Bug 1504742

Summary:	Error starting daemon: opening seccomp profile (/etc/docker/seccomp.json) failed: open /etc/docker/seccomp.json: no such file or directory
Product:	[Fedora] Fedora	Reporter:	Micah Abbott <miabbott>
Component:	docker	Assignee:	Daniel Walsh <dwalsh>
Status:	CLOSED DUPLICATE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	27	CC:	adimania, admiller, amurdaca, dustymabe, dwalsh, fkluknav, ichavero, jcajka, lsm5, marianne, nalin, santiago, vbatts
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-10-20 14:15:20 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Micah Abbott 2017-10-20 14:07:16 UTC

Our automated tests caught this error when upgrading a Fedora 27 Atomic Host to the latest commit on the 'testing' branch:

# rpm-ostree status
State: idle
Deployments:
● custom:fedora/27/x86_64/testing/atomic-host
                   Version: 27.13 (2017-10-19 15:44:07)
                    Commit: 54322b3ae67b7079dc123a98f61d55898c33f8278802209aa86b0a135026bba9


# rpm -q docker
docker-1.13.1-33.git790e958.fc27.x86_64

# systemctl status docker
● docker.service - Docker Application Container Engine
   Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled; vendor preset: disabled)
   Active: inactive (dead) (Result: protocol) since Fri 2017-10-20 14:01:27 UTC; 3min 50s ago
     Docs: http://docs.docker.com
  Process: 1317 ExecStart=/usr/bin/dockerd-current --add-runtime oci=/usr/libexec/docker/docker-runc-current --default-runtime=oci --authorization-plugin=rhel-push-plugin --containerd /run/containerd.sock --exec
 Main PID: 1317 (code=exited, status=1/FAILURE)

Oct 20 14:01:27 micah-f26ah-vm1020a.localdomain systemd[1]: docker.service: Unit entered failed state.
Oct 20 14:01:27 micah-f26ah-vm1020a.localdomain systemd[1]: docker.service: Failed with result 'protocol'.
Oct 20 14:01:27 micah-f26ah-vm1020a.localdomain systemd[1]: docker.service: Service hold-off time over, scheduling restart.
Oct 20 14:01:27 micah-f26ah-vm1020a.localdomain systemd[1]: Stopped Docker Application Container Engine.
Oct 20 14:01:27 micah-f26ah-vm1020a.localdomain systemd[1]: Dependency failed for Docker Application Container Engine.
Oct 20 14:01:27 micah-f26ah-vm1020a.localdomain systemd[1]: docker.service: Job docker.service/start failed with result 'dependency'.


# journalctl -b -u docker
-- Logs begin at Fri 2017-10-20 13:48:06 UTC, end at Fri 2017-10-20 14:05:01 UTC. --
Oct 20 14:01:21 micah-f26ah-vm1020a.localdomain systemd[1]: Starting Docker Application Container Engine...
Oct 20 14:01:21 micah-f26ah-vm1020a.localdomain dockerd-current[962]: time="2017-10-20T14:01:21Z" level=info msg="SUSE:secrets :: enabled"
Oct 20 14:01:21 micah-f26ah-vm1020a.localdomain dockerd-current[962]: Error starting daemon: opening seccomp profile (/etc/docker/seccomp.json) failed: open /etc/docker/seccomp.json: no such file or directory
Oct 20 14:01:21 micah-f26ah-vm1020a.localdomain systemd[1]: docker.service: Main process exited, code=exited, status=1/FAILURE
Oct 20 14:01:21 micah-f26ah-vm1020a.localdomain systemd[1]: Failed to start Docker Application Container Engine.


If you would like to reproduce, start with any Fedora Atomic Host, then add the F27 remote and rebase to the 'testing' branch:


# ostree remote add --no-gpg-verify custom http://159.203.73.180
# rpm-ostree rebase custom:fedora/27/x86_64/testing/atomic-host 54322b3ae67b7079dc123a98f61d55898c33f8278802209aa86b0a135026bba9

Comment 1 Micah Abbott 2017-10-20 14:15:20 UTC

Oops, this is a dupe.

*** This bug has been marked as a duplicate of bug 1504065 ***