegraph -p 8080:8080 --security-opt 
seccomp=unconfined hugegraph/hugegraph:1.7.0
   
   @jieguolove your second run with seccomp=unconfined came up fine (server 
started on 8080), so that confirms it.
   
   Two things we could improve for next time someone hits this:
   
   1. The Docker README has no troubleshooting section for startup failures. 
Adding one with the seccomp fix would save people a lot of head-scratching.
   
   2. The entrypoint could grep hs_err_pid*.log for the EPERM pattern after a 
failed startup and print a hint about the seccomp flag. Small change, saves 
real debugging time.
   
   can put up a pr but would increase code complications..


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to