portainer-ce 2.20.2 / rootless mode ?

[ThierryIT]

Ask a Question!

Daer all,
I have install on my ubuntu server, the docker rootless config.
This is working.

`Client: Docker Engine - Community
Version: 26.1.1
Context: rootless
Debug Mode: false
Plugins:
buildx: Docker Buildx (Docker Inc.)
Version: v0.14.0
Path: /usr/libexec/docker/cli-plugins/docker-buildx
compose: Docker Compose (Docker Inc.)
Version: v2.27.0
Path: /usr/libexec/docker/cli-plugins/docker-compose

Server:
Containers: 1
Running: 1
Paused: 0
Stopped: 0
Images: 1
Server Version: 26.1.1
Storage Driver: overlay2
Backing Filesystem: btrfs
Supports d_type: true
Using metacopy: false
Native Overlay Diff: false
userxattr: true
Logging Driver: json-file
Cgroup Driver: systemd
Cgroup Version: 2
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
Swarm: inactive
Runtimes: io.containerd.runc.v2 runc
Default Runtime: runc
Init Binary: docker-init
containerd version: e377xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
runc version: v1.1.12-0-g51d5e94
init version: de40ad0
Security Options:
seccomp
Profile: builtin
rootless
cgroupns
Kernel Version: 5.15.0-105-generic
Operating System: Ubuntu 22.04.4 LTS
OSType: linux
Architecture: x86_64
CPUs: 2
Total Memory: 3.826GiB
Name: proxmox-ve-node1-dockers-stations
ID: 86908938-69cf-42a4-8d78-3bd9492646dc
Docker Root Dir: /home/user/.local/share/docker
Debug Mode: false
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: false

WARNING: No cpu cfs quota support
WARNING: No cpu cfs period support
WARNING: No cpu shares support
WARNING: No cpuset support
WARNING: No io.weight support
WARNING: No io.weight (per device) support
WARNING: No io.max (rbps) support
WARNING: No io.max (wbps) support
WARNING: No io.max (riops) support
WARNING: No io.max (wiops) support
WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled`

I have followed line by line the documentation on doc.docker website.

After activating the rootless context (docker context use rootless) I have installed the docker Portainer:

docker run -d -p 9443:9443 --name=portainer --restart=always -v /$XDG_RUNTIME_DIR/docker.sock:/var/run/docker.sock -v portainer_data:/data portainer/portainer-ce

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:9443 0.0.0.0:* LISTEN 918/rootlesskit tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:2221 0.0.0.0:* LISTEN - tcp6 0 0 :::9443 :::* LISTEN 918/rootlesskit udp 0 0 127.0.0.53:53 0.0.0.0:* - udp 0 0 192.168.206.19:68 0.0.0.0:*

docker ps:

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 485bd5777e71 portainer/portainer-ce "/portainer" 9 seconds ago Up 6 seconds 8000/tcp, 9000/tcp, 0.0.0.0:9443->9443/tcp, :::9443->9443/tcp portainer

ports < 1024
net.ipv4.ip_unprivileged_port_start=0

But I am not able to join the server on port 9443.

Ideas ?

[ThierryIT]

It was a fw pb .... Disable it and working now :)
But I do not understand yet how to build new stack under rootless mode.
I have tried with the docker from oznu/cloudflare-ddns as test, didn't work ... I do have an failed to deploy a stack: Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running? The PATH is wrong, how to set it up with /run/user/1000/docker.sock instead ??
Thx

[ThierryIT]

I still do have this problem ....
I cannot install any stack because of this ...
Any help ?
Thx

[ThierryIT]

When trying to create a stack

2024/05/08 02:33PM WRN github.com/portainer/portainer/pkg/libstack@v0.0.0-20230711022654-64b227b2e146/compose/internal/composeplugin/composeplugin.go:161 > docker compose command failed | error="exit status 1" error_output="time=\"2024-05-08T14:33:22Z\" level=warning msg=\"The \\\"q562oW\\\" variable is not set. Defaulting to a blank string.\"\nCannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?\n" output= 2024/05/08 02:33PM WRN github.com/portainer/portainer/pkg/libstack@v0.0.0-20230711022654-64b227b2e146/compose/internal/composeplugin/composeplugin.go:161 > docker compose command failed | error="exit status 1" error_output="Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?\n" output=

I don't know what "q562oW" is ??

[ThierryIT]

progressing ... but

time=\"2024-05-08T15:02:00Z\" level=warning msg=\"The \\\"q562oW\\\" variable is not set. Defaulting to a blank string.\"\n Network traefik_socket-t Creating\n Network traefik_socket-t Created\n Container t-docker-socket-proxy Creating\n Container t-docker-socket-proxy Created\n Container traefik Creating\nError response from daemon: NanoCPUs can not be set, as your kernel does not support CPU CFS scheduler or the cgroup is not mounted\n" output= 2024/05/08 03:02PM ERR github.com/portainer/portainer/api/http/client/client.go:92 > unexpected status code | status_code=403

[ThierryIT]

resolved with

echo "GRUB_CMDLINE_LINUX=systemd.unified_cgroup_hierarchy=false" | sudo tee /etc/default/grub.d/cgroup.cfg sudo update-grub reboot

[ThierryIT]

working ... traefik, my first container is installed and working.

[ThierryIT]

thx