Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Docker higlass-container fails to start if userns-remap is in use #175

Open
bmcnally-uw opened this issue Nov 30, 2021 · 2 comments
Open

Comments

@bmcnally-uw
Copy link

Hi,

We have "userns-remap": "docker" set in our /etc/docker/daemon.json to prevent Docker apps from running as root. Doing this causes the higlass-container Docker container to fail to start:

[root@higlass ~]# docker run --detach \
>            --publish 8989:80 \
>            --volume ~/hg-data:/data/higlass/hg-data \
>            --volume ~/hg-tmp:/data/higlass/hg-tmp \
>            --name higlass-container \
>          higlass/higlass-docker:v0.6.1
fc5b14d74f514f02598cfce87e06a86895e13e922feb384d8761c45f0fcc1273
/usr/bin/docker-current: Error response from daemon: oci runtime error: container_linux.go:235: starting container process caused "container init exited prematurely".

It's not clear what the image/container is trying to do, but it's a bit concerning that this appears to need to be run as root at the moment.

@pkerpedjiev
Copy link
Member

TBH, I'm not sure I fully understand what the "userns-rempa": "docker" setting does. Here's the Dockerfile if you're curious what the container actually does. Might be worthwhile to look at the logs in ~/hg-data/log and ~/hg-tmp to see if it complains about anything.

@bmcnally-uw
Copy link
Author

I'll take a look at the Dockerfile, but the userns-remap option directs the entire Docker stack to run as some user than root, so docker in our case. This means that something the docker run... is doing is failing because it's not running as root.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants