✘Bad system call

[Gary E. Miller]

Yo All!

A quick search shows that clone3() and seccomp do not play well together:

https://lwn.net/Articles/1035215/

The recommendation is to use clone() instead.  Except ntpsec does not use
clone3().  It is the libc doing that.

This is breaking Docker and other container types.

When Docker figures out how to fix this, without patching their seccomp
files, we'll have an idea how to proceed.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
	gem at rellim.com  Tel:+1 541 382 8588

	    Veritas liberabit vos. -- Quid est veritas?
    "If you can't measure it, you can't improve it." - Lord Kelvin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 246 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ntpsec.org/pipermail/devel/attachments/20251026/e00edab2/attachment.bin>