What version of libcap is installed on your Amazon Linux AMI?
Also can you give me the output of:

• echo '#include <linux/types.h>' | gcc -E - | grep __u64
• echo '#include <sys/prctl.h>' | gcc -E - | grep __u64

from libnvidia-container.

The Linux AMI version is 4.9.62-21.56.amzn1.x86_64. It was built in September.

Libcap

Version of libcap is at 2.16:

[ec2-user]# yum info packagename libcap
Loaded plugins: priorities, update-motd, upgrade-helper
Installed Packages
Name        : libcap
Arch        : x86_64
Version     : 2.16
Release     : 5.5.8.amzn1
Size        : 63 k
Repo        : installed
Summary     : Library for getting and setting POSIX.1e capabilities
URL         : http://ftp.kernel.org/pub/linux/libs/security/linux-privs/kernel-2.6/
License     : LGPLv2+ or BSD
Description : libcap is a library for getting and setting POSIX.1e (formerly POSIX 6)
            : draft 15 capabilities.

Available Packages
Name        : libcap
Arch        : i686
Version     : 2.16
Release     : 5.5.8.amzn1
Size        : 33 k
Repo        : amzn-main/2017.09
Summary     : Library for getting and setting POSIX.1e capabilities
URL         : http://ftp.kernel.org/pub/linux/libs/security/linux-privs/kernel-2.6/
License     : LGPLv2+ or BSD
Description : libcap is a library for getting and setting POSIX.1e (formerly POSIX 6)
            : draft 15 capabilities.

Header Information

• echo '#include <linux/types.h>' | gcc -E - | grep __u64

[ec2-user]# echo '#include <linux/types.h>' | gcc -E - | grep __u64
__extension__ typedef unsigned long long __u64;
typedef __u64 __le64;
typedef __u64 __be64;

• echo '#include <sys/prctl.h>' | gcc -E - | grep __u64

[ec2-user]# echo '#include <sys/prctl.h>' | gcc -E - | grep __u64
__extension__ typedef unsigned long long __u64;
typedef __u64 __le64;
typedef __u64 __be64;
 __u64 start_code;
 __u64 end_code;
 __u64 start_data;
 __u64 end_data;
 __u64 start_brk;
 __u64 brk;
 __u64 start_stack;
 __u64 arg_start;
 __u64 arg_end;
 __u64 env_start;
 __u64 env_end;
 __u64 *auxv;

from libnvidia-container.

Closing since this configuration is not officially supported and Amazon Linux 2 LTS fixed these issues anyway.

from libnvidia-container.

As noted in NVIDIA/nvidia-docker#553 this affects the latest Amazon ECS Optimized AMIs. What about this configuration is not officially supported? The versions, or just the Amazon Linux part of it? I was unable to find any reference in the repo on what was/was not officially supported.

from libnvidia-container.

Amazon Linux 2 should work fine. If it doesn't, I'll fix it.

from libnvidia-container.

Unfortunately there is no ECS optimized Amazon Linux 2 AMI, probably because it is still a release candidate. The ecs-init package does not work on Amazon Linux 2 yet, again probably due to the early stages of it.

I am assuming they need to retrofit for systemd, among other things. In looking for cap_get_bound it seems that the Amazon repo has libcap-devel 2.16 (or, in Amazon land libcap-devel-2.16-5.5.8.amzn1.x86_64) and not ≥2.21, where that function was added.

from libnvidia-container.

@mzsanford This should fix the issue.
We will probably release packages as well for the next release of nvidia-docker.

from libnvidia-container.