moby: I can't execute the 'docker run' command to start a container in my CentOS, standard_init_linux.go:175: exec user process caused "permission denied"
Description:
a. I have 2 OS:
OS-A: is my company OpenStack CentOS 7
Linux version 3.10.0-327.el7.x86_64 (builder@kbuilder.dev.centos.org) (gcc version 4.8.3 20140911 (Red Hat 4.8.3-9) (GCC) ) #1 SMP Thu Nov 19 22:10:57 UTC 2015
OS-B: is my virtual machine in my Mac CentOS 7
Linux version 3.10.0-327.el7.x86_64 (builder@kbuilder.dev.centos.org) (gcc version 4.8.3 20140911 (Red Hat 4.8.3-9) (GCC) ) #1 SMP Thu Nov 19 22:10:57 UTC 2015
b. OS-A encounter an error when I run
[root@xxx appuser]# docker run -d -p 27017:27017 --name mongo-node2 myname/mongo
bf27ac1d2e27e81dbcdb5384e247b35dc5510026a6624d499edcd2eda31db82f
[root@xxx appuser]# docker logs ^C
[root@xxx appuser]# docker logs bf27ac1d2e27e81dbcdb5384e247b35dc5510026a6624d499edcd2eda31db82f
standard_init_linux.go:175: exec user process caused "permission denied"
but OS-B without any error
when I run docker ps
, I can’t not see any containers is running.
I try the -i -t
options to run:
[root@xxx appuser]# docker run -it -p 27017:27017 myname/mongo /bin/bash
standard_init_linux.go:175: exec user process caused "permission denied"
ERRO[4651] Handler for POST /v1.24/containers/007f3cf5507adb3a8a442400d7126c3ad015433d74dc287839c1b6cd461ddc2d/resize returned error: Container 007f3cf5507adb3a8a442400d7126c3ad015433d74dc287839c1b6cd461ddc2d is not running
I try the strace
command to trace:
[root@xxx appuser]# strace docker run -it -p 27017:27017 myname/mongo /bin/bash
execve("/bin/docker", ["docker", "run", "-it", "-p", "27017:27017", "myname/mongo", "/bin/bash"], [/* 20 vars */]) = 0
uname({sys="Linux", node="xxx.localdomain", ...}) = 0
brk(0) = 0x13c0000
brk(0x13c11c0) = 0x13c11c0
arch_prctl(ARCH_SET_FS, 0x13c0880) = 0
set_tid_address(0x13c0b50) = 2926
set_robust_list(0x13c0b60, 24) = 0
rt_sigaction(SIGRTMIN, {0xa19f50, [], SA_RESTORER|SA_SIGINFO, 0xa1a5a0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0xa19fe0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0xa1a5a0}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/usr/bin/docker", 4096) = 15
brk(0x13e21c0) = 0x13e21c0
brk(0x13e3000) = 0x13e3000
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
sched_getaffinity(0, 8192, {f, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, ...}) = 640
mmap(0xc000000000, 65536, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc000000000
munmap(0xc000000000, 65536) = 0
mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb8245d4000
mmap(0xc820000000, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc820000000
mmap(0xc81fff8000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc81fff8000
mmap(0xc000000000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc000000000
mmap(NULL, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb8245c4000
rt_sigprocmask(SIG_SETMASK, NULL, [], 8) = 0
sigaltstack(NULL, {ss_sp=0, ss_flags=SS_DISABLE, ss_size=0}) = 0
sigaltstack({ss_sp=0xc820002000, ss_flags=0, ss_size=32672}, NULL) = 0
gettid() = 2926
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGHUP, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGHUP, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGINT, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGINT, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGQUIT, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGQUIT, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGILL, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGILL, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGTRAP, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGTRAP, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGABRT, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGABRT, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGBUS, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGBUS, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGFPE, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGFPE, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGUSR1, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGUSR1, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGSEGV, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGSEGV, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGUSR2, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGUSR2, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGPIPE, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGPIPE, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGALRM, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGALRM, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGTERM, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGTERM, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGSTKFLT, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGSTKFLT, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGCHLD, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGURG, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGURG, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGXCPU, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGXCPU, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGXFSZ, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGXFSZ, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGVTALRM, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGVTALRM, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGPROF, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGPROF, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGWINCH, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGWINCH, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGIO, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGIO, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGPWR, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGPWR, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGSYS, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGSYS, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRTMIN, NULL, {0xa19f50, [], SA_RESTORER|SA_SIGINFO, 0xa1a5a0}, 8) = 0
rt_sigaction(SIGRTMIN, NULL, {0xa19f50, [], SA_RESTORER|SA_SIGINFO, 0xa1a5a0}, 8) = 0
rt_sigaction(SIGRTMIN, {0xa19f50, [], SA_RESTORER|SA_STACK|SA_SIGINFO, 0xa1a5a0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, NULL, {0xa19fe0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0xa1a5a0}, 8) = 0
rt_sigaction(SIGRT_1, NULL, {0xa19fe0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0xa1a5a0}, 8) = 0
rt_sigaction(SIGRT_1, {0xa19fe0, [], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0xa1a5a0}, NULL, 8) = 0
rt_sigaction(SIGRT_2, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_2, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_3, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_3, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_4, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_4, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_5, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_5, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_6, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_6, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_7, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_7, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_8, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_8, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_9, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_9, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_10, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_10, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_11, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_11, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_12, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_12, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_13, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_13, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_14, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_14, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_15, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_15, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_16, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_16, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_17, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_17, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_18, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_18, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_19, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_19, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_20, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_20, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_21, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_21, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_22, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_22, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_23, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_23, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_24, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_24, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_25, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_25, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_26, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_26, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_27, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_27, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_28, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_28, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_29, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_29, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_30, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_30, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_31, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_31, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigaction(SIGRT_32, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGRT_32, {0x461e10, ~[], SA_RESTORER|SA_STACK|SA_RESTART|SA_SIGINFO, 0x461e30}, NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1], [], 8) = 0
mmap(NULL, 8392704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb823dc3000
mprotect(0x7fb823dc3000, 4096, PROT_NONE) = 0
clone(child_stack=0x7fb8245c2e70, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x7fb8245c39d0, tls=0x7fb8245c3700, child_tidptr=0x7fb8245c39d0) = 2927
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb823d83000
rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1], [], 8) = 0
mmap(NULL, 8392704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb823582000
mprotect(0x7fb823582000, 4096, PROT_NONE) = 0
clone(child_stack=0x7fb823d81e70, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x7fb823d829d0, tls=0x7fb823d82700, child_tidptr=0x7fb823d829d0) = 2928
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1], [], 8) = 0
mmap(NULL, 8392704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb822d81000
mprotect(0x7fb822d81000, 4096, PROT_NONE) = 0
clone(child_stack=0x7fb823580e70, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x7fb8235819d0, tls=0x7fb823581700, child_tidptr=0x7fb8235819d0) = 2929
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0xc820028d08, FUTEX_WAKE, 1) = 1
futex(0x1395f08, FUTEX_WAIT, 0, NULL) = 0
futex(0xc820028908, FUTEX_WAKE, 1) = 1
ioctl(2, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
openat(AT_FDCWD, "/proc/sys/net/core/somaxconn", O_RDONLY|O_CLOEXEC) = 3
read(3, "128\n", 4096) = 4
read(3, "", 4092) = 0
close(3) = 0
socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 3
close(3) = 0
socket(PF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3
setsockopt(3, SOL_IPV6, IPV6_V6ONLY, [1], 4) = 0
bind(3, {sa_family=AF_INET6, sin6_port=htons(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0
socket(PF_INET6, SOCK_STREAM, IPPROTO_TCP) = 4
setsockopt(4, SOL_IPV6, IPV6_V6ONLY, [0], 4) = 0
bind(4, {sa_family=AF_INET6, sin6_port=htons(0), inet_pton(AF_INET6, "::ffff:127.0.0.1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0
close(4) = 0
close(3) = 0
mmap(0xc820100000, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc820100000
mmap(0xc81fff0000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc81fff0000
futex(0xc82005c108, FUTEX_WAKE, 1) = 1
mmap(0xc820200000, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc820200000
mmap(0xc81ffe8000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc81ffe8000
syscall_318(0xc8201e3a37, 0x1, 0x1, 0, 0, 0) = -1 (errno 38)
openat(AT_FDCWD, "/dev/urandom", O_RDONLY|O_CLOEXEC) = 3
read(3, "W\254\360\177\361\255\243\273\357\21i\16\236<n\332T\223\vx\344\3G,|\364\351\327\265\241\22s"..., 4096) = 4096
mmap(0xc820300000, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc820300000
mmap(0xc81ffe0000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc81ffe0000
stat("/root/.docker/config.json", 0xc820340ac8) = -1 ENOENT (No such file or directory)
futex(0x1395350, FUTEX_WAKE, 1) = 1
stat("/root/.dockercfg", 0xc820340b98) = -1 ENOENT (No such file or directory)
stat("/sbin/docker-credential-secretservice", 0xc820340c68) = -1 ENOENT (No such file or directory)
stat("/bin/docker-credential-secretservice", 0xc820340d38) = -1 ENOENT (No such file or directory)
stat("/usr/sbin/docker-credential-secretservice", 0xc820340e08) = -1 ENOENT (No such file or directory)
stat("/usr/bin/docker-credential-secretservice", 0xc820340ed8) = -1 ENOENT (No such file or directory)
ioctl(0, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
ioctl(1, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
futex(0xc820028908, FUTEX_WAKE, 1) = 1
socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
setsockopt(4, SOL_SOCKET, SO_BROADCAST, [1], 4) = 0
connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/docker.sock"}, 23) = 0
epoll_create1(EPOLL_CLOEXEC) = 5
epoll_ctl(5, EPOLL_CTL_ADD, 4, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=601431216, u64=140428852141232}}) = 0
getsockname(4, {sa_family=AF_LOCAL, NULL}, [2]) = 0
getpeername(4, {sa_family=AF_LOCAL, sun_path="/var/run/docker.sock"}, [23]) = 0
futex(0xc820028908, FUTEX_WAKE, 1) = 1
read(4, 0xc8202ff000, 4096) = -1 EAGAIN (Resource temporarily unavailable)
write(4, "POST /v1.24/containers/create HT"..., 1586) = 1586
futex(0xc820028d08, FUTEX_WAKE, 1) = 1
futex(0x1395f08, FUTEX_WAIT, 0, NULL) = 0
futex(0x1395f08, FUTEX_WAIT, 0, NULL) = 0
select(0, NULL, NULL, NULL, {0, 100}) = 0 (Timeout)
rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1], [], 8) = 0
mmap(NULL, 8392704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb820cfd000
mprotect(0x7fb820cfd000, 4096, PROT_NONE) = 0
clone(child_stack=0x7fb8214fce70, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x7fb8214fd9d0, tls=0x7fb8214fd700, child_tidptr=0x7fb8214fd9d0) = 2933
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x1395f08, FUTEX_WAIT, 0, NULLstandard_init_linux.go:175: exec user process caused "permission denied"
) = 0
epoll_wait(5, {}, 128, 0) = 0
futex(0xc8202fd508, FUTEX_WAKE, 1) = 1
epoll_wait(5, {}, 128, 0) = 0
epoll_wait(5, {{EPOLLOUT, {u32=601431216, u64=140428852141232}}}, 128, -1) = 1
epoll_wait(5, ERRO[4759] Handler for POST /v1.24/containers/746f1b737c74b01feffdf8d47bcb9655c33384a00fce950fa0a8678774f39918/resize returned error: rpc error: code = 2 desc = containerd: container not found
{{EPOLLIN|EPOLLOUT, {u32=601431216, u64=140428852141232}}}, 128, -1) = 1
futex(0x1395350, FUTEX_WAKE, 1) = 1
read(4, "HTTP/1.1 404 Not Found\r\nContent-"..., 4096) = 219
futex(0xc8202fd508, FUTEX_WAKE, 1) = 1
read(4, 0xc8202ff000, 4096) = -1 EAGAIN (Resource temporarily unavailable)
futex(0xc820028908, FUTEX_WAKE, 1) = 1
futex(0x1395f08, FUTEX_WAIT, 0, NULL <unfinished ...>
+++ exited with 1 +++
My OS-A docker info
result is :
docker info
Containers: 7
Running: 0
Paused: 0
Stopped: 7
Images: 1
Server Version: 1.12.1
Storage Driver: overlay
Backing Filesystem: extfs
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
Volume: local
Network: bridge host null overlay
Swarm: inactive
Runtimes: runc
Default Runtime: runc
Security Options: seccomp
Kernel Version: 3.10.0-327.el7.x86_64
Operating System: CentOS Linux 7 (Core)
OSType: linux
Architecture: x86_64
CPUs: 4
Total Memory: 3.702 GiB
Name: xxx.localdomain
ID: ULS4:K6MK:VKUT:IVAK:ICFM:JGYX:VJ3L:DTYW:YEJI:2OOV:WQ5W:2KEQ
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled
Insecure Registries:
127.0.0.0/8
My OS-B docker info
result is :
Containers: 1
Running: 1
Paused: 0
Stopped: 0
Images: 1
Server Version: 1.12.1
Storage Driver: overlay
Backing Filesystem: xfs
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
Volume: local
Network: null bridge host overlay
Swarm: inactive
Runtimes: runc
Default Runtime: runc
Security Options: seccomp
Kernel Version: 3.10.0-327.el7.x86_64
Operating System: CentOS Linux 7 (Core)
OSType: linux
Architecture: x86_64
CPUs: 2
Total Memory: 1.793 GiB
Name: centos-linux.shared
ID: DXYZ:FFIE:OSQS:ENNQ:JN4W:CKXD:72NJ:NO65:2AUN:WUKX:Z3NR:UTJ7
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled
Insecure Registries:
127.0.0.0/8
OS-A / OS-B is using the same docker binary tar package to installed.
Tutorial by official document https://docs.docker.com/engine/installation/binaries/
docker version
Client:
Version: 1.12.1
API version: 1.24
Go version: go1.6.3
Git commit: 23cf638
Built: Thu Aug 18 17:52:38 2016
OS/Arch: linux/amd64
Server:
Version: 1.12.1
API version: 1.24
Go version: go1.6.3
Git commit: 23cf638
Built: Thu Aug 18 17:52:38 2016
OS/Arch: linux/amd64
Can you help me?
About this issue
- Original URL
- State: closed
- Created 8 years ago
- Comments: 34 (18 by maintainers)
Hi everyone, This is maybe a bit late, but i had the same issue and this was happening because i was mounting the /var partition with the “noexec” option. Removing the “noexec” resolved the problem.
@jcf then removing should fix your issue indeed.
This is not the official docker package, sadly nothing we can do here other than to say please install the official package.
Most likely you need to run
chcon -t docker_exec_t /usr/bin/dockerd
and restart docker.I had the same problem. if you dockerize a static go binary make sure you add these build flags
go build -ldflags "-linkmode external -extldflags -static" .
otherwise ingo 1.7.4
by default it builds a dynamically linked binary. This is even more applicable if you are dockerizingFROM scratch