docker1.10, seccomp and serf

[PAStheLoD]

Hello!

This is kind of a documentation problem/FYI, so just if someone else bumps into this, don't get too surprised.

Using docker-engine 1.10.1-0~wily (so the ubuntu docker package) results in a strange error:

$ docker run mashape/kong /usr/local/bin/serf agent 
==> Starting Serf agent...
==> Failed to start the Serf agent: Error creating Serf: Failed to create memberlist: Failed to start TCP listener. Err: listen tcp 0.0.0.0:7946: socket: operation not permitted

So one has to start it with a relaxed --security-opt setting.

$ docker run -it --security-opt seccomp:unconfined  mashape/kong /usr/local/bin/serf agent 
==> Starting Serf agent...
==> Starting Serf agent RPC...
==> Serf agent running!
         Node name: 'f8e0492ca4ff'
         Bind addr: '0.0.0.0:7946'
          RPC addr: '127.0.0.1:7373'
         Encrypted: false
          Snapshot: false
           Profile: lan

==> Log data will now stream in as it occurs:

    2016/02/15 10:18:46 [INFO] agent: Serf agent starting
    2016/02/15 10:18:46 [INFO] serf: EventMemberJoin: f8e0492ca4ff 172.17.0.2
    2016/02/15 10:18:47 [INFO] agent: Received event: member-join

^C

==> Caught signal: interrupt
==> Gracefully shutting down agent...
    2016/02/15 10:18:47 [INFO] agent: requesting graceful leave from Serf
    2016/02/15 10:18:47 [INFO] serf: EventMemberLeave: f8e0492ca4ff 172.17.0.2
    2016/02/15 10:18:47 [INFO] agent: requesting serf shutdown
    2016/02/15 10:18:47 [INFO] agent: shutdown complete

[ambrons]

@gottfrois this might also be related.

[gottfrois]

Damn! It solved my disk space issue by making kong stop writing logs to /tmp/serf.log.

[gottfrois]

@PAStheLoD man you saved the day, thx!

[subnetmarco]

@PAStheLoD thanks for the heads up!

[subnetmarco]

The documentation on the website has been updated. Thanks