Re: [HTCondor-users] docker detection broken in centos 7

[Dimitri Maziuk <dmaziuk@xxxxxxxxxxxxx>]

So, a have a node where full condor restart with
 DOCKER = /etc/condor/docker.sh
 STARTER_DEBUG = D_FULLDEBUG
yields

> 11/01/19 17:28:44 DockerProc::Detect()
> 11/01/19 17:28:44 Attempting to run: '/etc/condor/docker.sh -v'.
> 11/01/19 17:28:46 Attempting to run: '/etc/condor/docker.sh info'.
> 11/01/19 17:28:47 [docker info] Client:
> 11/01/19 17:28:47 [docker info]
> 11/01/19 17:28:47 [docker info]  Containers: 0
> 11/01/19 17:28:47 [docker info]   Paused: 0
> 11/01/19 17:28:47 [docker info]  Images: 0
> 11/01/19 17:28:47 [docker info]  Storage Driver: overlay2
> 11/01/19 17:28:47 [docker info]   Supports d_type: true
> 11/01/19 17:28:47 [docker info]  Logging Driver: json-file
> 11/01/19 17:28:47 [docker info]  Plugins:
> 11/01/19 17:28:47 [docker info]   Network: bridge host ipvlan macvlan null overlay
> 11/01/19 17:28:47 [docker info]  Swarm: inactive
> 11/01/19 17:28:47 [docker info]  Default Runtime: runc
> 11/01/19 17:28:47 [docker info]  containerd version: b34a5c8af56e510852c35414db4c1f4fa6172339
> 11/01/19 17:28:47 [docker info]  init version: fec3683
> 11/01/19 17:28:47 [docker info]   seccomp
> 11/01/19 17:28:47 [docker info]  Kernel Version: 3.10.0-327.el7.x86_64
> 11/01/19 17:28:47 [docker info]  OSType: linux
> 11/01/19 17:28:47 [docker info]  CPUs: 2
> 11/01/19 17:28:47 [docker info]  Name: pelican.bmrb.wisc.edu
> 11/01/19 17:28:47 [docker info]  Docker Root Dir: /var/lib/docker
> 11/01/19 17:28:47 [docker info]  Registry: https://index.docker.io/v1/
> 11/01/19 17:28:47 [docker info]  Experimental: false
> 11/01/19 17:28:47 [docker info]   angelfish.bmrb.wisc.edu:5000
> 11/01/19 17:28:47 [docker info]   pike.bmrb.wisc.edu:5000
> 11/01/19 17:28:47 [docker info]  Live Restore Enabled: false
> 11/01/19 17:28:47 [docker info] WARNING: bridge-nf-call-iptables is disabled
> 11/01/19 17:28:47 [docker info]
> 11/01/19 17:28:47 DockerProc::Version()
> 11/01/19 17:28:47 Attempting to run: '/etc/condor/docker.sh -v'.
> 11/01/19 17:28:48 DockerProc::Version() found version 'Docker version 19.03.4, build 9013bf583a'

This seems to match CLI output. docker.sh is

> #!/bin/sh
> /usr/bin/env > /tmp/condor_docker_env 2>&1
> exec /usr/bin/docker "$@"

and /tmp/condor_docker_env contains

> CONDOR_PRIVATE_SHARED_PORT_COOKIE=401e18b1920b3ca0b3156829b356f9bf59a8fa11c7764bcdd01bbccce6d5d078
> CONDOR_PARENT_ID=pelican:11607:1572647319
> _CONDOR_ANCESTOR_11574=11607:1572647319:3742510822
> CONDOR_PROCD_ADDRESS_BASE=/var/run/condor/procd_pipe
> PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
> PWD=/var/log/condor
> LANG=en_US.UTF-8
> SHLVL=1
> WATCHDOG_PID=11574
> WATCHDOG_USEC=1200000000
> CONDOR_PROCD_ADDRESS=/var/run/condor/procd_pipe
> _=/usr/bin/env

CLI shell has a few more things, of course, like HOME, SHELL, LOGNAME,
but anyway docker is detected correctly.

And without those two:

> 11/01/19 17:44:38 (pid:11904) '/usr/bin/docker info' did not exit successfully (code 256); the first line of output was 'WARNING: Error loading config file: /root/.docker/config.json: stat /root/.docker/config.json: permission denied'.

-- no docker.

Furthermore with
 DOCKER = /etc/condor/docker.sh
only, I get
> 11/01/19 17:47:20 (pid:12055) DockerProc::Version() found version 'Docker version 19.03.4, build 9013bf583a'

-- yes docker.

/tmp/condor_docker_env is the same every time.

And with
 STARTER_DEBUG = D_FULLDEBUG
only, I get

> 11/01/19 17:53:09 DockerProc::Detect()
> 11/01/19 17:53:09 Attempting to run: '/usr/bin/docker -v'.
> 11/01/19 17:53:10 Attempting to run: '/usr/bin/docker info'.
> 11/01/19 17:53:10 '/usr/bin/docker info' did not exit successfully (code 256); the first line of output was 'WARNING: Error loading config file: /root/.docker/config.json:
> stat /root/.docker/config.json: permission denied'.
> 11/01/19 17:53:10 Attempting to run: '/usr/bin/singularity /usr/bin/singularity --version'.

-- no docker.

I'll keep this host at START = FALSE if anyone wants to play with it
next week, let's set that up off-list.

-- 
Dimitri Maziuk
Programmer/sysadmin
BioMagResBank, UW-Madison -- http://www.bmrb.wisc.edu

Attachment: signature.asc
Description: OpenPGP digital signature