[PVE-User] Unable to install docker image inside LXC

Gilberto Nunes gilberto.nunes32 at gmail.com
Wed Jun 28 14:03:53 CEST 2017


Hi again...
Just to justify my change to LXC, here's the facts:

*WITH KVM - three vm's, two lxc and one kvm*

COMMAND: free -h
              total        used        free      shared  buff/cache
available
Mem:           7.8G        3.0G        136M         91M        4.7G
 4.4G
Swap:          7.0G        8.1M        7.0G

COMMAND: iostat -x 1

avg-cpu:  %user   %nice %system %iowait  %steal   %idle
           0.50    0.00    1.01    4.02    0.00   94.47

avg-cpu:  %user   %nice %system %iowait  %steal   %idle
           0.51    0.00    2.02    1.52    0.00   95.96

avg-cpu:  %user   %nice %system %iowait  %steal   %idle
           2.01    0.00    1.51    1.01    0.00   95.48

*WITHOUT KVM - just two lxc*


COMMAND: free -h
              total        used        free      shared  buff/cache
available
Mem:           7.8G        1.3G        6.0G         91M        502M
 6.2G
Swap:          7.0G        8.1M        7.0G

COMMAND: iostat -x 1
avg-cpu:  %user   %nice %system %iowait  %steal   %idle
           0.50    0.00    0.50    0.00    0.00   99.00

avg-cpu:  %user   %nice %system %iowait  %steal   %idle
           1.01    0.00    0.00    0.00    0.00   98.99

avg-cpu:  %user   %nice %system %iowait  %steal   %idle
           1.00    0.00    0.00    0.00    0.00   99.00

2017-06-27 19:26 GMT-03:00 Gilberto Nunes <gilberto.nunes32 at gmail.com>:

> Hi...
> Just an update...
> After launch the app like this
>
> docker run --security-opt apparmor=unconfined ....
>
>
> Everything is ok...
>
>
> Thanks for help
>
>
> 2017-06-27 15:38 GMT-03:00 Gilberto Nunes <gilberto.nunes32 at gmail.com>:
>
>> Hi again folks
>>
>> After add lxc.aa_profile = unconfined to the container conf file, I am
>> able to download the app.
>> But I can start it.
>> I get the error:
>>
>> docker error response from daemon
>>
>> And that's all!
>>
>> I am searching for...
>>
>> 2017-06-27 12:15 GMT-03:00 Tino <tinolin2010 at gmail.com>:
>>
>>> Hello! A friend recently managed to run docker inside LXC, only as a
>>> data.
>>> From what I see you are using COLLABORA, I go to use ONLYOFFICE and you
>>> will not have this problem.
>>>
>>> El mar., 27 de jun. de 2017 11:57, Elias Werberich <elias at werberich.de>
>>> escribió:
>>>
>>> > Okay, it is possible to run Docker in LXC.
>>> > You have to disable some security features so Docker can access needed
>>> > devices.
>>> >
>>> > But if you go this way, it is easier to install Docker on PVE itself -
>>> > it is more or less the same.
>>> >
>>> > Proxmox Forums:
>>> > https://forum.proxmox.com/threads/running-docker-inside-lxc.24858/
>>> >
>>> > Regards,
>>> >
>>> > Elias Werberich
>>> >
>>> > Am 27.06.2017 um 16:48 schrieb Gilberto Nunes:
>>> > > This is so sad!
>>> > > With LXC my server doesn´t pain to run 2 containers both with 2 G of
>>> > memory
>>> > > ( each one).
>>> > > The memory available in my home server is 8 GB..
>>> > > When run only containers, the iostat show me server has a light
>>> load...
>>> > > But when run KVM, load goes high...
>>> > > Are you guys sure there is no way to run docker inside LXC???
>>> > >
>>> > > I ask just to be sure...
>>> > >
>>> > > 2017-06-27 11:02 GMT-03:00 Gilberto Nunes <
>>> gilberto.nunes32 at gmail.com>:
>>> > >
>>> > >> Well... My previously app running in dock was installed inside KVM,
>>> but
>>> > I
>>> > >> migrate both servers to LXC.
>>> > >> One of them use Docker... So I will return the docker machine to KVM
>>> > >> again....
>>> > >>
>>> > >> Thanks
>>> > >>
>>> > >>
>>> > >> 2017-06-27 10:32 GMT-03:00 Elias Werberich <elias at werberich.de>:
>>> > >>
>>> > >>> No, it does not. Docker uses more or less the same techniques as
>>> > LXC/LXD.
>>> > >>>
>>> > >>> I guess you want to spin up a service which is provided as a docker
>>> > >>> container. Simply create an Alpine Linux KVM (with virt-Kernel) and
>>> > install
>>> > >>> the Docker Engine on it. Than you can deploy your service with a
>>> really
>>> > >>> minimal overhead.
>>> > >>>
>>> > >>> Regards,
>>> > >>>
>>> > >>> Elias Werberich
>>> > >>>
>>> > >>>
>>> > >>>
>>> > >>> On June 27, 2017 15:12:04 Dietmar Maurer <dietmar at proxmox.com>
>>> wrote:
>>> > >>>
>>> > >>> I don't think docker works inside LXC.
>>> > >>>> On June 27, 2017 at 2:28 PM Gilberto Nunes <
>>> > gilberto.nunes32 at gmail.com>
>>> > >>>>> wrote:
>>> > >>>>>
>>> > >>>>>
>>> > >>>>> Hi list
>>> > >>>>>
>>> > >>>>> I am trying install collabora code inside LXC with Ubuntu 16.04,
>>> but
>>> > no
>>> > >>>>> matter I run the command inside or outside the container, I get
>>> the
>>> > >>>>> errot
>>> > >>>>> bellow:
>>> > >>>>>
>>> > >>>>> lxc-attach -n 103 -- docker pull collabora/code
>>> > >>>>> Using default tag: latest
>>> > >>>>> latest: Pulling from collabora/code
>>> > >>>>> bd97b43c27e3: Extracting
>>> > >>>>> [==================================================>] 46.93
>>> MB/46.93
>>> > MB
>>> > >>>>> 6960dc1aba18: Download complete
>>> > >>>>> 2b61829b0db5: Download complete
>>> > >>>>> 1f88dc826b14: Download complete
>>> > >>>>> 73b3859b1e43: Download complete
>>> > >>>>> 2cb7a8fe8de9: Download complete
>>> > >>>>> 2458b914d686: Download complete
>>> > >>>>> 9e1750234528: Download complete
>>> > >>>>> failed to register layer: ApplyLayer exit status 1 stdout:
>>> stderr:
>>> > >>>>> permission denied
>>> > >>>>>
>>> > >>>>> Somebody can help me, please???
>>> > >>>>>
>>> > >>>>> Thanks a lot
>>> > >>>>>
>>> > >>>>> --
>>> > >>>>> <https://about.me/gilbertof?promo=email_sig&utm_source=produ
>>> > >>>>> ct&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=t
>>> humb>
>>> > >>>>> Gilberto Ferreira
>>> > >>>>> about.me/gilbertof
>>> > >>>>> <https://about.me/gilbertof?promo=email_sig&utm_source=produ
>>> > >>>>> ct&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=t
>>> humb>
>>> > >>>>> _______________________________________________
>>> > >>>>> pve-user mailing list
>>> > >>>>> pve-user at pve.proxmox.com
>>> > >>>>> https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>>> > >>>>>
>>> > >>>> _______________________________________________
>>> > >>>> pve-user mailing list
>>> > >>>> pve-user at pve.proxmox.com
>>> > >>>> https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>>> > >>>>
>>> > >>>
>>> > >>> _______________________________________________
>>> > >>> pve-user mailing list
>>> > >>> pve-user at pve.proxmox.com
>>> > >>> https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>>> > >>>
>>> > >>
>>> > >>
>>> > >> --
>>> > >>
>>> > >> <
>>> > https://about.me/gilbertof?promo=email_sig&utm_source=produc
>>> t&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=thumb
>>> > >
>>> > >> Gilberto Ferreira
>>> > >> about.me/gilbertof
>>> > >> <
>>> > https://about.me/gilbertof?promo=email_sig&utm_source=produc
>>> t&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=thumb
>>> > >
>>> > >>
>>> > >
>>> > >
>>> >
>>> >
>>> > _______________________________________________
>>> > pve-user mailing list
>>> > pve-user at pve.proxmox.com
>>> > https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>>> >
>>> --
>>>
>>> *|    Heavy voodoo here.  I can't even believe you are reading this.
>>> |    Are you crazy?  Don't even think about adjusting these unless
>>> |    you understand the algorithms in comm_select.c first!*
>>>
>>> *every error lies a great risk*
>>> _______________________________________________
>>> pve-user mailing list
>>> pve-user at pve.proxmox.com
>>> https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>>>
>>
>>
>>
>> --
>>
>> <https://about.me/gilbertof?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=thumb>
>> Gilberto Ferreira
>> about.me/gilbertof
>> <https://about.me/gilbertof?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=thumb>
>>
>
>
>
> --
>
> <https://about.me/gilbertof?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=thumb>
> Gilberto Ferreira
> about.me/gilbertof
> <https://about.me/gilbertof?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=thumb>
>



-- 
<https://about.me/gilbertof?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=thumb>
Gilberto Ferreira
about.me/gilbertof
<https://about.me/gilbertof?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=thumb>



More information about the pve-user mailing list