Windows - Alpine - Docker

3 posts / 0 new
Last post
#1 Thu, 2015-07-02 18:53
ngg
  • ngg's picture
  • Offline
  • Last seen: 2 years 8 months ago
  • Joined: 2015-07-02

Hi all,
I'm a windows guy, please help!

Windows 10 preview/VMware Player 7
Windows 8.1/VirtualBox 5.0 RC2

alpine-3.2.0-x86-64.iso
diskless virtual machine,no USB,no sound,bridged net
boot
root
setup-alpine
- defaults, mirror 1
apk add docker
- Ok
docker --version
- 1.6.2
service docker start
- Ok
docker pull hello-world
- Ok
docker run hello-world
- Ok
docker pull busybox
- level=fatal msg="Error pulling image (latest) from busybox, ApplyLayer exit status 1 stdout: stderr: chmod /bin/busybox: permission denied"
docker pull alpine
- level=fatal msg="Error pulling image (latest) from alpine, ApplyLayer exit status 1 stdout: stderr: chmod /bin/bbsuid: permission denied"

what's wrong?

Thu, 2015-07-09 20:46
harningt
  • harningt's picture
  • Offline
  • Last seen: 8 months 1 day ago
  • Joined: 2015-07-06

See: issue #3934

Specific resolution from Dave Sanderson:

Quote:

I've had the same issue and was able to work around it by setting the following with sysctl
kernel.grsecurity.chroot_deny_chmod=0
kernel.grsecurity.chroot_deny_mknod=0

It would probably be better to write a policy for the binary.

Specific fix instructions:
edit /etc/sysctl.conf so that it has the lines

kernel.grsecurity.chroot_deny_chmod=0
kernel.grsecurity.chroot_deny_mknod=0

This will make the settings stick past reboot... and for immediate relief, execute sysctl --system to reload the settings.

Sat, 2015-07-18 14:13
ngg
  • ngg's picture
  • Offline
  • Last seen: 2 years 8 months ago
  • Joined: 2015-07-02

Thanks! It's works:

#!/bin/sh
apk add docker
sysctl -w kernel.grsecurity.chroot_deny_chmod=0
sysctl -w kernel.grsecurity.chroot_deny_mknod=0
service docker start
sleep 5
docker --version
docker pull hello-world
docker pull alpine
docker images

Log in or register to post comments