Docker OCI runtime error on ECR Task (KodeKloud Engineer)

Cloud AWS
#1

Hello Support Team,

I am experiencing a system-level issue with a KodeKloud Engineer lab instance that prevents me from completing the task. Docker is failing to start containers due to an OCI runtime cgroup permission issue.

  • Task Name: Elastic Container Registry / Push image to ECR
  • Error Message: docker: Error response from daemon: OCI runtime create failed: container_linux.go:377: starting container process caused: process_linux.go:495: container init caused: process_linux.go:458: setting cgroup config for procHooks process caused: can’t load program: operation not permitted: unknown.

Steps to Reproduce:

  1. Log into the aws-client host.
  2. Attempt to run any Docker container (e.g., docker run hello-world).
  3. The runtime error immediately kills the context.

It looks like the backend VM host/kernel configuration is blocking nested cgroup v2 BPF programs for runc. Could you please look into resetting this lab environment or fixing the node permissions?

Screenshot (1662)
Screenshot (1662)1366×768 181 KB

Thank you!

#2

Could you please share the lab URL or Level of the Domain and lab number in Kodekloud Engineer?

Did you try adding sudo to the command?

#3

I am facing the same issue, its a lab of Day 28 of 100 days of cloud AWS.
and i tried it with sudo, it didnt worked

#4

same issue was reported before

and

According to these its an lab enviroment issue

#5

This appears to be a recurrence of a problem fixed a few months back. OK, we send in the lab team to fix it again :slight_smile: Sorry for the hassle.

#6

Our engineer just fixed this one; thanks for reporting this.

1 Like
#7

Thanks for the support @rob_kodekloud