{"record":{"id":"d6f0bab2cb7131c0","repo":"firecracker-microvm/firecracker","slug":"failed-to-set-the-requested-seccomp-filters-on-the","errorCode":null,"errorMessage":"Failed to set the requested seccomp filters on the API thread: {}","messagePattern":"Failed to set the requested seccomp filters on the API thread: (.+?)","errorType":"panic","errorClass":null,"httpStatus":null,"severity":"error","filePath":"src/firecracker/src/api_server/mod.rs","lineNumber":78,"sourceCode":"    /// * `path` - the socket path on which the server will wait for requests.\n    /// * `start_time_us` - the timestamp for when the process was started in us.\n    /// * `start_time_cpu_us` - the timestamp for when the process was started in CPU us.\n    /// * `seccomp_filter` - the seccomp filter to apply.\n    pub fn run(\n        &mut self,\n        mut server: HttpServer,\n        process_time_reporter: ProcessTimeReporter,\n        seccomp_filter: BpfProgramRef,\n        api_payload_limit: usize,\n    ) {\n        // Set the api payload size limit.\n        server.set_payload_max_size(api_payload_limit);\n\n        // Load seccomp filters on the API thread.\n        // Execution panics if filters cannot be loaded, use --no-seccomp if skipping filters\n        // altogether is the desired behaviour.\n        if let Err(err) = vmm::seccomp::apply_filter(seccomp_filter) {\n            panic!(\n                \"Failed to set the requested seccomp filters on the API thread: {}\",\n                err\n            );\n        }\n\n        server.start_server().expect(\"Cannot start HTTP server\");\n        info_unrestricted!(\"API server started.\");\n\n        // Store process start time metric.\n        process_time_reporter.report_start_time();\n        // Store process CPU start time metric.\n        process_time_reporter.report_cpu_start_time();\n\n        loop {\n            let request_vec = match server.requests() {\n                Ok(vec) => vec,\n                Err(ServerError::ShutdownEvent) => {\n                    server.flush_outgoing_writes();","sourceCodeStart":60,"sourceCodeEnd":96,"githubUrl":"https://github.com/firecracker-microvm/firecracker/blob/cc535f035f3828b2c5bfc85276c5d394022ed220/src/firecracker/src/api_server/mod.rs#L60-L96","documentation":"Error \"Failed to set the requested seccomp filters on the API thread: {}\" thrown in firecracker-microvm/firecracker.","triggerScenarios":"Thrown at src/firecracker/src/api_server/mod.rs:78 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Verify the seccomp filter supplied to the API thread is valid BPF and covers exactly the syscalls the API server uses.","Confirm the process may install seccomp filters (no_new_privs set or CAP_SYS_ADMIN) and check audit logs for the failing syscall."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"cc535f035f3828b2c5bfc85276c5d394022ed220","analyzedAt":"2026-08-19T05:27:02.517Z","contentChangedAt":"2026-08-19T05:27:02.517Z","schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}