moby: I can't execute the 'docker run' command to start a container in my CentOS, standard_init_linux.go:175: exec user process caused "permission denied"

Description:

a. I have 2 OS：

OS-A: is my company OpenStack CentOS 7

Linux version 3.10.0-327.el7.x86_64 (builder@kbuilder.dev.centos.org) (gcc version 4.8.3 20140911 (Red Hat 4.8.3-9) (GCC) ) #1 SMP Thu Nov 19 22:10:57 UTC 2015

OS-B: is my virtual machine in my Mac CentOS 7

Linux version 3.10.0-327.el7.x86_64 (builder@kbuilder.dev.centos.org) (gcc version 4.8.3 20140911 (Red Hat 4.8.3-9) (GCC) ) #1 SMP Thu Nov 19 22:10:57 UTC 2015

b. OS-A encounter an error when I run

[root@xxx appuser]# docker run -d -p 27017:27017 --name mongo-node2 myname/mongo
bf27ac1d2e27e81dbcdb5384e247b35dc5510026a6624d499edcd2eda31db82f
[root@xxx appuser]# docker logs ^C
[root@xxx appuser]# docker logs bf27ac1d2e27e81dbcdb5384e247b35dc5510026a6624d499edcd2eda31db82f
standard_init_linux.go:175: exec user process caused "permission denied"

but OS-B without any error

when I run docker ps, I can’t not see any containers is running.

I try the -i -t options to run:

[root@xxx appuser]# docker run -it -p 27017:27017  myname/mongo /bin/bash
standard_init_linux.go:175: exec user process caused "permission denied"
ERRO[4651] Handler for POST /v1.24/containers/007f3cf5507adb3a8a442400d7126c3ad015433d74dc287839c1b6cd461ddc2d/resize returned error: Container 007f3cf5507adb3a8a442400d7126c3ad015433d74dc287839c1b6cd461ddc2d is not running

I try the strace command to trace:

[root@xxx appuser]# strace docker run -it -p 27017:27017  myname/mongo /bin/bash
execve("/bin/docker", ["docker", "run", "-it", "-p", "27017:27017", "myname/mongo", "/bin/bash"], [/* 20 vars */]) = 0
uname({sys="Linux", node="xxx.localdomain", ...}) = 0
brk(0)                                  = 0x13c0000
brk(0x13c11c0)                          = 0x13c11c0
arch_prctl(ARCH_SET_FS, 0x13c0880)      = 0
set_tid_address(0x13c0b50)              = 2926
set_robust_list(0x13c0b60, 24)          = 0
rt_sigaction(SIGRTMIN, {0xa19f50, [], SA_RESTORER|SA_SIGINFO, 0xa1a5a0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0xa19fe0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0xa1a5a0}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/usr/bin/docker", 4096) = 15
brk(0x13e21c0)                          = 0x13e21c0
brk(0x13e3000)                          = 0x13e3000
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
sched_getaffinity(0, 8192, {f, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, ...}) = 640
mmap(0xc000000000, 65536, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc000000000
munmap(0xc000000000, 65536)             = 0
mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb8245d4000
mmap(0xc820000000, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc820000000
mmap(0xc81fff8000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc81fff8000
mmap(0xc000000000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc000000000
mmap(NULL, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb8245c4000
rt_sigprocmask(SIG_SETMASK, NULL, [], 8) = 0
sigaltstack(NULL, {ss_sp=0, ss_flags=SS_DISABLE, ss_size=0}) = 0
sigaltstack({ss_sp=0xc820002000, ss_flags=0, ss_size=32672}, NULL) = 0
gettid()                                = 2926
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGHUP, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGHUP, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGINT, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGINT, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGQUIT, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGQUIT, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGILL, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGILL, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGTRAP, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGTRAP, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGABRT, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGABRT, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGBUS, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGBUS, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGFPE, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGFPE, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGUSR1, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGUSR1, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGSEGV, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGSEGV, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGUSR2, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGUSR2, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGPIPE, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGPIPE, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGALRM, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGALRM, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGTERM, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGTERM, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGSTKFLT, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGSTKFLT, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGCHLD, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGURG, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGURG, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGXCPU, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGXCPU, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGXFSZ, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGXFSZ, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGVTALRM, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGVTALRM, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGPROF, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGPROF, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGWINCH, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGWINCH, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGIO, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGIO, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGPWR, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGPWR, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGSYS, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGSYS, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRTMIN, NULL, {0xa19f50, [], SA_RESTORER|SA_SIGINFO, 0xa1a5a0}, 8) = 0
rt_sigaction(SIGRTMIN, NULL, {0xa19f50, [], SA_RESTORER|SA_SIGINFO, 0xa1a5a0}, 8) = 0
rt_sigaction(SIGRTMIN, {0xa19f50, [], SA_RESTORER|SA_STACK|SA_SIGINFO, 0xa1a5a0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, NULL, {0xa19fe0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0xa1a5a0}, 8) = 0
rt_sigaction(SIGRT_1, NULL, {0xa19fe0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0xa1a5a0}, 8) = 0
rt_sigaction(SIGRT_1, {0xa19fe0, [], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0xa1a5a0}, NULL, 8) = 0
rt_sigaction(SIGRT_2, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_2, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_3, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_3, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_4, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_4, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_5, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_5, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_6, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_6, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_7, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_7, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_8, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_8, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_9, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_9, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_10, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_10, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_11, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_11, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_12, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_12, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_13, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_13, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_14, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_14, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_15, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_15, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_16, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_16, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_17, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_17, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_18, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_18, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_19, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_19, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_20, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_20, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_21, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_21, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_22, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_22, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_23, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_23, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_24, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_24, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_25, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_25, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_26, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_26, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_27, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_27, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_28, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_28, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_29, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_29, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_30, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_30, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_31, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_31, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_32, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_32, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1], [], 8) = 0
mmap(NULL, 8392704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb823dc3000
mprotect(0x7fb823dc3000, 4096, PROT_NONE) = 0
clone(child_stack=0x7fb8245c2e70, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x7fb8245c39d0, tls=0x7fb8245c3700, child_tidptr=0x7fb8245c39d0) = 2927
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb823d83000
rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1], [], 8) = 0
mmap(NULL, 8392704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb823582000
mprotect(0x7fb823582000, 4096, PROT_NONE) = 0
clone(child_stack=0x7fb823d81e70, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x7fb823d829d0, tls=0x7fb823d82700, child_tidptr=0x7fb823d829d0) = 2928
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1], [], 8) = 0
mmap(NULL, 8392704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb822d81000
mprotect(0x7fb822d81000, 4096, PROT_NONE) = 0
clone(child_stack=0x7fb823580e70, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x7fb8235819d0, tls=0x7fb823581700, child_tidptr=0x7fb8235819d0) = 2929
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0xc820028d08, FUTEX_WAKE, 1)      = 1
futex(0x1395f08, FUTEX_WAIT, 0, NULL)   = 0
futex(0xc820028908, FUTEX_WAKE, 1)      = 1
ioctl(2, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
openat(AT_FDCWD, "/proc/sys/net/core/somaxconn", O_RDONLY|O_CLOEXEC) = 3
read(3, "128\n", 4096)                  = 4
read(3, "", 4092)                       = 0
close(3)                                = 0
socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 3
close(3)                                = 0
socket(PF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3
setsockopt(3, SOL_IPV6, IPV6_V6ONLY, [1], 4) = 0
bind(3, {sa_family=AF_INET6, sin6_port=htons(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0
socket(PF_INET6, SOCK_STREAM, IPPROTO_TCP) = 4
setsockopt(4, SOL_IPV6, IPV6_V6ONLY, [0], 4) = 0
bind(4, {sa_family=AF_INET6, sin6_port=htons(0), inet_pton(AF_INET6, "::ffff:127.0.0.1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0
close(4)                                = 0
close(3)                                = 0
mmap(0xc820100000, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc820100000
mmap(0xc81fff0000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc81fff0000
futex(0xc82005c108, FUTEX_WAKE, 1)      = 1
mmap(0xc820200000, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc820200000
mmap(0xc81ffe8000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc81ffe8000
syscall_318(0xc8201e3a37, 0x1, 0x1, 0, 0, 0) = -1 (errno 38)
openat(AT_FDCWD, "/dev/urandom", O_RDONLY|O_CLOEXEC) = 3
read(3, "W\254\360\177\361\255\243\273\357\21i\16\236<n\332T\223\vx\344\3G,|\364\351\327\265\241\22s"..., 4096) = 4096
mmap(0xc820300000, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc820300000
mmap(0xc81ffe0000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc81ffe0000
stat("/root/.docker/config.json", 0xc820340ac8) = -1 ENOENT (No such file or directory)
futex(0x1395350, FUTEX_WAKE, 1)         = 1
stat("/root/.dockercfg", 0xc820340b98)  = -1 ENOENT (No such file or directory)
stat("/sbin/docker-credential-secretservice", 0xc820340c68) = -1 ENOENT (No such file or directory)
stat("/bin/docker-credential-secretservice", 0xc820340d38) = -1 ENOENT (No such file or directory)
stat("/usr/sbin/docker-credential-secretservice", 0xc820340e08) = -1 ENOENT (No such file or directory)
stat("/usr/bin/docker-credential-secretservice", 0xc820340ed8) = -1 ENOENT (No such file or directory)
ioctl(0, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
ioctl(1, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
futex(0xc820028908, FUTEX_WAKE, 1)      = 1
socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
setsockopt(4, SOL_SOCKET, SO_BROADCAST, [1], 4) = 0
connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/docker.sock"}, 23) = 0
epoll_create1(EPOLL_CLOEXEC)            = 5
epoll_ctl(5, EPOLL_CTL_ADD, 4, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=601431216, u64=140428852141232}}) = 0
getsockname(4, {sa_family=AF_LOCAL, NULL}, [2]) = 0
getpeername(4, {sa_family=AF_LOCAL, sun_path="/var/run/docker.sock"}, [23]) = 0
futex(0xc820028908, FUTEX_WAKE, 1)      = 1
read(4, 0xc8202ff000, 4096)             = -1 EAGAIN (Resource temporarily unavailable)
write(4, "POST /v1.24/containers/create HT"..., 1586) = 1586
futex(0xc820028d08, FUTEX_WAKE, 1)      = 1
futex(0x1395f08, FUTEX_WAIT, 0, NULL)   = 0
futex(0x1395f08, FUTEX_WAIT, 0, NULL)   = 0
                                           select(0, NULL, NULL, NULL, {0, 100})   = 0 (Timeout)
                                                                                                rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1], [], 8) = 0
                                                                                                                                                     mmap(NULL, 8392704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb820cfd000
                                                                                 mprotect(0x7fb820cfd000, 4096, PROT_NONE) = 0
                                                                                                                              clone(child_stack=0x7fb8214fce70, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x7fb8214fd9d0, tls=0x7fb8214fd700, child_tidptr=0x7fb8214fd9d0) = 2933
                                     rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
                                                                                 futex(0x1395f08, FUTEX_WAIT, 0, NULLstandard_init_linux.go:175: exec user process caused "permission denied"
)   = 0
       epoll_wait(5, {}, 128, 0)               = 0
                                                  futex(0xc8202fd508, FUTEX_WAKE, 1)      = 1
                                                                                             epoll_wait(5, {}, 128, 0)               = 0
                                                                                                                                        epoll_wait(5, {{EPOLLOUT, {u32=601431216, u64=140428852141232}}}, 128, -1) = 1
                                            epoll_wait(5, ERRO[4759] Handler for POST /v1.24/containers/746f1b737c74b01feffdf8d47bcb9655c33384a00fce950fa0a8678774f39918/resize returned error: rpc error: code = 2 desc = containerd: container not found 
                                                                                 {{EPOLLIN|EPOLLOUT, {u32=601431216, u64=140428852141232}}}, 128, -1) = 1
                                                                                                                                                         futex(0x1395350, FUTEX_WAKE, 1)         = 1
                          read(4, "HTTP/1.1 404 Not Found\r\nContent-"..., 4096) = 219
                                                                                      futex(0xc8202fd508, FUTEX_WAKE, 1)      = 1
                                                                                                                                 read(4, 0xc8202ff000, 4096)             = -1 EAGAIN (Resource temporarily unavailable)
                                             futex(0xc820028908, FUTEX_WAKE, 1)      = 1
futex(0x1395f08, FUTEX_WAIT, 0, NULL <unfinished ...>
+++ exited with 1 +++

My OS-A docker info result is :

 docker info
Containers: 7
 Running: 0
 Paused: 0
 Stopped: 7
Images: 1
Server Version: 1.12.1
Storage Driver: overlay
 Backing Filesystem: extfs
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
 Volume: local
 Network: bridge host null overlay
Swarm: inactive
Runtimes: runc
Default Runtime: runc
Security Options: seccomp
Kernel Version: 3.10.0-327.el7.x86_64
Operating System: CentOS Linux 7 (Core)
OSType: linux
Architecture: x86_64
CPUs: 4
Total Memory: 3.702 GiB
Name: xxx.localdomain
ID: ULS4:K6MK:VKUT:IVAK:ICFM:JGYX:VJ3L:DTYW:YEJI:2OOV:WQ5W:2KEQ
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled
Insecure Registries:
 127.0.0.0/8

My OS-B docker info result is :

Containers: 1
 Running: 1
 Paused: 0
 Stopped: 0
Images: 1
Server Version: 1.12.1
Storage Driver: overlay
 Backing Filesystem: xfs
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
 Volume: local
 Network: null bridge host overlay
Swarm: inactive
Runtimes: runc
Default Runtime: runc
Security Options: seccomp
Kernel Version: 3.10.0-327.el7.x86_64
Operating System: CentOS Linux 7 (Core)
OSType: linux
Architecture: x86_64
CPUs: 2
Total Memory: 1.793 GiB
Name: centos-linux.shared
ID: DXYZ:FFIE:OSQS:ENNQ:JN4W:CKXD:72NJ:NO65:2AUN:WUKX:Z3NR:UTJ7
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled
Insecure Registries:
 127.0.0.0/8

OS-A / OS-B is using the same docker binary tar package to installed.

Tutorial by official document https://docs.docker.com/engine/installation/binaries/

 docker version
Client:
 Version:      1.12.1
 API version:  1.24
 Go version:   go1.6.3
 Git commit:   23cf638
 Built:        Thu Aug 18 17:52:38 2016
 OS/Arch:      linux/amd64

Server:
 Version:      1.12.1
 API version:  1.24
 Go version:   go1.6.3
 Git commit:   23cf638
 Built:        Thu Aug 18 17:52:38 2016
 OS/Arch:      linux/amd64

Can you help me?

About this issue

  • Original URL
  • State: closed
  • Created 8 years ago
  • Comments: 34 (18 by maintainers)

Most upvoted comments

Hi everyone, This is maybe a bit late, but i had the same issue and this was happening because i was mounting the /var partition with the “noexec” option. Removing the “noexec” resolved the problem.

+5
Mo3m3n on Dec 26, 2016

@jcf then removing should fix your issue indeed.

+4
mlaventure on Jan 4, 2017

This is not the official docker package, sadly nothing we can do here other than to say please install the official package.

Most likely you need to run chcon -t docker_exec_t /usr/bin/dockerd and restart docker.

+1
cpuguy83 on Mar 18, 2017

I had the same problem. if you dockerize a static go binary make sure you add these build flags go build -ldflags "-linkmode external -extldflags -static" . otherwise in go 1.7.4 by default it builds a dynamically linked binary. This is even more applicable if you are dockerizing FROM scratch

+1
dhilipkumars on Feb 16, 2017
Read more comments on GitHub
← moby: https://get.docker.io/ubuntu breaks apt-cacher
moby: I can’t login docker hub by command →