failed to create shim OCI runtime create failed

[canberkgurel]

When I ran ~/src/jetson_vins_fusion_docker$ ./scripts/setup_jetson.sh

I got:

Docker configuration ...
 
[sudo] password for developer: 
groupadd: group 'docker' already exists
Adding user developer to group docker
Synchronizing state of docker.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install enable docker
 
Serial ports configuration (ttyTHS1) ...
 
 
Adding udev rules for /dev/ttyTHS* ...
 
KERNEL=="ttyTHS*", MODE="0666"
 
Disabling nvgetty ...
 

Install udev rules for Realsense D435...
Realsense udev Rules installed
 
Building Dockerfile.vins.gpu ...
 
reading L4T version from /etc/nv_tegra_release
L4T BSP Version:  L4T R32.5.2
l4t-base image:  nvcr.io/nvidia/l4t-base:r32.5.0
Building containers for melodic...
Building ros:melodic-ros-base-l4t-r32.5.2 container...
Sending build context to Docker daemon  282.1kB
Step 1/17 : ARG BASE_IMAGE=nvcr.io/nvidia/l4t-base:r32.5.0
Step 2/17 : FROM ${BASE_IMAGE}
 ---> d9141f00a2c3
Step 3/17 : ARG ROS_PKG=ros_base
 ---> Using cache
 ---> ec3716bdfe01
Step 4/17 : ENV ROS_DISTRO=melodic
 ---> Using cache
 ---> fdafbad3cf33
Step 5/17 : ENV ROS_ROOT=/opt/ros/${ROS_DISTRO}
 ---> Using cache
 ---> 5e86a8e56055
Step 6/17 : ENV DEBIAN_FRONTEND=noninteractive
 ---> Using cache
 ---> c84ee7847575
Step 7/17 : WORKDIR /workspace
 ---> Using cache
 ---> 8a888747948a
Step 8/17 : RUN apt-get update &&     apt-get install -y --no-install-recommends           git 		cmake 		build-essential 		curl 		wget 		gnupg2 		lsb-release 		ca-certificates     && rm -rf /var/lib/apt/lists/*
 ---> Running in 382e4b899c55
failed to create shim: OCI runtime create failed: container_linux.go:380: starting container process caused: error adding seccomp filter rule for syscall clone3: permission denied: unknown
 
Adding alias to .bashrc script ...
 
alias vins_container='source $HOME/src/jetson_vins_fusion_docker/scripts/docker_run_vins.sh'
 
#------------- You can run the VINS container from the terminal by executing vins_container -------------#
 
#------------- Please reboot your Jetson before running executing the vins_container alias, for some changes to take effect -------------#

For some reason, I'm getting the OCI runtime create failed error. My suspicion is that it's related to the docker version. See containerd/containerd#6203

@mzahana Did you run into this problem? Can you send me the result of dockerd --version?

Mine looks like this:

$uname -a
Linux KimNx 4.9.201-tegra #1 SMP PREEMPT Fri Jul 9 08:56:59 PDT 2021 aarch64 aarch64 aarch64 GNU/Linux
$dockerd -v
Docker version 20.10.7, build 20.10.7-0ubuntu5~18.04.3

[mzahana]

@canberkgurel I am not sure what this error is about. What compute board are you using?

[canberkgurel]

@mzahana Nvidia Jetson Xavier Nx