| Summary: | [extras-rhel-7.2.7] Docker daemon returns header text/plain instead of application/json | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Praveen Kumar <prkumar> | ||||||
| Component: | docker | Assignee: | Lokesh Mandvekar <lsm5> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | atomic-bugs <atomic-bugs> | ||||||
| Severity: | urgent | Docs Contact: | |||||||
| Priority: | high | ||||||||
| Version: | 7.2 | CC: | ajia, ddarrah, lfriedma, lmohanty, lsm5, misalunk, optak, pep, prkumar, rgrunber, sghosh, veillard, vkadlcik, xcoulon | ||||||
| Target Milestone: | rc | Keywords: | Extras | ||||||
| Target Release: | --- | ||||||||
| Hardware: | Unspecified | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | docker-1.10.3-46.el7.14 | Doc Type: | If docs needed, set a value | ||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | |||||||||
| : | 1371266 (view as bug list) | Environment: | |||||||
| Last Closed: | 2016-09-15 08:30:51 UTC | Type: | Bug | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Attachments: |
|
||||||||
|
Description
Praveen Kumar
2016-08-22 10:03:46 UTC
can you, by any means, try to replicate this behavior with the upstream docker 1.10.3 version? (just to narrow this issue down to one of our patches if the issue is there) This seems similar to Bug 1243999. That one was filed against Docker 1.7 and fixed in 1.8. The bug links to the fix that was applied to upstream docker master. This is an issue with Authz docker subsystem - reported upstream https://github.com/docker/docker/issues/25927 - now working with them on a fix Created attachment 1193558 [details]
Fix response issue
Created attachment 1193559 [details]
Fix response issue
I tested it with upstream patch and did a scratch build which works as expected. https://brewweb.engineering.redhat.com/brew/taskinfo?taskID=11652247 , Please do tag build for same so we can consume it. Yeah, once it's reviewed and merged I'll backport the fix to 1.10.3 and 1.12.1 and update in Fedora. Patch backported to 1.10.3 branches and 1.12 - now building, moving to modified Antonio, what is the build NVR ? If that was built do you have an errata to push this on QE etc ... Daniel I'm pretty certain that commit hasn't been included yet if it was recently merged into projectatomic/docker. I could do a new build once I have PM ack on this. I tried to connect to the local Docker daemon then list images between docker-1.10.3-46.el7.10.x86_64 and docker-1.10.3-46.el7.14.x86_64, it works well for me. 1. on docker-1.10.3-46.el7.10.x86_64 w/ curl-7.29.0-32.el7.x86_64 * About to connect() to http port 80 (#0) * Trying /var/run/docker.sock... * Failed to set TCP_KEEPIDLE on fd 3 * Failed to set TCP_KEEPINTVL on fd 3 * Connected to http (/var/run/docker.sock) port 80 (#0) > GET /images/json HTTP/1.1 > User-Agent: curl/7.29.0 > Host: http > Accept: */* > < HTTP/1.1 200 OK < Date: Wed, 31 Aug 2016 02:00:37 GMT < Content-Type: text/plain; charset=utf-8 < Transfer-Encoding: chunked <ignore .../> 2. on docker-1.10.3-46.el7.14.x86_64 w/ curl-7.29.0-32.el7.x86_64 * About to connect() to http port 80 (#0) * Trying /var/run/docker.sock... * Failed to set TCP_KEEPIDLE on fd 3 * Failed to set TCP_KEEPINTVL on fd 3 * Connected to http (/var/run/docker.sock) port 80 (#0) > GET /images/json HTTP/1.1 > User-Agent: curl/7.29.0 > Host: http > Accept: */* > < HTTP/1.1 200 OK < Content-Type: application/json < Server: Docker/1.10.3 (linux) < Date: Wed, 31 Aug 2016 02:05:54 GMT < Transfer-Encoding: chunked <ignore .../> NOTE: the Content-Type is application/json not text/plain now. Praveen, could you give a double check in your real work environment, thanks in advance. I tested with docker-common-1.10.3-46.el7.14.x86_64 and this is now resolved. ➜ cdk curl --cacert $DOCKER_CERT_PATH/ca.pem --cert $DOCKER_CERT_PATH/cert.pfx --pass supersecret -v https://172.28.128.4:2376/containers/json * Hostname was NOT found in DNS cache * Trying 172.28.128.4... * Connected to 172.28.128.4 (172.28.128.4) port 2376 (#0) * WARNING: SSL: Certificate type not set, assuming PKCS#12 format. * Client certificate: client * WARNING: using IP address, SNI is being disabled by the OS. * TLS 1.2 connection using TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA * Server certificate: example.com * Server certificate: example.com > GET /containers/json HTTP/1.1 > User-Agent: curl/7.37.1 > Host: 172.28.128.4:2376 > Accept: */* > < HTTP/1.1 200 OK < Content-Type: application/json * Server Docker/1.10.3 (linux) is not blacklisted < Server: Docker/1.10.3 (linux) < Date: Wed, 31 Aug 2016 06:34:39 GMT < Transfer-Encoding: chunked *** Bug 1368140 has been marked as a duplicate of this bug. *** Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-1827.html *** Bug 1373123 has been marked as a duplicate of this bug. *** |