Description of problem: I installed docker-io on RHEL 6.6. If I create a regular container, I suddenly can no longer suspend my machine. I tracked it down to the /sys directory being mounted read-only on the host. Bug 1094198 says that it should be mounted read-only within the container if the container is run as non-privileged, but that should not effect the host. Version-Release number of selected component (if applicable): docker-io-1.4.1-3.el6.x86_64 RHEL 6.6 kernel-2.6.32-504.12.2.el6.x86_64 How reproducible: 100% Steps to Reproduce: Start a docker container: bash$ docker run -ti fedora:latest /bin/bash Outside of docker, run as root: [root@wspwebster log]# echo 7 > /sys/module/cpufreq/parameters/debug -bash: /sys/module/cpufreq/parameters/debug: Read-only file system Actual results: fails to write to /sys anymore. This effects other commands, like pm-suspend (can't suspend my laptop anymore) Expected results: Should be able to write out to the /sys file system as root. Additional info: Version: Intel(R) Core(TM) i7-3720QM CPU @ 2.60GHz Version: G5ET90WW (2.50 ) Version: ThinkPad W530
I got an upgrade to docker-io-1.5.0-1.el6.x86_64 but it made no difference. PW
According to the docker issue on github this is fixed in 1.6.2: https://github.com/docker/docker/commit/7c8fca2ddb58c8d2c4fb4df31c242886df7dd257
So Bug 1094198 was fedora including a docker change, or fedora making a change? PW
Fixed in docker-1.6.2 I guess.
I am still seeing this behavior in docker-io-1.7.1-2.el6.x86_64 on RHEL 6.7 Steps to reproduce: 1. Install docker 2. Start a container without --privileged 3. /sys in now mounted RO # docker info Containers: 10 Images: 179 Storage Driver: devicemapper Pool Name: docker-253:0-27395432-pool Pool Blocksize: 65.54 kB Backing Filesystem: extfs Data file: /dev/loop0 Metadata file: /dev/loop1 Data Space Used: 8.951 GB Data Space Total: 107.4 GB Data Space Available: 98.42 GB Metadata Space Used: 10.13 MB Metadata Space Total: 2.147 GB Metadata Space Available: 2.137 GB Udev Sync Supported: true Deferred Removal Enabled: false Data loop file: /var/lib/docker/devicemapper/devicemapper/data Metadata loop file: /var/lib/docker/devicemapper/devicemapper/metadata Library Version: 1.02.95-RHEL6 (2015-07-29) Execution Driver: native-0.2 Logging Driver: json-file Kernel Version: 2.6.32-573.3.1.el6.x86_64 Operating System: <unknown> CPUs: 2 Total Memory: 1.808 GiB Name: - ID: IHHZ:XJ2C:4JQL:AN6P:I7KG:7Y3P:FIEC:P5NK:QKSA:PTKR:CDHR:RILN # docker version Client version: 1.7.1 Client API version: 1.19 Go version (client): go1.4.2 Git commit (client): 786b29d/1.7.1 OS/Arch (client): linux/amd64 Server version: 1.7.1 Server API version: 1.19 Go version (server): go1.4.2 Git commit (server): 786b29d/1.7.1 OS/Arch (server): linux/amd64