slim: Error in docker-slim build

docker:

Client: Docker Engine - Community Version: 18.09.0 API version: 1.39 Go version: go1.10.4 Git commit: 4d60db4 Built: Wed Nov 7 00:47:43 2018 OS/Arch: darwin/amd64 Experimental: false

Server: Docker Engine - Community Engine: Version: 18.09.0 API version: 1.39 (minimum version 1.12) Go version: go1.10.4 Git commit: 4d60db4 Built: Wed Nov 7 00:55:00 2018 OS/Arch: linux/amd64 Experimental: false

docker-slim version:

darwin|Tetra|1.22-1-g2b02487|2b02487d633ef0b974978ab1a8a2fed099226ad6|2018-12-27_11:17:50AM (go1.11.4)

Binary files appeared in /usr/local/bin directory

After run command docker-slim --debug build --http-probe --include-path /etc/passwd php:7.3-cli fails with error

The path /usr/local/bin/docker-slim-sensor
is not shared from OS X and is not known to Docker.
You can configure shared paths from Docker -> Preferences... -> File Sharing.
See https://docs.docker.com/docker-for-mac/osxfs/#namespaces for more info.``` 

About this issue

  • Original URL
  • State: closed
  • Created 6 years ago
  • Comments: 21 (11 by maintainers)

Most upvoted comments

1.24.2 is out 😃

There’ll be 1.24.2 released in the next day, so there’s no need to wait for 1.25 😃

The enhancement is in… and it will be available in the next release (1.25) or you can build it yourself if you don’t want to wait 😃

@Ladicle turns out it’s related to how Docker for Mac shares its local files with the VM. If you open the File Sharing tab in Docker Preferences you’ll see a list of directories it shares, so you can mount files from any of these directories or sub-directories. /usr/loca/bin/ is not on the list and if you try to add it (or its parent, /usr/local/) it won’t do it saying that the path is reserved by Docker…

I’ll add a little hack to detect the /usr/local/bin installation on Macs, so the master copies the sensor app to the /tmp directory (one of the shared directories by default) setting the state path to the same location too.

Thanks for the reference @Ladicle! Wonder if it’s security related somehow. Doesn’t look like it’s limited to Mojave (I was able to repro it with an older version of Mac OS X (10.11)).