Sysbox Build sysbox-build-20260127-10

ContainAI Sysbox Build

Custom sysbox-ce build from master branch with the openat2 fix for runc 1.3.3+ compatibility.

What's included

This build includes the fix for the Docker-in-Docker compatibility issue with runc 1.3.3+:

• sysbox-fs commit 1302a6f: "Trap openat2 system call to allow access to sysbox-fs mounts under /proc and /sys"
• Follow-up improvements and hardening commits

The fix uses seccomp syscall interception to trap openat2() calls and strip problematic flags (RESOLVE_NO_XDEV, RESOLVE_NO_MAGICLINKS, RESOLVE_NO_SYMLINKS, RESOLVE_BENEATH) when accessing sysbox-fs mounts.

Installation

# Download the appropriate package for your architecture
wget <deb-url>

# Install (may need to fix dependencies)
sudo dpkg -i sysbox-ce_*.deb
sudo apt-get install -f -y

# Verify installation
sysbox-runc --version

Checksums

322a6a50144dac3245c69d7d416f623effdf29e289ac586935f083af23866627  sysbox-ce_0.6.7+containai.20260127.linux_amd64.deb
22c7cc9bcf48780e92c81918c6865f39cfd863fd5dae39a518834b0abf3496bd  sysbox-ce_0.6.7+containai.20260127.linux_arm64.deb

References

• sysbox#973 - Docker 28.5.2 breaks DinD on Sysbox
• runc v1.3.3 - Release with security patches

---

Built by ContainAI CI

Sysbox Build sysbox-build-20260126-7

ContainAI Sysbox Build

Custom sysbox-ce build from master branch with the openat2 fix for runc 1.3.3+ compatibility.

What's included

This build includes the fix for the Docker-in-Docker compatibility issue with runc 1.3.3+:

• sysbox-fs commit 1302a6f: "Trap openat2 system call to allow access to sysbox-fs mounts under /proc and /sys"
• Follow-up improvements and hardening commits

The fix uses seccomp syscall interception to trap openat2() calls and strip problematic flags (RESOLVE_NO_XDEV, RESOLVE_NO_MAGICLINKS, RESOLVE_NO_SYMLINKS, RESOLVE_BENEATH) when accessing sysbox-fs mounts.

Installation

# Download the appropriate package for your architecture
wget <deb-url>

# Install (may need to fix dependencies)
sudo dpkg -i sysbox-ce_*.deb
sudo apt-get install -f -y

# Verify installation
sysbox-runc --version

Checksums

13ee21efe71bdc1fe55815ef17cdf5d5b6bc648f97a0ce83c8b9c6593cabe204  sysbox-ce_0.6.7+containai.20260126.linux_amd64.deb
9694441efee2d727bedae404270b041718bc70be696fceeae5233cec1bdad6fc  sysbox-ce_0.6.7+containai.20260126.linux_arm64.deb

References

• sysbox#973 - Docker 28.5.2 breaks DinD on Sysbox
• runc v1.3.3 - Release with security patches

---

Built by ContainAI CI