Rob Murray

Or, if you can [enable debugging](https://docs.docker.com/engine/daemon/logs/#enable-debugging) in Docker, and send the logs from a broken service starting up - perhaps we can find clues in that.

Thanks @iquito - a way to repro the issue would be ideal, there doesn't seem to be any issue with a simple compose file that just starts a couple of...

Thanks @dilbernd, > Processes report an errno = -11 when that happens. Any idea what system call is returning that errno? > The Issues seem to not be exclusively DNS...

Ok, the errno 11 is from name resolution - I wondered if it was related to the other issues you mentioned. So there may not be a non-DNS issue, we...

Thanks @blackadar ... I'm not able to reproduce the issue using that compose file - does it fail every time for you? Could you [enable debugging](https://docs.docker.com/engine/daemon/logs/#enable-debugging) and send the logs?

> After reviewing the changes between versions 27 and 28, I think 933fcc981418 ("Re-remove the SetKey OCI prestart hook") could be the root cause of this issue. Ah, ok -...

I just had a look at this ... Before 28.0.0, moby used the OCI "prestart" hook to re-exec and give itself a message that included the container task's pid. It...

Right, I see - thanks @avagin. With 27.x moby builds, on checkpoint restore the prestart hook is called when the task is started, rather than when it's created. So, in...

@avagin - does that sound right to you? If it does, I can open a containerd issue, but probably won't get a chance to dig in to it any further...

> [@robmry](https://github.com/robmry), this is a bit more complicated. containerd has other users (like k8s) who rely on its API. Because of this, any adjustments must be made with caution to...