Comment # 5 on bug 1130134 from Liang Yan

(In reply to Takashi Iwai from comment #4)
> At least, all flavors enable CONFIG_MEMBARRIER:
> 
Thanks for the confirmation. 

@Josua, the default seccomp file of docker doesn't allow membarrier, you can
try run docker with "--security-opt seccomp:unconfined", this will allow all
systemcall, or use your own seccomp file.  

Another possible solution is that using a qemu earlier than qemu-3.0 or just
use the default qemu from your container which is qemu-2.8.1.

Last, we may pass this bug to our caasp team, discuss the possibility of
allowing membarrier from there.