Questions tagged [containers]
The containers tag has no usage guidance.
347
questions
1
vote
1answer
49 views
Any point in running containers as non-root on openshift
The openshift documentation reads :
To further protect RHCOS systems in OpenShift Container Platform clusters, most containers, except those managing or monitoring the host system itself, should run ...
0
votes
0answers
6 views
NsJail configuration and command option to mount an overlay directory
I created a project called Codebox which is a container that runs arbitrary source code in a jail environment provided by NsJail. I'd like to provide a pre-loaded virtual environment to Python ...
-2
votes
1answer
42 views
Why does running a containerized app with AWS Lightsail cost twice as much as using a virtual server?
As per https://aws.amazon.com/lightsail/pricing/ , running a lightsail VPS with 512 MB Memory, 1 Core Processor costs $3.50 a month.
However, in that same link it shows that the lowest cost of ...
0
votes
1answer
52 views
How to remove a broken qemu / kvm container?
I'm running some containers on my server (qemu kvm, libvirt).
A few of them are totally broken and I am unable to remove them by any means. Have been googlin for half a day, but just can't find a ...
0
votes
2answers
51 views
Can I use windows inside a docker container?
I'm wondering, is it possible to configure a docker container to run Windows and then connect to it via RDP or parsec and use it as my main machine?
-1
votes
1answer
35 views
Mount container's filesystem on my host
I built some software in a container (using Podman) and would like to run the binary on my host. The binary is linked to some dynamic libraries that I don't have on my host. I figured that a quick ...
0
votes
0answers
17 views
Can't run slapd inside an ubuntu docker container
I am trying to create two docker containers, one to act as an ldap server and the other an ldap client. I started by creating the server. I am running on ubuntu 18.04 and using ubuntu image for my ...
0
votes
1answer
77 views
Gitlab Container Registry timeout when connecting
Building an on-prem / self-hosted deployment of Gitlab for the first time. I've got the self-installation completed, single box and three dedicated hosts for runners (that I'm working to get them ...
1
vote
1answer
70 views
How to share unix domain socket between containers without named volume?
I have two containers A and B which needs to talk via unix domain socket created by A in /var/run/notif.sock.
I can't use named volume as sharing /var/run between containers is risky as it contains ...
0
votes
1answer
52 views
LXD Container IPv4 Interface Management
Ubuntu 18.04.4
lxd 3.0.3
lxc 3.0.3
I have had several containers running without issue for a long time. Today I was making changes to my network and one of the containers picked up a DHCP address.
...
1
vote
0answers
60 views
Docker: 'failed to open /dev/fuse: Permission denied' as non root user
What I want to achieve is to prepare Docker image in which every non-root user can make SSHF mount. MWE below:
Dockerfile:
FROM rocker/rstudio:4.0.3
USER root
RUN apt-get update && apt-get ...
0
votes
1answer
73 views
can different pods run different containerization technologies?
for example, can I have one pod running docker and another running cri-o?
I am new to the world of kubernetes and I've not been able to find the answer in the documentation.
0
votes
1answer
100 views
Running windows container's command prompt in admin mode
I am running Windows Nanoserver in a container.The nanoserver contains only the command prompt and lacks powershell.
I want to execute certain commands inside the container in the command prompt which ...
1
vote
1answer
28 views
AWS ECS Fargate Target Group Failing HealthChecks
The SpringBoot application is running as an ECS Task in a ECS Service of an AWS Fargate Cluster. The ECS Service is LoadBalanced as such the Tasks spawned by the Services are automatically registered ...
0
votes
0answers
57 views
Linux Container - Unable to install Next Cloud
I am a freshman in Linux and following a tutorial to install Snapd and NextCloud in Ubuntu. I have successfully install snapd and HelloWorld example. However, I had an error when I do sudo snap ...
0
votes
0answers
37 views
Dovecot container tries to invoke sendmail for a sieve filter
I have two docker containers: postfix and dovecot. Both have the corresponding services installed and running. Everything is working great but now i am trying to integrate sieve filtering.
One of ...
1
vote
1answer
41 views
Why is my docker registry refusing connections from VMs in my local network but not the host?
For context - I am attempting to deploy OKD in an air-gapped environment, which requires mirroring an image registry. This private, secured registry is then pulled from by other machines in the ...
3
votes
1answer
167 views
How to find out PID of the container using crictl
Kubernetes is deprecating Docker as CRI engine. Now there is containerd and CRI-O, which can be used as an alternative to it. Both can be managed via crictl from cri-tools.
I need some common way to ...
0
votes
0answers
32 views
How to SSH into a Docker Container running on an AWS server?
I am planning to host Drupal applications on AWS and Docker containers per project. So basically all the Drupal projects will be hosted on AWS running on Docker containers. So each project will an ...
0
votes
1answer
56 views
nginx Hugo 301 redirect issues
I'm using a nginx container that is unprivileged and runs on port 8080, I used it to serve up a Hugo site, everything works except for when you click on a tag which sends you to /tags/mytag/ I keep ...
0
votes
0answers
13 views
Feasibility of a VM/container per user deployment framework
There have been a couple instances in the past that I have been tasked with building an architecture where, we deploy one VM/container per user. This has been for reasons like: needing each user to ...
0
votes
1answer
200 views
Kaniko (GitLab CI, K8s) can not push to Nexus Repository Manager: UNAUTHORIZED: access to the requested resource is not authorized
my GitLab CI job build a example container image with Kaniko with the GitLab runner on K8s. All services are in my LAN behind a static IP. The build process pulls an ArchLinux image from my first ...
2
votes
0answers
181 views
Setting up Lavarel with Podman, but the php user can't write to my mounted directory
I've set up a laravel project on Fedora using Podman. For this I wrote a small script that attempts to replace the build process usually done by sail.
#!/usr/bin/env bash
if [ -f ./.env ]; then
# ...
0
votes
0answers
73 views
Podman not using credentials from authfile
I am in the process of deploying a containerized application that is created from an image stored in a private registry that requires authentication to access.
Since I am using Ansible 2.9.14 I must ...
0
votes
1answer
19 views
How can each OpenStack Swift object-storage container be set up with a different password/key in a standard way?
I'd like to have many storage buckets, each with its own password or key for read & write access for use by end users.
Some options I've discovered:
ACLs: These work on a per-OpenStack-user basis....
0
votes
1answer
52 views
Monitor Docker Container for No Output
I have a long running process in a docker container that is setup like this:
Dockerfile
...
ENTRYPOINT ["./invoke.sh"]
invoke.sh
#!/bin/bash
./long-running-command
If long-running-command ...
0
votes
1answer
32 views
Nginx Containerized coexisting with Apache server
I have a VPS with Ubuntu server, which is running a flask (python) web app, using UWSGI, through reverse proxy with Apache, for the domain "a.com".
Both the flask app & the Apache aren'...
1
vote
1answer
73 views
Accessing different host's docker containers via portainer
I have a few containers (running various services) on my ubuntu server and i manage those containers via portainer, which is also one of these containers. I would like to also manage a pihole ...
0
votes
0answers
64 views
haproxy logs in a container
I’m struggling to get access and health check logs from haproxy when I run it inside a container, so I’ve followed the instructions in the docs (Setting up logs using Docker | HAProxy Enterprise 2.2r1)...
0
votes
1answer
42 views
Open vSwitch and port translation
we've got a very specific requirement which I want to solve with Open vSwitch. It already works somehow - can you show me what I'm missing here?
Requirement: a Docker container connected to a mac-vlan ...
0
votes
1answer
146 views
Podman fails to add container to a pod [firewalld, nftables]
Can't start a podman container nor can I add container to a pod on CentOS8.
I've tried the usual actions, e.g.:
Made sure I am starting with clean state:
sudo podman system reset which has deleted ...
0
votes
0answers
23 views
Linux bridge does not forward packets to TAP interface
I have the following scenario where I run a Docker container which has configured inside of it a Linux bridge br0 and attached to it I have the main interface eth0 of the container and a TAP interface ...
1
vote
0answers
11 views
Recover unmount data from kubernetes engine
I have unmount folder including data in a pod, but this is evicted suddenly and creates another pod without data. How can I recover this folder?
1
vote
0answers
63 views
Cannot communicate from host to container and vice versa
I have a GitLab instance running in docker. But I am unable to ping or curl the port 8000.
CONTAINER ID IMAGE COMMAND CREATED STATUS ...
0
votes
0answers
61 views
implementing a failover service for containers
Two VMs are hosted on the same machine, let's name them VM1 and VM2. Both VMs are hosting a runC container running a server application, a client is running directly on the host machine and is ...
1
vote
1answer
192 views
How to mount NFS share on Azure Container Instances
I'm registered for the Azure Files NFSv4 preview, and I cannot seem to find a way to mount NFS file shares on ACI. I have tried the following:
Created a virtual network in eastus with two subnets, ...
0
votes
1answer
28 views
Dockers place in the cloud
Putting aside aws ECS and other container services for a moment, is a docker host running on top of a VM in the cloud irrelevant?
Containers are supposed to optimize out the guest OS, but since you're ...
0
votes
1answer
31 views
How can I change `fs.notify.max_user_watches` on Azure Container Instances?
I'm deploying an application called Theia (a cloud-based IDE) on Azure Container Instances. The app is throwing errors about not being able to watch project files for changes. I did some research and ...
5
votes
1answer
683 views
SECURITY: Should containers run TLS or can they rely on its sidecar?
I wonder how security experts think about making container traffic secure. Let's take a simple K8S cluster as an example.
I guess we all agree that running HTTPS instead of HTTP within each container ...
0
votes
1answer
211 views
“Failed to get shell PTY: Protocol error” for an nspawn container with systemd inside
I create containers with
# debootstrap --variant=minbase --include=systemd,iproute2 buster "/var/lib/machines/test"
And then I run it with:
# systemd-nspawn --machine test
Just for testing ...
0
votes
0answers
20 views
Multiple inexperienced users on one Linux server. How best to use containers to protect against unintentional damage?
So, I'm a researcher tasked with maintaining a number of GPU servers for researchers in my lab. I have quite a bit of Linux experience, while some users have never used Linux before.
The other ...
0
votes
2answers
65 views
Why root user is allowed by default in public cloud Kubernetes services?
In a Kubernetes environment, I suppose that the root user should not be allowed by default to mitigate the risk in case the host OS was accessed from inside a container. This setting should be done by ...
1
vote
0answers
70 views
How can I authenticate users inside a docker container against the host system's SSSD which itsself retrieves user data via LDAP?
I have a container host on which users are authenticated against a company Active Directory using SSSD with LDAP. On this host I have several docker containers running. Some of these containers just ...
1
vote
2answers
197 views
How to use ss in specific network namespace
Whilst investigating some TCP network issues in containers I tried to use ss to peek into container network TCP stack.
We are running Amazon Linux in AWS:
# uname -a
Linux 4.14.173-137.229.amzn2....
0
votes
1answer
71 views
Apache container cannot bind to well-known port despite holding capability CAP_NET_BIND_SERVICE
When attempting to run Apache inside a systemd container that was started with systemd-nspawn --private-users=pick ... (unlike --private-users=false in this solution) I encounter this error:
...
0
votes
1answer
79 views
Docker fails to load container after power outage. How to remove corrupted containers?
Couple of my docker containers got messed up due power outage and as a results Docker daemon fails to start. I would like save healthy containers and only remove few corrupted ones.
Is this possible ...
0
votes
0answers
22 views
After rebooting docker node, it will ask to join or init swarm
I have once server with docker as follows.
docker-ce-19.03.13-3.el7.x86_64
docker-ce-cli-19.03.13-3.el7.x86_64
containerd.io-1.3.7-3.1.el7.x86_64
CentOS 7.8 minimal
I run docker swarm init command ...
0
votes
0answers
27 views
Adding LXC containers to either localhost or bridge for sMQTT
Hey so I have a couple of ways to try it but I keep running into certain issues, one of them being lxc-net dependencies not running on this machine and no package manager or gcc to compile it.
The ...
2
votes
0answers
226 views
Ports exposed by docker container are shown as filtered - unable to connect
I am working on a fresh server installation of Ubuntu 20.04
I started a sample nginx by running docker run --rm -p 80:80 nginx
Port 80 appears to be open on the machine, I cant curl the nginx default ...
0
votes
1answer
1k views
Unable to ping container from outside
I've to connect to a service running inside a runc container, I've written the below script and is able to ping the container from the host and can connect to the internet from inside the container.
...
