Bug 1278984 - f23 - can't communicate with host's docker from within docker container
Summary: f23 - can't communicate with host's docker from within docker container
Keywords:
Status: CLOSED DUPLICATE of bug 1275593
Alias: None
Product: Fedora
Classification: Fedora
Component: docker
Version: 23
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Lokesh Mandvekar
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-11-06 23:04 UTC by Dusty Mabe
Modified: 2015-11-16 17:22 UTC (History)
13 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-11-16 17:22:58 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Dusty Mabe 2015-11-06 23:04:29 UTC
Description of problem:

For some reason now we can't communicate with the docker daemon (via the docker socket) from within a container. This worked on docker-1.8.2-7 but now doesn't in docker-selinux-1.8.2-10:

<<< 1.8.1-7 >>>
[root@f23rc9 ~]# dnf install -y -q --disablerepo=updates https://kojipkgs.fedoraproject.org//packages/docker/1.8.2/7.gitcb216be.fc23/x86_64/docker-1.8.2-7.gitcb216be.fc23.x86_64.rpm https://kojipkgs.fedoraproject.org//packages/docker/1.8.2/7.gitcb216be.fc23/x86_64/docker-selinux-1.8.2-7.gitcb216be.fc23.x86_64.rpm
restorecon:  lstat(/var/lib/docker) failed:  No such file or directory
warning: %post(docker-selinux-1:1.8.2-7.gitcb216be.fc23.x86_64) scriptlet failed, exit status 255
Non-fatal POSTIN scriptlet failure in rpm package docker-selinux
Non-fatal POSTIN scriptlet failure in rpm package docker-selinux
[root@f23rc9 ~]# systemctl start docker
[root@f23rc9 ~]# docker run -it --rm  --privileged -v /run:/run -v /:/host --net=host --entrypoint=/bin/bash fedora:23 -c "chroot /host/ docker version"
Unable to find image 'fedora:23' locally
Trying to pull repository docker.io/library/fedora ... 23: Pulling from library/fedora
b0082ba983ef: Pull complete 
c7d2f0130dae: Pull complete 
library/fedora:23: The image you are pulling has been verified. Important: image verification is a tech preview feature and should not be relied on to provide security.
Digest: sha256:a62ed896a44d74436c20b70e351cb2001122618a6097fe669d39f98fc5a49e61
Status: Downloaded newer image for docker.io/fedora:23

Client:
 Version:      1.8.2-fc23
 API version:  1.20
 Package Version: docker-1.8.2-7.gitcb216be.fc23.x86_64
 Go version:   go1.5.1
 Git commit:   77d0d91-dirty
 Built:        Mon Oct 12 16:58:35 UTC 2015
 OS/Arch:      linux/amd64

Server:
 Version:      1.8.2-fc23
 API version:  1.20
 Package Version: 
 Go version:   go1.5.1
 Git commit:   77d0d91-dirty
 Built:        Mon Oct 12 16:58:35 UTC 2015
 OS/Arch:      linux/amd64
[root@f23rc9 ~]# echo $?
0
<<< 1.8.1-7 >>>






<<< 1.8.1-10 >>>
[root@f23rc9 ~]# dnf install -y -q --disablerepo=updates https://kojipkgs.fedoraproject.org//packages/docker/1.8.2/10.git28c300f.fc23/x86_64/docker-1.8.2-10.git28c300f.fc23.x86_64.rpm https://kojipkgs.fedoraproject.org//packages/docker/1.8.2/10.git28c300f.fc23/x86_64/docker-selinux-1.8.2-10.git28c300f.fc23.x86_64.rpm
[root@f23rc9 ~]# systemctl start docker
[root@f23rc9 ~]# docker run -it --rm  --privileged -v /run:/run -v /:/host --net=host --entrypoint=/bin/bash fedora:23 -c "chroot /host/ docker version"
Unable to find image 'fedora:23' locally
Trying to pull repository docker.io/library/fedora ... 23: Pulling from library/fedora
b0082ba983ef: Pull complete 
c7d2f0130dae: Pull complete 
library/fedora:23: The image you are pulling has been verified. Important: image verification is a tech preview feature and should not be relied on to provide security.
Digest: sha256:a62ed896a44d74436c20b70e351cb2001122618a6097fe669d39f98fc5a49e61
Status: Downloaded newer image for docker.io/fedora:23

Client:
 Version:      1.8.2-fc23
 API version:  1.20
 Package Version: docker-1.8.2-10.git28c300f.fc23.x86_64
 Go version:   go1.5.1
 Git commit:   cc2d489-dirty
 Built:        Tue Nov  3 06:41:23 UTC 2015
 OS/Arch:      linux/amd64
Get http://%2Fvar%2Frun%2Fdocker.sock/v1.20/version: EOF.
* Are you trying to connect to a TLS-enabled daemon without TLS?
* Is your docker daemon up and running?
[root@f23rc9 ~]# echo $?
1
<<< 1.8.1-10 >>>

Comment 1 steven.merrill 2015-11-12 00:52:43 UTC
I can confirm that this is happening with SELinux enforcing or permissive on F23.

Comment 2 Victor Costan 2015-11-12 05:39:54 UTC
The EOF and the regression version make me think that this bug might be caused by the same issue as https://bugzilla.redhat.com/show_bug.cgi?id=1275593

Comment 3 Dusty Mabe 2015-11-12 17:39:44 UTC
Victor.. Looks very similar to me. I would say they are probably the same issue.

Comment 4 Dusty Mabe 2015-11-16 17:22:58 UTC

*** This bug has been marked as a duplicate of bug 1275593 ***


Note You need to log in before you can comment on or make changes to this bug.