moby: Windows: docker pull microsoft/nanoserver failed to register layer: Failed to OpenForBackup failed in Win32
Description Fresh install of docker 17.06.1-ee-2 on a Windows Server 2016 Standard VM fails to pull images.
Additional environment details (AWS, VirtualBox, physical, etc.):
VM is hosted on a VMWare ESX host and has the following characteristics
- Windows Server 2016 Standard
- 4 cores
- 4 GB Memory
- two drives:
- a 40 GB Thin provisioned C: drive
- a 320 GB Thin provisioned E: drive.
- Windows Defender Enabled
- No other Antivirus software package installed.
- Windows Search Disabled.
Adding an Windows Defender exception for E:\ProgramData\Docker did not resolve the issue.
Disabling Windows Defender did not resolve the issue.
Steps taken to install docker
- Format E: drive as an NTFS drive, Create a E:\ProgramData\docker directory, and create a symlink from C:\ProgramData\docker to E:\ProgramData\docker.
$selectedDisk = Get-Disk -Number 1
$selectedDisk = $selectedDisk |
Initialize-Disk -PartitionStyle MBR -PassThru |
New-Partition -DriveLetter E -UseMaximumSize |
Format-Volume -FileSystem NTFS -NewFileSystemLabel Data -Confirm:$false
New-Item -ItemType Directory E:\ProgramData\Docker
New-Item -ItemType SymbolicLink -Name Docker -Target E:\ProgramData\Docker
- Install docker
$DockerMinimumVersion = '17.06.1-ee-1'
$NuGetPackageProviderVersion = '2.8.5.201'
Install-PackageProvider -Name NuGet -MinimumVersion $NuGetPackageProviderVersion -Force
Install-Module -Name DockerMsftProvider -Repository PSGallery -Force
Install-Package -Name docker -ProviderName DockerMsftProvider -MinimumVersion $DockerMinimumVersion -Force
Restart-Computer -Force
Steps to reproduce the issue:
- Attempt to pull a microsoft/nanoserver image.
docker pull microsoft/nanoserver
Describe the results you received:
PS C:\Windows\system32> docker pull microsoft/nanoserver
Using default tag: latest
latest: Pulling from microsoft/nanoserver
bce2fbc256ea: Extracting [==================================================>] 252.7MB/252.7MB
38cc73423ca1: Download complete
failed to register layer: re-exec error: exit status 1: output: Failed to OpenForBackup failed in Win32: open \\?\E:\ProgramData\Docker\windowsfilter\9b78f5a9a7378940dcfe1b38c70f51244e5b9ae48c6813fc0a5b9db726a96672\Files: Access is denied.
(0x1f) \\?\E:\ProgramData\Docker\windowsfilter\9b78f5a9a7378940dcfe1b38c70f51244e5b9ae48c6813fc0a5b9db726a96672\Files
PS C:\Windows\system32>
Describe the results you expected:
PS C:\WINDOWS\system32> docker pull microsoft/nanoserver
Using default tag: latest
latest: Pulling from microsoft/nanoserver
bce2fbc256ea: Pull complete
38cc73423ca1: Pull complete
Digest: sha256:0ac4b5bb8e23c5145fdae8b6a19e8b2456816d7b23b208a45e2471468cbae743
Status: Downloaded newer image for microsoft/nanoserver:latest
Additional information you deem important (e.g. issue happens only occasionally):
Output of docker version:
PS C:\Windows\system32> docker version
Client:
Version: 17.06.1-ee-2
API version: 1.30
Go version: go1.8.3
Git commit: 8e43158
Built: Wed Aug 23 21:16:53 2017
OS/Arch: windows/amd64
Server:
Version: 17.06.1-ee-2
API version: 1.30 (minimum version 1.24)
Go version: go1.8.3
Git commit: 8e43158
Built: Wed Aug 23 21:25:53 2017
OS/Arch: windows/amd64
Experimental: false
PS C:\Windows\system32>
Output of docker info:
PS C:\Windows\system32> docker info
Containers: 0
Running: 0
Paused: 0
Stopped: 0
Images: 0
Server Version: 17.06.1-ee-2
Storage Driver: windowsfilter
Windows:
Logging Driver: json-file
Plugins:
Volume: local
Network: l2bridge l2tunnel nat null overlay transparent
Log: awslogs etwlogs fluentd json-file logentries splunk syslog
Swarm: inactive
Default Isolation: process
Kernel Version: 10.0 14393 (14393.1593.amd64fre.rs1_release.170731-1934)
Operating System: Windows Server 2016 Standard
OSType: windows
Architecture: x86_64
CPUs: 4
Total Memory: 4GiB
Name: us01qe2utl01
ID: QLBG:NSUQ:BLTE:2DKT:HJZY:FNKW:7AFW:H7GU:7BC3:7565:AOOV:OJGD
Docker Root Dir: E:\ProgramData\Docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: false
PS C:\Windows\system32>
Output of Debug-ContainerHost.ps1
PS C:\Windows\system32> iex (Invoke-Webrequest -UseBasicParsing https://raw.githubusercontent.com/MicrosoftDocs/Virtuali
zation-Documentation/live/windows-server-container-tools/Debug-ContainerHost/Debug-ContainerHost.ps1)
Checking for common problems
Describing Windows Version and Prerequisites
[+] Is Windows 10 Anniversary Update or Windows Server 2016 152ms
[+] Has KB3192366, KB3194496, or later installed if running Windows build 14393 68ms
[+] Is not a build with blocking issues 63ms
[+] Has 'Containers' feature installed 9.33s
Describing Docker is installed
[+] A Docker service is installed - 'Docker' or 'com.Docker.Service' 125ms
[+] Service is running 83ms
[+] Docker.exe is in path 2.16s
[+] Docker is registered in the EventLog service 99ms
Describing User has permissions to use Docker daemon
[+] docker.exe should not return access denied 100ms
Describing Windows container settings are correct
[+] Do not have DisableVSmbOplock set to 1 119ms
[+] Do not have zz values set 95ms
[+] Do not have FDVDenyWriteAccess set to 1 113ms
Describing The right container base images are installed
[-] At least one of 'microsoft/windowsservercore' or 'microsoft/nanoserver' should be installed 270ms
ValidationMetadataException: The argument is null or empty. Provide an argument that is not null or empty, and then try the com
mand again.
ParameterBindingValidationException: Cannot validate argument on parameter 'Property'. The argument is null or empty. Provide a
n argument that is not null or empty, and then try the command again.
at <ScriptBlock>, <No file>: line 115
Describing Container network is created
[+] At least one local container network is available 2.28s
[+] At least one NAT, Transparent, or L2Bridge Network exists 82ms
[+] NAT Network's vSwitch is internal 84ms
[+] A Windows NAT is configured if a Docker NAT network exists 153ms
[+] Specified Network Gateway IP for NAT network is assigned to Host vNIC 160ms
[+] NAT Network's internal prefix does not overlap with external IP' 78ms
Output from Windows Event log with Docker Daemon in Debug Mode
Index TimeWritten Message
----- ----------- -------
1680 9/11/2017 9:03:00 AM Windows default isolation mode: process
1681 9/11/2017 9:03:00 AM [graphdriver] using prior storage driver: windowsfilter
1682 9/11/2017 9:03:00 AM Graph migration to content-addressability took 0.00 seconds
1683 9/11/2017 9:03:00 AM Loading containers: start.
1684 9/11/2017 9:03:00 AM Restoring existing overlay networks from HNS into docker
1685 9/11/2017 9:03:00 AM Loading containers: done.
1686 9/11/2017 9:03:00 AM Daemon has completed initialization
1687 9/11/2017 9:03:00 AM Docker daemon [version=17.06.1-ee-2 commit=8e43158 graphdriver=windowsfilter]
1688 9/11/2017 9:03:00 AM API listen on //./pipe/docker_engine
1689 9/11/2017 9:07:41 AM Windows default isolation mode: process
1690 9/11/2017 9:07:41 AM [graphdriver] using prior storage driver: windowsfilter
1691 9/11/2017 9:07:41 AM Graph migration to content-addressability took 0.00 seconds
1692 9/11/2017 9:07:41 AM Loading containers: start.
1693 9/11/2017 9:07:41 AM Restoring existing overlay networks from HNS into docker
1694 9/11/2017 9:07:41 AM Loading containers: done.
1695 9/11/2017 9:07:41 AM Daemon has completed initialization
1696 9/11/2017 9:07:41 AM Docker daemon [commit=8e43158 graphdriver=windowsfilter version=17.06.1-ee-2]
1697 9/11/2017 9:07:41 AM API listen on //./pipe/docker_engine
1698 9/11/2017 9:12:08 AM Attempting next endpoint for pull after error: failed to register layer: re-exec error: exit status 1: output: Failed to OpenForBackup failed in Win32: open \\?\E:\ProgramData\Docker\windowsfilter\89a789265a781790cf14e5bfa091ae370dc7b39e4abd361b7df94dd74cc1385b\Files: Access is denied. (0x1f) \\?\E:\ProgramData\Docker\windowsfilter\89a789265a781790cf14e5bfa091ae370dc7b39e4abd361b7df94dd74cc1385b\Files
1699 9/11/2017 9:20:39 AM debug: Listener created for HTTP on npipe (//./pipe/docker_engine)
1700 9/11/2017 9:20:39 AM debug: Service running
1701 9/11/2017 9:20:39 AM debug: Stackdump - waiting signal at Global\docker-daemon-5484
1702 9/11/2017 9:20:39 AM Windows default isolation mode: process
1703 9/11/2017 9:20:39 AM debug: Using default logging driver json-file
1704 9/11/2017 9:20:39 AM debug: WindowsGraphDriver InitFilter at E:\ProgramData\Docker\windowsfilter
1705 9/11/2017 9:20:39 AM [graphdriver] using prior storage driver: windowsfilter
1706 9/11/2017 9:20:39 AM debug: Using graph driver windowsfilter
1707 9/11/2017 9:20:39 AM debug: Max Concurrent Downloads: 3
1708 9/11/2017 9:20:39 AM debug: Max Concurrent Uploads: 5
1709 9/11/2017 9:20:39 AM Graph migration to content-addressability took 0.00 seconds
1710 9/11/2017 9:20:39 AM Loading containers: start.
1711 9/11/2017 9:20:39 AM debug: Option Experimental: false
1712 9/11/2017 9:20:39 AM debug: Option DefaultDriver: nat
1713 9/11/2017 9:20:39 AM debug: Option DefaultNetwork: nat
1714 9/11/2017 9:20:39 AM Restoring existing overlay networks from HNS into docker
1715 9/11/2017 9:20:39 AM debug: [GET]=>[/networks/] Request :
1716 9/11/2017 9:20:39 AM debug: Network Response : [ { "CurrentEndpointCount" : 0, "ExternalInterfaceAddress" : "00-50-56-B2-48-87", "ExternalInterfaceIndex" : 4, "ID" : "c70b5766-d81d-4ded-94f6-4b8918d40930", "MacPools" : [ { "EndMacAddress" : "00-15-5D-45-AF-FF", "StartMacAddress" : "00-15-5D-45-A0-00" } ], "MaxConcurrentEndpoints" : 0, "NATName" : "Hc70b5766-d81d-4ded-94f6-4b8918d40930", "Name" : "nat", "Policies" : [ ], "Subnets" : [ { "AddressPrefix" : "172.18.32.0/20", "GatewayAddress" : "172.18.32.1" } ], "SwitchGuid" : "9e3dffed-b552-491c-b891-c1b5d6ecbef2", "TotalEndpoints" : 0, "Type" : "nat", "Version" : 4294967297 } ]
1717 9/11/2017 9:20:39 AM debug: Network (4ec70b2) restored
1718 9/11/2017 9:20:39 AM debug: [GET]=>[/networks/] Request :
1719 9/11/2017 9:20:39 AM debug: Network Response : [ { "CurrentEndpointCount" : 0, "ExternalInterfaceAddress" : "00-50-56-B2-48-87", "ExternalInterfaceIndex" : 4, "ID" : "c70b5766-d81d-4ded-94f6-4b8918d40930", "MacPools" : [ { "EndMacAddress" : "00-15-5D-45-AF-FF", "StartMacAddress" : "00-15-5D-45-A0-00" } ], "MaxConcurrentEndpoints" : 0, "NATName" : "Hc70b5766-d81d-4ded-94f6-4b8918d40930", "Name" : "nat", "Policies" : [ ], "Subnets" : [ { "AddressPrefix" : "172.18.32.0/20", "GatewayAddress" : "172.18.32.1" } ], "SwitchGuid" : "9e3dffed-b552-491c-b891-c1b5d6ecbef2", "TotalEndpoints" : 0, "Type" : "nat", "Version" : 4294967297 } ]
1720 9/11/2017 9:20:39 AM debug: Launching DNS server for network%!(EXTRA string=none)
1721 9/11/2017 9:20:39 AM debug: releasing IPv4 pools from network nat (4ec70b2bcb6d9e6e56ada77a5225ad1291b7536eb11cb6be143f6c2da75d1981)
1722 9/11/2017 9:20:39 AM debug: ReleaseAddress(172.18.32.0/20, 172.18.32.1)
1723 9/11/2017 9:20:39 AM debug: ReleasePool(172.18.32.0/20)
1724 9/11/2017 9:20:39 AM debug: cleanupServiceBindings for 4ec70b2bcb6d9e6e56ada77a5225ad1291b7536eb11cb6be143f6c2da75d1981
1725 9/11/2017 9:20:39 AM debug: Allocating IPv4 pools for network nat (e566c610a3873cc6e792fc44ec69ed629397318c7303f1037547bdf94d0b6ab7)
1726 9/11/2017 9:20:39 AM debug: RequestPool(LocalDefault, 172.18.32.0/20, , map[], false)
1727 9/11/2017 9:20:39 AM debug: RequestAddress(172.18.32.0/20, 172.18.32.1, map[RequestAddressType:com.docker.network.gateway])
1728 9/11/2017 9:20:39 AM debug: Launching DNS server for network%!(EXTRA string=nat)
1729 9/11/2017 9:20:39 AM debug: [GET]=>[/networks/c70b5766-d81d-4ded-94f6-4b8918d40930] Request :
1730 9/11/2017 9:20:39 AM debug: Network Response : { "CurrentEndpointCount" : 0, "ExternalInterfaceAddress" : "00-50-56-B2-48-87", "ExternalInterfaceIndex" : 4, "ID" : "c70b5766-d81d-4ded-94f6-4b8918d40930", "MacPools" : [ { "EndMacAddress" : "00-15-5D-45-AF-FF", "StartMacAddress" : "00-15-5D-45-A0-00" } ], "MaxConcurrentEndpoints" : 0, "NATName" : "Hc70b5766-d81d-4ded-94f6-4b8918d40930", "Name" : "nat", "Policies" : [ ], "Subnets" : [ { "AddressPrefix" : "172.18.32.0/20", "GatewayAddress" : "172.18.32.1" } ], "SwitchGuid" : "9e3dffed-b552-491c-b891-c1b5d6ecbef2", "TotalEndpoints" : 0, "Type" : "nat", "Version" : 4294967297 }
1731 9/11/2017 9:20:39 AM debug: Binding a resolver on network nat gateway 172.18.32.1
1732 9/11/2017 9:20:39 AM debug: Resolver bound successfully for network nat
1733 9/11/2017 9:20:39 AM Loading containers: done.
1734 9/11/2017 9:20:39 AM Daemon has completed initialization
1735 9/11/2017 9:20:39 AM Docker daemon [version=17.06.1-ee-2 commit=8e43158 graphdriver=windowsfilter]
1736 9/11/2017 9:20:39 AM debug: Registering routers
1737 9/11/2017 9:20:39 AM debug: Registering GET, /containers/{name:.*}/checkpoints
1738 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/checkpoints
1739 9/11/2017 9:20:39 AM debug: Registering DELETE, /containers/{name}/checkpoints/{checkpoint}
1740 9/11/2017 9:20:39 AM debug: Registering HEAD, /containers/{name:.*}/archive
1741 9/11/2017 9:20:39 AM debug: Registering GET, /containers/json
1742 9/11/2017 9:20:39 AM debug: Registering GET, /containers/{name:.*}/export
1743 9/11/2017 9:20:39 AM debug: Registering GET, /containers/{name:.*}/changes
1744 9/11/2017 9:20:39 AM debug: Registering GET, /containers/{name:.*}/json
1745 9/11/2017 9:20:39 AM debug: Registering GET, /containers/{name:.*}/top
1746 9/11/2017 9:20:39 AM debug: Registering GET, /containers/{name:.*}/logs
1747 9/11/2017 9:20:39 AM debug: Registering GET, /containers/{name:.*}/stats
1748 9/11/2017 9:20:39 AM debug: Registering GET, /containers/{name:.*}/attach/ws
1749 9/11/2017 9:20:39 AM debug: Registering GET, /exec/{id:.*}/json
1750 9/11/2017 9:20:39 AM debug: Registering GET, /containers/{name:.*}/archive
1751 9/11/2017 9:20:39 AM debug: Registering POST, /containers/create
1752 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/kill
1753 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/pause
1754 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/unpause
1755 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/restart
1756 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/start
1757 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/stop
1758 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/wait
1759 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/resize
1760 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/attach
1761 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/copy
1762 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/exec
1763 9/11/2017 9:20:39 AM debug: Registering POST, /exec/{name:.*}/start
1764 9/11/2017 9:20:39 AM debug: Registering POST, /exec/{name:.*}/resize
1765 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/rename
1766 9/11/2017 9:20:39 AM debug: Registering POST, /containers/{name:.*}/update
1767 9/11/2017 9:20:39 AM debug: Registering POST, /containers/prune
1768 9/11/2017 9:20:39 AM debug: Registering PUT, /containers/{name:.*}/archive
1769 9/11/2017 9:20:39 AM debug: Registering DELETE, /containers/{name:.*}
1770 9/11/2017 9:20:39 AM debug: Registering GET, /images/json
1771 9/11/2017 9:20:39 AM debug: Registering GET, /images/search
1772 9/11/2017 9:20:39 AM debug: Registering GET, /images/get
1773 9/11/2017 9:20:39 AM debug: Registering GET, /images/{name:.*}/get
1774 9/11/2017 9:20:39 AM debug: Registering GET, /images/{name:.*}/history
1775 9/11/2017 9:20:39 AM debug: Registering GET, /images/{name:.*}/json
1776 9/11/2017 9:20:39 AM debug: Registering POST, /commit
1777 9/11/2017 9:20:39 AM debug: Registering POST, /images/load
1778 9/11/2017 9:20:39 AM debug: Registering POST, /images/create
1779 9/11/2017 9:20:39 AM debug: Registering POST, /images/{name:.*}/push
1780 9/11/2017 9:20:39 AM debug: Registering POST, /images/{name:.*}/tag
1781 9/11/2017 9:20:39 AM debug: Registering POST, /images/prune
1782 9/11/2017 9:20:39 AM debug: Registering DELETE, /images/{name:.*}
1783 9/11/2017 9:20:39 AM debug: Registering OPTIONS, /{anyroute:.*}
1784 9/11/2017 9:20:39 AM debug: Registering GET, /_ping
1785 9/11/2017 9:20:39 AM debug: Registering GET, /events
1786 9/11/2017 9:20:39 AM debug: Registering GET, /info
1787 9/11/2017 9:20:39 AM debug: Registering GET, /version
1788 9/11/2017 9:20:39 AM debug: Registering GET, /system/df
1789 9/11/2017 9:20:39 AM debug: Registering POST, /auth
1790 9/11/2017 9:20:39 AM debug: Registering GET, /volumes
1791 9/11/2017 9:20:39 AM debug: Registering GET, /volumes/{name:.*}
1792 9/11/2017 9:20:39 AM debug: Registering POST, /volumes/create
1793 9/11/2017 9:20:39 AM debug: Registering POST, /volumes/prune
1794 9/11/2017 9:20:39 AM debug: Registering DELETE, /volumes/{name:.*}
1795 9/11/2017 9:20:39 AM debug: Registering POST, /build
1796 9/11/2017 9:20:39 AM debug: Registering POST, /swarm/init
1797 9/11/2017 9:20:39 AM debug: Registering POST, /swarm/join
1798 9/11/2017 9:20:39 AM debug: Registering POST, /swarm/leave
1799 9/11/2017 9:20:39 AM debug: Registering GET, /swarm
1800 9/11/2017 9:20:39 AM debug: Registering GET, /swarm/unlockkey
1801 9/11/2017 9:20:39 AM debug: Registering POST, /swarm/update
1802 9/11/2017 9:20:39 AM debug: Registering POST, /swarm/unlock
1803 9/11/2017 9:20:39 AM debug: Registering GET, /services
1804 9/11/2017 9:20:39 AM debug: Registering GET, /services/{id}
1805 9/11/2017 9:20:39 AM debug: Registering POST, /services/create
1806 9/11/2017 9:20:39 AM debug: Registering POST, /services/{id}/update
1807 9/11/2017 9:20:39 AM debug: Registering DELETE, /services/{id}
1808 9/11/2017 9:20:39 AM debug: Registering GET, /services/{id}/logs
1809 9/11/2017 9:20:39 AM debug: Registering GET, /nodes
1810 9/11/2017 9:20:39 AM debug: Registering GET, /nodes/{id}
1811 9/11/2017 9:20:39 AM debug: Registering DELETE, /nodes/{id}
1812 9/11/2017 9:20:39 AM debug: Registering POST, /nodes/{id}/update
1813 9/11/2017 9:20:39 AM debug: Registering GET, /tasks
1814 9/11/2017 9:20:39 AM debug: Registering GET, /tasks/{id}
1815 9/11/2017 9:20:39 AM debug: Registering GET, /tasks/{id}/logs
1816 9/11/2017 9:20:39 AM debug: Registering GET, /secrets
1817 9/11/2017 9:20:39 AM debug: Registering POST, /secrets/create
1818 9/11/2017 9:20:39 AM debug: Registering DELETE, /secrets/{id}
1819 9/11/2017 9:20:39 AM debug: Registering GET, /secrets/{id}
1820 9/11/2017 9:20:39 AM debug: Registering POST, /secrets/{id}/update
1821 9/11/2017 9:20:39 AM debug: Registering GET, /configs
1822 9/11/2017 9:20:39 AM debug: Registering POST, /configs/create
1823 9/11/2017 9:20:39 AM debug: Registering DELETE, /configs/{id}
1824 9/11/2017 9:20:39 AM debug: Registering GET, /configs/{id}
1825 9/11/2017 9:20:39 AM debug: Registering POST, /configs/{id}/update
1826 9/11/2017 9:20:39 AM debug: Registering GET, /plugins
1827 9/11/2017 9:20:39 AM debug: Registering GET, /plugins/{name:.*}/json
1828 9/11/2017 9:20:39 AM debug: Registering GET, /plugins/privileges
1829 9/11/2017 9:20:39 AM debug: Registering DELETE, /plugins/{name:.*}
1830 9/11/2017 9:20:39 AM debug: Registering POST, /plugins/{name:.*}/enable
1831 9/11/2017 9:20:39 AM debug: Registering POST, /plugins/{name:.*}/disable
1832 9/11/2017 9:20:39 AM debug: Registering POST, /plugins/pull
1833 9/11/2017 9:20:39 AM debug: Registering POST, /plugins/{name:.*}/push
1834 9/11/2017 9:20:39 AM debug: Registering POST, /plugins/{name:.*}/upgrade
1835 9/11/2017 9:20:39 AM debug: Registering POST, /plugins/{name:.*}/set
1836 9/11/2017 9:20:39 AM debug: Registering POST, /plugins/create
1837 9/11/2017 9:20:39 AM debug: Registering GET, /distribution/{name:.*}/json
1838 9/11/2017 9:20:39 AM debug: Registering GET, /networks
1839 9/11/2017 9:20:39 AM debug: Registering GET, /networks/
1840 9/11/2017 9:20:39 AM debug: Registering GET, /networks/{id:.+}
1841 9/11/2017 9:20:39 AM debug: Registering POST, /networks/create
1842 9/11/2017 9:20:39 AM debug: Registering POST, /networks/{id:.*}/connect
1843 9/11/2017 9:20:39 AM debug: Registering POST, /networks/{id:.*}/disconnect
1844 9/11/2017 9:20:39 AM debug: Registering POST, /networks/prune
1845 9/11/2017 9:20:39 AM debug: Registering DELETE, /networks/{id:.*}
1846 9/11/2017 9:20:39 AM API listen on //./pipe/docker_engine
1847 9/11/2017 9:20:39 AM debug: Config reload - waiting signal at Global\docker-daemon-config-5484
1848 9/11/2017 9:20:43 AM debug: Calling GET /_ping
1849 9/11/2017 9:20:43 AM debug: Calling GET /v1.30/info
1850 9/11/2017 9:20:58 AM debug: Calling GET /_ping
1851 9/11/2017 9:20:58 AM debug: Calling GET /v1.30/info
1852 9/11/2017 9:20:58 AM debug: Calling POST /v1.30/images/create?fromImage=microsoft%2Fnanoserver&tag=latest
1853 9/11/2017 9:20:58 AM debug: Trying to pull microsoft/nanoserver from https://registry-1.docker.io v2
1854 9/11/2017 9:20:59 AM debug: Pulling ref from V2 registry: microsoft/nanoserver:latest
1855 9/11/2017 9:21:00 AM debug: pulling blob "sha256:38cc73423ca1d089e2e2374a8baf65d25d3792b22a22263c702f22f85bea6d4c"
1856 9/11/2017 9:21:00 AM debug: pulling blob "sha256:bce2fbc256ea437a87dadac2f69aabd25bed4f56255549090056c1131fad0277"
1857 9/11/2017 9:21:00 AM debug: Pulling sha256:38cc73423ca1d089e2e2374a8baf65d25d3792b22a22263c702f22f85bea6d4c from foreign URL https://go.microsoft.com/fwlink/?linkid=854454
1858 9/11/2017 9:21:00 AM debug: Pulling sha256:bce2fbc256ea437a87dadac2f69aabd25bed4f56255549090056c1131fad0277 from foreign URL https://go.microsoft.com/fwlink/?linkid=837858
1859 9/11/2017 9:22:49 AM debug: Downloaded 38cc73423ca1 to tempfile C:\Windows\TEMP\GetImageBlob181638479
1860 9/11/2017 9:23:39 AM debug: Downloaded bce2fbc256ea to tempfile C:\Windows\TEMP\GetImageBlob249360994
1861 9/11/2017 9:23:39 AM debug: hcsshim::CreateLayer Flavour 1 ID 57f96fedd5999e418a00c965d798fc2cd71fd07eb084eb61154b9cb23d3f2e41 parent
1862 9/11/2017 9:23:39 AM debug: hcsshim::CreateLayer - succeeded id=57f96fedd5999e418a00c965d798fc2cd71fd07eb084eb61154b9cb23d3f2e41 parent= flavour=1
1863 9/11/2017 9:23:39 AM debug: Cleaning up layer 57f96fedd5999e418a00c965d798fc2cd71fd07eb084eb61154b9cb23d3f2e41: re-exec error: exit status 1: output: Failed to OpenForBackup failed in Win32: open \\?\E:\ProgramData\Docker\windowsfilter\57f96fedd5999e418a00c965d798fc2cd71fd07eb084eb61154b9cb23d3f2e41\Files: Access is denied. (0x1f) \\?\E:\ProgramData\Docker\windowsfilter\57f96fedd5999e418a00c965d798fc2cd71fd07eb084eb61154b9cb23d3f2e41\Files
1864 9/11/2017 9:23:39 AM debug: HCSShim::GetContainers query={}
1865 9/11/2017 9:23:39 AM debug: HCSShim::GetContainers succeeded
1866 9/11/2017 9:23:39 AM debug: hcsshim::DestroyLayer Flavour 1 ID 57f96fedd5999e418a00c965d798fc2cd71fd07eb084eb61154b9cb23d3f2e41-removing
1867 9/11/2017 9:23:39 AM debug: hcsshim::DestroyLayer succeeded flavour=1 id=57f96fedd5999e418a00c965d798fc2cd71fd07eb084eb61154b9cb23d3f2e41-removing
1868 9/11/2017 9:23:39 AM Attempting next endpoint for pull after error: failed to register layer: re-exec error: exit status 1: output: Failed to OpenForBackup failed in Win32: open \\?\E:\ProgramData\Docker\windowsfilter\57f96fedd5999e418a00c965d798fc2cd71fd07eb084eb61154b9cb23d3f2e41\Files: Access is denied. (0x1f) \\?\E:\ProgramData\Docker\windowsfilter\57f96fedd5999e418a00c965d798fc2cd71fd07eb084eb61154b9cb23d3f2e41\Files
1869 9/11/2017 9:34:11 AM debug: start clean shutdown of all containers with a 15 seconds timeout...
1870 9/11/2017 9:34:11 AM debug: Clean shutdown succeeded
1871 9/11/2017 9:34:11 AM debug: Stopping service: <nil>
1872 9/11/2017 9:34:18 AM Windows default isolation mode: process
1873 9/11/2017 9:34:18 AM [graphdriver] using prior storage driver: windowsfilter
1874 9/11/2017 9:34:18 AM Graph migration to content-addressability took 0.00 seconds
1875 9/11/2017 9:34:18 AM Loading containers: start.
1876 9/11/2017 9:34:18 AM Restoring existing overlay networks from HNS into docker
1877 9/11/2017 9:34:18 AM Loading containers: done.
1878 9/11/2017 9:34:18 AM Daemon has completed initialization
1879 9/11/2017 9:34:18 AM Docker daemon [graphdriver=windowsfilter version=17.06.1-ee-2 commit=8e43158]
1880 9/11/2017 9:34:18 AM API listen on //./pipe/docker_engine
About this issue
- Original URL
- State: open
- Created 7 years ago
- Comments: 44 (3 by maintainers)
I have fixed this issue by myself , Look here https://blog.csdn.net/shoneworn/article/details/80621120 . I have mark it with my blog .
It was so dumb, but now I know what the problem is thanks to my colleague! If you remove this local security policy setting, disable Portable devices (your extra drive) and restart your server, it works like a charm.
@estenrye I think you can also just do this:
Not sure how enabling and disabling Bitlocker would fix the issue. I think the bigger problem we’ve encountered is that on the Windows Server 2016 product line you are stuck with docker 17.06. In order to get the later versions of docker, you actually have to switch to Windows Server 1709, which is a Core only product.