Installing SAP HANA, express edition with Docker - ERROR: Insufficient permissions on /hana/mounts. Required permissions: rwx

[the1bit]

Tutorial URL: https://developers.sap.com/tutorials/hxe-ua-install-using-docker.html

I have an issue at Step 8: Start SAP HANA, express edition Container, when I execute the command:

docker run -p 39013:39013 -p 39017:39017 -p 39041-39045:39041-39045 -p 1128-1129:1128-1129 -p 59013-59014:59013-59014 -v /data/saphana:/hana/mounts \
--ulimit nofile=1048576:1048576 \
--sysctl kernel.shmmax=1073741824 \
--sysctl net.ipv4.ip_local_port_range='40000 60999' \
--sysctl kernel.shmmni=524288 \
--sysctl kernel.shmall=8388608 \
--name saphanaexpress01 \
store/saplabs/hanaexpress:2.00.033.00.20180925.2 \
--passwords-url file://data/masterpwd.json \
--agree-to-sap-license

Error message: ERROR: Insufficient permissions on /hana/mounts. Required permissions: rwx

======== Starting HANA container run script ========
Started at: Mon Feb 11 12:09:24 UTC 2019
Script parameters: --passwords-url file://data/masterpwd.json --agree-to-sap-license
HANA version: 2.00.033.00.1535711040
Linux kernel version: 4.9
New host: '19eddacfba7f'
Setting HANAs host name to '19eddacfba7f' ...
Checking allowed mountpoints ...
ERROR: Insufficient permissions on /hana/mounts. Required permissions: rwx

Tryings, which don'4 work:

• I tried execute command in name of root
• I tried execute command in name of non-root user
• I modified the permission of /data/saphana to 777
• I modified the permission of masterpwd.json to 777

Please help me to solve this issue.

Other information:

• Base OS: Ubuntu 18.04 LTE (WSL on W10)
• Docker version: 18.09.1, build 4c52b90

Feel free to get in touch with any questions.

Thank you for your help in this matter.

[TerryNing]

Try to change:

-v /data/saphana:/hana/mounts --passwords-url file://data/masterpwd.json
==>
-v /data/saphana:/hana/mounts --passwords-url file:///hana/mounts/masterpwd.json

[the1bit]

Hi,

Thank you for your response.
I made the changes but the result is same:

======== Starting HANA container run script ========
Started at: Wed Feb 13 08:14:17 UTC 2019
Script parameters: --passwords-url file://hana/mounts/masterpwd.json --agree-to-sap-license
HANA version: 2.00.033.00.1535711040
Linux kernel version: 4.9
New host: 'b0efcf7ab7da'
Setting HANAs host name to 'b0efcf7ab7da' ...
Checking allowed mountpoints ...
ERROR: Insufficient permissions on /hana/mounts. Required permissions: rwx

Command:

docker run -p 39013:39013 -p 39017:39017 -p 39041-39045:39041-39045 -p 1128-1129:1128-1129 -p 59013-59014:59013-59014 -v /data/saphana:/hana/mounts \
--ulimit nofile=1048576:1048576 \
--sysctl kernel.shmmax=1073741824 \
--sysctl net.ipv4.ip_local_port_range='40000 60999' \
--sysctl kernel.shmmni=524288 \
--sysctl kernel.shmall=8388608 \
--name saphanaexpress01 \
store/saplabs/hanaexpress:2.00.033.00.20180925.2 \
--passwords-url file://hana/mounts/masterpwd.json \
--agree-to-sap-license

Do you have any other idea?

Thanks again.

[TerryNing]

@the1bit

file://hana/mounts/masterpwd.json
==>
file:///hana/mounts/masterpwd.json

(file:///, 3 '/' , you could consider it as file:// + /hana/mounts/masterpwd.json )

[the1bit]

Great. I executed the fixed script and the result is same:

======== Starting HANA container run script ========
Started at: Wed Feb 13 09:54:08 UTC 2019
Script parameters: --passwords-url file:///hana/mounts/masterpwd.json --agree-to-sap-license
HANA version: 2.00.033.00.1535711040
Linux kernel version: 4.9
New host: 'd57491bc0345'
Setting HANAs host name to 'd57491bc0345' ...
Checking allowed mountpoints ...
ERROR: Insufficient permissions on /hana/mounts. Required permissions: rwx

[TerryNing]

maybe redundant check, could you execute
ls -l /data
ls -l /data/saphana

Also the tutorial link mentioned two related operations, I assume you also tried before trying 777
sudo chmod 600 /data/<directory_name>/<file_name>.json
sudo chown 12000:79 /data/<directory_name>/<file_name>.json

[the1bit]

I executed these:

sudo chmod 600 /data/<directory_name>/<file_name>.json
sudo chown 12000:79 /data/<directory_name>/<file_name>.json

Results:

ls -l /data
total 0
-rwxrwxrwx 1 12000 79   49 Feb 11 13:08 masterpwd.json
drwxrwxrwx 1 12000 79 4096 Feb 11 13:09 saphana

ls -l /data/saphana
total 0
-rw------- 1 12000 79 49 Feb 11 13:09 masterpwd.json

Nevertheless the docker result is same:

======== Starting HANA container run script ========
Started at: Wed Feb 13 13:13:31 UTC 2019
Script parameters: --passwords-url file:///hana/mounts/masterpwd.json --agree-to-sap-license
HANA version: 2.00.033.00.1535711040
Linux kernel version: 4.9
New host: '554cff20c68e'
Setting HANAs host name to '554cff20c68e' ...
Checking allowed mountpoints ...
ERROR: Insufficient permissions on /hana/mounts. Required permissions: rwx

[rericsson]

I was able to use the URL option to get the install to work. I used http://myjson.com to store the snippet of JSON containing the password and then used the following:

docker run -p 39013:39013 -p 39015:39015 -p 39041-39045:39041-39045 -p 1128-1129:1128-1129 -p 59013-59014:59013-59014 -p 39030-39033:39030-39033 -p 51000-51060:51000-51060 -p 53075:53075
-h hxehost
--ulimit nofile=1048576:1048576
--sysctl kernel.shmmax=1073741824
--sysctl net.ipv4.ip_local_port_range='60000 65535'
--sysctl kernel.shmmni=524288
--sysctl kernel.shmall=8388608
--name express_edition
store/saplabs/hanaexpressxsa:2.00.035.00.20190115.1
--agree-to-sap-license
--passwords-url https://api.myjson.com/bins/1844hs/

It takes quite a while (~30 minutes) but succeeded eventually.

[the1bit]

Hi @rericsson,

I tried your solution and it seems work. :-)

Nevertheless the official documentation is different and this is my biggest pain point. So thank you so much for your help. I am waiting for a working documentation. ;-) I am sure @TerryNing will be able to support me and the community.

Thank you for all of your help.

[the1bit]

Hi All,

Finally I stepped back to the original command (of course I used @rericsson's example) and I got rid of "-v" part of script.

So I executed this:

docker run -p 39013:39013 -p 39017:39017 -p 39041-39045:39041-39045 -p 1128-1129:1128-1129 -p 59013-59014:59013-59014 \
--ulimit nofile=1048576:1048576 \
--sysctl kernel.shmmax=1073741824 \
--sysctl net.ipv4.ip_local_port_range='40000 60999' \
--sysctl kernel.shmmni=524288 \
--sysctl kernel.shmall=8388608 \
--name saphanaexpress01 \
store/saplabs/hanaexpress:2.00.033.00.20180925.2 \
--passwords-url https://the1bithusadev.blob.core.windows.net/saphana/masterpwd.json \
--agree-to-sap-license

Surprisingly it works. :-)

@TerryNing: Colud you please help me to understand why the command goes to fail when we use "-v /data/saphana:/hana/mounts"?

Thanks in advance.

[rericsson]

The -v option is for bind mounting to a folder on the host. I'm not sure why it would fail but I always got a permissions problem on the password JSON file. I suppose it has something to do with the user accessing the file, but I could never get it to work even after opening the file to world+dog, so I tried the http option and that worked so I didn't pursue it. Maybe someone more steeped in the ways of docker bind mounting would know offhand.

Rob

[thecodester]

Thank you for your feedback. The issue seems to be resolved, so I am closing the issue.

Feel free to continue the discussion in the SAP Community or in the SAP Questions & Answers.

https://www.sap.com/community.html
https://answers.sap.com/index.html

[the1bit]

Hi,

The installation does not work according to documentations. From that point of view the issue is not solved.

I would like to ask you to update the documentation.

Thank you for your help.

BR,
TB