fix: reproduce container needs --security-opt apparmor=unconfined for LXD #311

New issue

Closed

opened 2026-04-06 18:27:47 +00:00 by dev-bot · 0 comments

dev-bot commented

2026-04-06 18:27:47 +00:00

Collaborator

Problem

The reproduce container cannot execute any shell commands (exit code 126) when running inside LXD. Claude reports all Bash tool invocations fail with permission denied.

Root cause

Same as harb PR #1: Docker containers inside LXD need security_opt: [apparmor=unconfined] to create Unix sockets and execute binaries. The dispatcher in docker/edge/dispatcher.sh launches the reproduce container via docker run but does not pass --security-opt apparmor=unconfined.

Fix

In docker/edge/dispatcher.sh, the dispatch_reproduce() function builds the docker run command array. Add --security-opt apparmor=unconfined to the array:

local -a cmd=(docker run --rm
    --name "disinto-reproduce-${issue_number}"
    --network host
    --security-opt apparmor=unconfined
    ...

Files

docker/edge/dispatcher.sh — dispatch_reproduce() function, docker run command array

## Problem The reproduce container cannot execute any shell commands (exit code 126) when running inside LXD. Claude reports all Bash tool invocations fail with permission denied. ## Root cause Same as harb PR #1: Docker containers inside LXD need `security_opt: [apparmor=unconfined]` to create Unix sockets and execute binaries. The dispatcher in `docker/edge/dispatcher.sh` launches the reproduce container via `docker run` but does not pass `--security-opt apparmor=unconfined`. ## Fix In `docker/edge/dispatcher.sh`, the `dispatch_reproduce()` function builds the docker run command array. Add `--security-opt apparmor=unconfined` to the array: ```bash local -a cmd=(docker run --rm --name "disinto-reproduce-${issue_number}" --network host --security-opt apparmor=unconfined ... ``` ## Files - `docker/edge/dispatcher.sh` — `dispatch_reproduce()` function, docker run command array