Questions tagged [containers]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
49 views

Any point in running containers as non-root on openshift

The openshift documentation reads : To further protect RHCOS systems in OpenShift Container Platform clusters, most containers, except those managing or monitoring the host system itself, should run ...
0
votes
0answers
6 views

NsJail configuration and command option to mount an overlay directory

I created a project called Codebox which is a container that runs arbitrary source code in a jail environment provided by NsJail. I'd like to provide a pre-loaded virtual environment to Python ...
-2
votes
1answer
42 views

Why does running a containerized app with AWS Lightsail cost twice as much as using a virtual server?

As per https://aws.amazon.com/lightsail/pricing/ , running a lightsail VPS with 512 MB Memory, 1 Core Processor costs $3.50 a month. However, in that same link it shows that the lowest cost of ...
0
votes
1answer
52 views

How to remove a broken qemu / kvm container?

I'm running some containers on my server (qemu kvm, libvirt). A few of them are totally broken and I am unable to remove them by any means. Have been googlin for half a day, but just can't find a ...
0
votes
2answers
51 views

Can I use windows inside a docker container?

I'm wondering, is it possible to configure a docker container to run Windows and then connect to it via RDP or parsec and use it as my main machine?
-1
votes
1answer
35 views

Mount container's filesystem on my host

I built some software in a container (using Podman) and would like to run the binary on my host. The binary is linked to some dynamic libraries that I don't have on my host. I figured that a quick ...
0
votes
0answers
17 views

Can't run slapd inside an ubuntu docker container

I am trying to create two docker containers, one to act as an ldap server and the other an ldap client. I started by creating the server. I am running on ubuntu 18.04 and using ubuntu image for my ...
0
votes
1answer
77 views

Gitlab Container Registry timeout when connecting

Building an on-prem / self-hosted deployment of Gitlab for the first time. I've got the self-installation completed, single box and three dedicated hosts for runners (that I'm working to get them ...
1
vote
1answer
70 views

How to share unix domain socket between containers without named volume?

I have two containers A and B which needs to talk via unix domain socket created by A in /var/run/notif.sock. I can't use named volume as sharing /var/run between containers is risky as it contains ...
0
votes
1answer
52 views

LXD Container IPv4 Interface Management

Ubuntu 18.04.4 lxd 3.0.3 lxc 3.0.3 I have had several containers running without issue for a long time. Today I was making changes to my network and one of the containers picked up a DHCP address. ...
1
vote
0answers
60 views

Docker: 'failed to open /dev/fuse: Permission denied' as non root user

What I want to achieve is to prepare Docker image in which every non-root user can make SSHF mount. MWE below: Dockerfile: FROM rocker/rstudio:4.0.3 USER root RUN apt-get update && apt-get ...
0
votes
1answer
73 views

can different pods run different containerization technologies?

for example, can I have one pod running docker and another running cri-o? I am new to the world of kubernetes and I've not been able to find the answer in the documentation.
0
votes
1answer
100 views

Running windows container's command prompt in admin mode

I am running Windows Nanoserver in a container.The nanoserver contains only the command prompt and lacks powershell. I want to execute certain commands inside the container in the command prompt which ...
1
vote
1answer
28 views

AWS ECS Fargate Target Group Failing HealthChecks

The SpringBoot application is running as an ECS Task in a ECS Service of an AWS Fargate Cluster. The ECS Service is LoadBalanced as such the Tasks spawned by the Services are automatically registered ...
0
votes
0answers
57 views

Linux Container - Unable to install Next Cloud

I am a freshman in Linux and following a tutorial to install Snapd and NextCloud in Ubuntu. I have successfully install snapd and HelloWorld example. However, I had an error when I do sudo snap ...
0
votes
0answers
37 views

Dovecot container tries to invoke sendmail for a sieve filter

I have two docker containers: postfix and dovecot. Both have the corresponding services installed and running. Everything is working great but now i am trying to integrate sieve filtering. One of ...
1
vote
1answer
41 views

Why is my docker registry refusing connections from VMs in my local network but not the host?

For context - I am attempting to deploy OKD in an air-gapped environment, which requires mirroring an image registry. This private, secured registry is then pulled from by other machines in the ...
3
votes
1answer
167 views

How to find out PID of the container using crictl

Kubernetes is deprecating Docker as CRI engine. Now there is containerd and CRI-O, which can be used as an alternative to it. Both can be managed via crictl from cri-tools. I need some common way to ...
0
votes
0answers
32 views

How to SSH into a Docker Container running on an AWS server?

I am planning to host Drupal applications on AWS and Docker containers per project. So basically all the Drupal projects will be hosted on AWS running on Docker containers. So each project will an ...
0
votes
1answer
56 views

nginx Hugo 301 redirect issues

I'm using a nginx container that is unprivileged and runs on port 8080, I used it to serve up a Hugo site, everything works except for when you click on a tag which sends you to /tags/mytag/ I keep ...
0
votes
0answers
13 views

Feasibility of a VM/container per user deployment framework

There have been a couple instances in the past that I have been tasked with building an architecture where, we deploy one VM/container per user. This has been for reasons like: needing each user to ...
0
votes
1answer
200 views

Kaniko (GitLab CI, K8s) can not push to Nexus Repository Manager: UNAUTHORIZED: access to the requested resource is not authorized

my GitLab CI job build a example container image with Kaniko with the GitLab runner on K8s. All services are in my LAN behind a static IP. The build process pulls an ArchLinux image from my first ...
2
votes
0answers
181 views

Setting up Lavarel with Podman, but the php user can't write to my mounted directory

I've set up a laravel project on Fedora using Podman. For this I wrote a small script that attempts to replace the build process usually done by sail. #!/usr/bin/env bash if [ -f ./.env ]; then # ...
0
votes
0answers
73 views

Podman not using credentials from authfile

I am in the process of deploying a containerized application that is created from an image stored in a private registry that requires authentication to access. Since I am using Ansible 2.9.14 I must ...
0
votes
1answer
19 views

How can each OpenStack Swift object-storage container be set up with a different password/key in a standard way?

I'd like to have many storage buckets, each with its own password or key for read & write access for use by end users. Some options I've discovered: ACLs: These work on a per-OpenStack-user basis....
0
votes
1answer
52 views

Monitor Docker Container for No Output

I have a long running process in a docker container that is setup like this: Dockerfile ... ENTRYPOINT ["./invoke.sh"] invoke.sh #!/bin/bash ./long-running-command If long-running-command ...
0
votes
1answer
32 views

Nginx Containerized coexisting with Apache server

I have a VPS with Ubuntu server, which is running a flask (python) web app, using UWSGI, through reverse proxy with Apache, for the domain "a.com". Both the flask app & the Apache aren'...
1
vote
1answer
73 views

Accessing different host's docker containers via portainer

I have a few containers (running various services) on my ubuntu server and i manage those containers via portainer, which is also one of these containers. I would like to also manage a pihole ...
0
votes
0answers
64 views

haproxy logs in a container

I’m struggling to get access and health check logs from haproxy when I run it inside a container, so I’ve followed the instructions in the docs (Setting up logs using Docker | HAProxy Enterprise 2.2r1)...
0
votes
1answer
42 views

Open vSwitch and port translation

we've got a very specific requirement which I want to solve with Open vSwitch. It already works somehow - can you show me what I'm missing here? Requirement: a Docker container connected to a mac-vlan ...
0
votes
1answer
146 views

Podman fails to add container to a pod [firewalld, nftables]

Can't start a podman container nor can I add container to a pod on CentOS8. I've tried the usual actions, e.g.: Made sure I am starting with clean state: sudo podman system reset which has deleted ...
0
votes
0answers
23 views

Linux bridge does not forward packets to TAP interface

I have the following scenario where I run a Docker container which has configured inside of it a Linux bridge br0 and attached to it I have the main interface eth0 of the container and a TAP interface ...
1
vote
0answers
11 views

Recover unmount data from kubernetes engine

I have unmount folder including data in a pod, but this is evicted suddenly and creates another pod without data. How can I recover this folder?
1
vote
0answers
63 views

Cannot communicate from host to container and vice versa

I have a GitLab instance running in docker. But I am unable to ping or curl the port 8000. CONTAINER ID IMAGE COMMAND CREATED STATUS ...
0
votes
0answers
61 views

implementing a failover service for containers

Two VMs are hosted on the same machine, let's name them VM1 and VM2. Both VMs are hosting a runC container running a server application, a client is running directly on the host machine and is ...
1
vote
1answer
192 views

How to mount NFS share on Azure Container Instances

I'm registered for the Azure Files NFSv4 preview, and I cannot seem to find a way to mount NFS file shares on ACI. I have tried the following: Created a virtual network in eastus with two subnets, ...
0
votes
1answer
28 views

Dockers place in the cloud

Putting aside aws ECS and other container services for a moment, is a docker host running on top of a VM in the cloud irrelevant? Containers are supposed to optimize out the guest OS, but since you're ...
0
votes
1answer
31 views

How can I change `fs.notify.max_user_watches` on Azure Container Instances?

I'm deploying an application called Theia (a cloud-based IDE) on Azure Container Instances. The app is throwing errors about not being able to watch project files for changes. I did some research and ...
5
votes
1answer
683 views

SECURITY: Should containers run TLS or can they rely on its sidecar?

I wonder how security experts think about making container traffic secure. Let's take a simple K8S cluster as an example. I guess we all agree that running HTTPS instead of HTTP within each container ...
0
votes
1answer
211 views

“Failed to get shell PTY: Protocol error” for an nspawn container with systemd inside

I create containers with # debootstrap --variant=minbase --include=systemd,iproute2 buster "/var/lib/machines/test" And then I run it with: # systemd-nspawn --machine test Just for testing ...
0
votes
0answers
20 views

Multiple inexperienced users on one Linux server. How best to use containers to protect against unintentional damage?

So, I'm a researcher tasked with maintaining a number of GPU servers for researchers in my lab. I have quite a bit of Linux experience, while some users have never used Linux before. The other ...
0
votes
2answers
65 views

Why root user is allowed by default in public cloud Kubernetes services?

In a Kubernetes environment, I suppose that the root user should not be allowed by default to mitigate the risk in case the host OS was accessed from inside a container. This setting should be done by ...
1
vote
0answers
70 views

How can I authenticate users inside a docker container against the host system's SSSD which itsself retrieves user data via LDAP?

I have a container host on which users are authenticated against a company Active Directory using SSSD with LDAP. On this host I have several docker containers running. Some of these containers just ...
1
vote
2answers
197 views

How to use ss in specific network namespace

Whilst investigating some TCP network issues in containers I tried to use ss to peek into container network TCP stack. We are running Amazon Linux in AWS: # uname -a Linux 4.14.173-137.229.amzn2....
0
votes
1answer
71 views

Apache container cannot bind to well-known port despite holding capability CAP_NET_BIND_SERVICE

When attempting to run Apache inside a systemd container that was started with systemd-nspawn --private-users=pick ... (unlike --private-users=false in this solution) I encounter this error: ...
0
votes
1answer
79 views

Docker fails to load container after power outage. How to remove corrupted containers?

Couple of my docker containers got messed up due power outage and as a results Docker daemon fails to start. I would like save healthy containers and only remove few corrupted ones. Is this possible ...
0
votes
0answers
22 views

After rebooting docker node, it will ask to join or init swarm

I have once server with docker as follows. docker-ce-19.03.13-3.el7.x86_64 docker-ce-cli-19.03.13-3.el7.x86_64 containerd.io-1.3.7-3.1.el7.x86_64 CentOS 7.8 minimal I run docker swarm init command ...
0
votes
0answers
27 views

Adding LXC containers to either localhost or bridge for sMQTT

Hey so I have a couple of ways to try it but I keep running into certain issues, one of them being lxc-net dependencies not running on this machine and no package manager or gcc to compile it. The ...
2
votes
0answers
226 views

Ports exposed by docker container are shown as filtered - unable to connect

I am working on a fresh server installation of Ubuntu 20.04 I started a sample nginx by running docker run --rm -p 80:80 nginx Port 80 appears to be open on the machine, I cant curl the nginx default ...
0
votes
1answer
1k views

Unable to ping container from outside

I've to connect to a service running inside a runc container, I've written the below script and is able to ping the container from the host and can connect to the internet from inside the container. ...

1
2 3 4 5
7