[Bug 1146705] New: docker.sock owned by docker group but docker needs root

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1146705

            Bug ID: 1146705
           Summary: docker.sock owned by docker group but docker needs
                    root
           Product: Fedora
           Version: rawhide
         Component: docker-io
          Assignee: lsm5(a)fedoraproject.org
          Reporter: lsm5(a)fedoraproject.org
        QA Contact: extras-qa(a)fedoraproject.org
                CC: admiller(a)redhat.com, golang(a)lists.fedoraproject.org,
                    hushan.jia(a)gmail.com, jperrin(a)centos.org,
                    lsm5(a)fedoraproject.org, mattdm(a)redhat.com,
                    mgoldman(a)redhat.com, s(a)shk.io, thrcka(a)redhat.com,
                    vbatts(a)redhat.com



Description of problem:

$ ls -al /var/run/docker.sock 
srw-rw----. 1 root docker 0 Sep 25 14:45 /var/run/docker.sock

$ docker pull fedora
2014/09/25 14:48:04 Post
http:///var/run/docker.sock/images/create?fromImage=fedora&tag=: dial unix
/var/run/docker.sock: permission denied

$ sudo docker pull fedora
Pulling repository fedora
f1515fbc671c: Download complete 
22499213da48: Download complete 
b5751574adac: Download complete 
511136ea3c5a: Download complete 
ff75b0852d47: Download complete

Version-Release number of selected component (if applicable):
docker-1.2.0-2.fc22

How reproducible:
always

Steps to Reproduce:
1. install docker
2. use docker

Expected results:
docker commands should work without need for root

Additional info:
systemd-216-6.fc22.x86_64

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1146705] docker.sock owned by docker group but docker needs root

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1146705



--- Comment #1 from Daniel Walsh <dwalsh(a)redhat.com&gt; ---
Well I might consider this a good thing.

http://www.projectatomic.io/blog/2014/09/granting-rights-to-users-to-use-...

I have no idea why this is blowing up?  Can you try this in permissive mode?

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1146705] docker.sock owned by docker group but docker needs root

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1146705

Lokesh Mandvekar <lsm5(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://bugzilla.redhat.com
                   |                            |/show_bug.cgi?id=1145270



-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1146705] docker.sock owned by docker group but docker needs root

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1146705

Eric Rich <erich(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |erich(a)redhat.com



-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1146705] docker.sock owned by docker group but docker needs root

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1146705



--- Comment #4 from Lokesh Mandvekar <lsm5(a)fedoraproject.org&gt; ---
Dan, sorry about the late reply.

I see the same situation in permissive mode too.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1146705] docker.sock owned by docker group but docker needs root

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1146705



--- Comment #5 from Daniel Walsh <dwalsh(a)redhat.com&gt; ---
I have no idea what this is, unless it is related to the docker.socket unit
file.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1146705] docker.sock owned by docker group but docker needs root

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1146705

Lokesh Mandvekar <lsm5(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://bugzilla.redhat.com
                   |                            |/show_bug.cgi?id=1149882



-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1146705] docker.sock owned by docker group but docker needs root

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1146705

Daniel Walsh <dwalsh(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|---                         |DUPLICATE
        Last Closed|                            |2014-10-24 16:43:42



--- Comment #7 from Daniel Walsh <dwalsh(a)redhat.com&gt; ---


*** This bug has been marked as a duplicate of bug 1145270 ***

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1146705] docker.sock owned by docker group but docker needs root

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1146705



--- Comment #8 from Lokesh Mandvekar <lsm5(a)fedoraproject.org&gt; ---
Dan,

Correct me if I'm wrong, but don't think this is a duplicate of Bug 1145270.
/var/run/docker.sock does seem to be in docker group by default (systemd
versions on fedora do have SocketUser and SocketGroup support too), but root is
still needed to access docker commands.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1146705] docker.sock owned by docker group but docker needs root

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1146705



--- Comment #9 from Daniel Walsh <dwalsh(a)redhat.com&gt; ---
Not on my machine.

Can you Strace the docker command to see where you are getting permission
denied?

-- 
You are receiving this mail because:
You are on the CC list for the bug.