Docker pull issue (ApplyLayer exit status 1 stdout: stderr: chmod /bin/mount: permission denied)

3 posts / 0 new
Last post
#1 Wed, 2016-02-03 17:21
husio
  • husio's picture
  • Offline
  • Last seen: 2 years 1 month ago
  • Joined: 2016-02-03

I'm having issues with docker - when using grsec kernel, cannot store any new image. Anyone knows what is the issue?

piotr@husio ~ % docker run -it --name letsencrypt python /bin/bash
Unable to find image 'python:latest' locally
latest: Pulling from library/python
 
d6fc4b5b4917: Extracting [=====>                                             ]  4.26 MB/42.49 MB
290bb858e1c3: Downloading [========================================>          ] 103.9 MB/128.6 MB
7739966466c6: Download complete 
3ae8ed348782: Download complete 
cb2121d06700: Download complete 
17b2be0e54f1: Download complete 
19118ae37eb5: Download complete 
da49b21274f5: Download complete 
a1eefc1714b1: Download complete 
93893282b7b2: Download complete 
Pulling repository docker.io/library/python
a2db1214d015: Pulling dependent layers 
77e39ee82117: Downloading 1.621 MB
Error pulling image (latest) from docker.io/library/python, ApplyLayer exit status 1 stdout:  stderr: chmod /bin/mount: permission denied
1 piotr@husio ~ % uname -a                                                                                                                                                     :(
Linux husio 4.1.15-2-grsec #3-Alpine SMP Tue Jan 5 11:27:22 GMT 2016 x86_64 Linux
piotr@husio ~ % cat /etc/issue 
Welcome to Alpine Linux 3.3
Kernel \r on an \m (\l)piotr@husio ~ % apk info docker                                                                                                                                              :(
docker-1.9.1-r2 description:
Pack, ship and run any application as a lightweight container
 
docker-1.9.1-r2 webpage:
http://www.docker.io/
 
docker-1.9.1-r2 installed size:
38027264

Fri, 2016-02-19 02:41
luckylittle
  • luckylittle's picture
  • Offline
  • Last seen: 2 years 1 month ago
  • Joined: 2016-02-19

Solution:
# sysctl -w kernel.grsecurity.chroot_deny_chmod=0

Mon, 2016-07-18 21:30
kurushiyama
  • kurushiyama's picture
  • Offline
  • Last seen: 1 year 8 months ago
  • Joined: 2016-07-18

Shouldn't this then be done with the installation of docker, then? Sorry for grave digging, but I guess that would easily solve the problem...

Log in or register to post comments