Granted permission to refuse when trying to connect to the socket of the Docker daemon in unix: ///var/run/docker.sock

Question

Granted permission to refuse when trying to connect to the socket of the Docker daemon in unix: ///var/run/docker.sock

I'm new to docker. I was just trying to use docker on my local machine (Ubuntu 16.04) with Jenkins.

I configured a new job with a sub script.

node {
    stage('Build') {
      docker.image('maven:3.3.3').inside {
        sh 'mvn --version'
      }
    }
}

But with an error below.

+99

docker jenkins jenkins-pipeline

Ponsuyambu velladurai Dec 17 '17 at 11:08

source share

17 answers

:

usermod -aG docker jenkins
usermod -aG root jenkins
chmod 664 /var/run/docker.sock

, :

chmod 777 /var/run/docker.sock

, , .

+36

Kevin Garay 19 . '18 13:34

sudo usermod -a -G docker $USER
reboot

+23

shellhub 04 . '18 12:40

jenkins jenkins, .

sudo usermod -a -G root jenkins
sudo service jenkins restart

+12

Ponsuyambu Velladurai 22 . '17 23:33

2018-08-19

, " ", , , .

Jenkins :

/var/run/docker.sock jenkins, .
, . , . ,
sudo usermod -a -g docker jenkins, jenkins docker. , , gid , gid .

exec : groupmod -g <YOUR_HOST_DOCKER_GID> docker.

, /var/run/docker.sock 777 - , /var/run/docker.sock .

+9

Urosh T. 19 . '18 20:29

Jenkins, Docker, Jenkins Docker- - Ubuntu 16.04 /var/run/docker.sock.

:

1) - (docker exec -it jenkins bash )

usermod -a -G docker jenkins
chmod 664 /var/run/docker.sock
service jenkins restart (or systemctl restart jenkins.service)
su jenkins

2) -:

sudo service docker restart

664 - ( ) .

+6

heroin 02 . '18 10:58

docker jenkins

sudo usermod -a -G docker jenkins

Docker Jenkins. , Jenkinsfile pipeline{agent{dockerfile pipeline{agent{image:

pipeline {
    agent {
        dockerfile {
            filename 'Dockerfile.jenkinsAgent'
        }
    }
    stages {

, docker run, .

() Docker.
Docker, Docker-in-Docker, .
, . , docker run ( sudo).

Docker

Docker- Docker, Docker Dockerfile:

# Dockerfile.jenkinsAgent
FROM debian:stretch-backports
# Install Docker in the image, which adds a docker group
RUN apt-get -y update && \
 apt-get -y install \
   apt-transport-https \
   ca-certificates \
   curl \
   gnupg \
   lsb-release \
   software-properties-common

RUN curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add -
RUN add-apt-repository \
   "deb [arch=amd64] https://download.docker.com/linux/debian \
   $(lsb_release -cs) \
   stable"

RUN apt-get -y update && \
 apt-get -y install \
   docker-ce \
   docker-ce-cli \
   containerd.io

...

Docker

, Jenkins Docker, Docker Docker, . , Jenkins Docker :

pipeline {
    agent {
        dockerfile {
            filename 'Dockerfile.jenkinsAgent'
            args '-v /var/run/docker.sock:/var/run/docker.sock'
        }
    }

UID GID

. . , , - UID GID Docker ( root.docker). , ( useradd... jenkins groupadd... docker Jenkins Docker). jenkins docker

args '-v /var/run/docker.sock:/var/run/docker.sock -u jenkins:docker'

Docker jenkins docker , Docker, , jenkins, , , UID GID , , GID docker

, docker build Dockerfile , Docker:

pipeline {
    agent {
        dockerfile {
            filename 'Dockerfile.jenkinsAgent'
            additionalBuildArgs  '--build-arg JENKINSUID='id -u jenkins' --build-arg JENKINSGID='id -g jenkins' --build-arg DOCKERGID='stat -c %g /var/run/docker.sock''
            args '-v /var/run/docker.sock:/var/run/docker.sock -u jenkins:docker'
        }
    }

id UID GID jenkins stat Docker.

Dockerfile , jenkins docker , groupadd, groupmod useradd:

# Dockerfile.jenkinsAgent
FROM debian:stretch-backports
ARG JENKINSUID
ARG JENKINSGID
ARG DOCKERGID
...
# Install Docker in the image, which adds a docker group
RUN apt-get -y update && \
 apt-get -y install \
   apt-transport-https \
   ca-certificates \
   curl \
   gnupg \
   lsb-release \
   software-properties-common

RUN curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add -
RUN add-apt-repository \
   "deb [arch=amd64] https://download.docker.com/linux/debian \
   $(lsb_release -cs) \
   stable"

RUN apt-get -y update && \
 apt-get -y install \
   docker-ce \
   docker-ce-cli \
   containerd.io

...
# Setup users and groups
RUN groupadd -g ${JENKINSGID} jenkins
RUN groupmod -g ${DOCKERGID} docker
RUN useradd -c "Jenkins user" -g ${JENKINSGID} -G ${DOCKERGID} -M -N -u ${JENKINSUID} jenkins

+4

Raedwald 08 . '19 17:34

2019-02-16

, . , usermod .

:

sudo usermod -a -G docker jenkins

( - :

docker exec -t -i my_container_id_or_name /bin/bash

)

:

usermod: 'jenkins'

:

, . :

#1) Respect the privacy of others.
#2) Think before you type.
#3) With great power comes great responsibility.

[sudo] :

.

sudo , Docker :

usermod: . usermod: /etc/passwd; .

: :

docker exec -t -i -u root my_container_id_or_name /bin/bash

root :

usermod -a -G docker jenkins

:

docker restart my_container_id_or_name

, .

root usermod jenkins.

+2

Z3d4s 16 . '19 12:38

2019-05-26

!

docker-compose:

version: "3"
services:
  jenkins:
    image: jenkinsci/blueocean
    privileged: true
    ports:
      - "8080:8080"
    volumes:
      - $HOME/learning/jenkins/jenkins_home:/var/jenkins_home
    environment:
      - DOCKER_HOST=tcp://socat:2375
    links:
      - socat

  socat:
     image: bpack/socat
     command: TCP4-LISTEN:2375,fork,reuseaddr UNIX-CONNECT:/var/run/docker.sock
     volumes:
        - /var/run/docker.sock:/var/run/docker.sock
     expose:
        - "2375"

+2

pham cuong 25 '19 19:24

jenkins docker , jenkins .

# usermod -g docker jenkins
# usermod -a -G jenkins jenkins

jenkins jenkins, .

+1

Camilo Silva 07 . '18 0:53

sudo usermod -a -G docker jenkins
sudo service jenkins restart

+1

Frank Hou 21 . '19 2:18

, , . https://hub.docker.com/r/fristonio/jenkins_docker/

. , Docker

0

Deepesh Pathak 21 '18 21:10

- Linux.

https://docs.docker.com/install/linux/linux-postinstall/

0

Akash5288 12 . '19 18:59

, Jenkins,

sudo setfacl -m user:tomcat:rw /var/run/docker.sock

-

-v /var/run/docker.sock:/var/run/docker.sock

setfacl , "-u user". , Jenkins. .

0

java4africa 10 . '19 22:59

. , GID, :

FROM jenkins/jenkins:lts
...
CMD DOCKER_GID=$(stat -c '%g' /var/run/docker.sock) && \
    groupadd -for -g ${DOCKER_GID} docker && \
    usermod -aG docker jenkins && \
    sudo -E -H -u jenkins bash -c /usr/local/bin/jenkins.sh

.: https://github.com/jenkinsci/docker/issues/263

jenkins :

-v /var/run/docker.sock:/var/run/docker.sock \
-u jenkins:$(getent group docker | cut -d: -f3)

, jenkins Docker. : https://getintodevops.com/blog/the-simple-way-to-run-docker-in-docker-for-ci

0

Gillespie 03 . '19 15:44

. .

ubuntu@node1:~$ docker run hello-world
docker: Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Post http://%2Fvar%2Frun%2Fdocker.sock/v1.38/containers/create: dial unix /var/run/docker.sock: connect: permission denied.
See 'docker run --help'.

: , , /var/run/docker.sock:

ubuntu@ip-172-31-21-106:/var/run$ ls -lrth docker.sock
srw-rw---- 1 root root 0 Oct 17 11:08 docker.sock
ubuntu@ip-172-31-21-106:/var/run$ sudo chmod 666 /var/run/docker.sock
ubuntu@ip-172-31-21-106:/var/run$ ls -lrth docker.sock
srw-rw-rw- 1 root root 0 Oct 17 11:08 docker.sock

docket.sock , .

ubuntu@ip-172-31-21-106:/var/run$ docker run hello-world
Unable to find image 'hello-world:latest' locally
latest: Pulling from library/hello-world
1b930d010525: Pull complete
Digest: sha256:c3b4ada4687bbaa170745b3e4dd8ac3f194ca95b2d0518b417fb47e5879d9b5f
Status: Downloaded newer image for hello-world:latest

Hello from Docker!
This message shows that your installation appears to be working correctly.

To generate this message, Docker took the following steps:
 1. The Docker client contacted the Docker daemon.
 2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
    (amd64)
 3. The Docker daemon created a new container from that image which runs the
    executable that produces the output you are currently reading.
 4. The Docker daemon streamed that output to the Docker client, which sent it
    to your terminal.

To try something more ambitious, you can run an Ubuntu container with:
 $ docker run -it ubuntu bash

Share images, automate workflows, and more with a free Docker ID:
 https://hub.docker.com/

For more examples and ideas, visit:
 https://docs.docker.com/get-started/

0

Srikant Patra 17 . '19 13:23

, "-u root"

,

-4

Anders K. 21 . '18 22:52

austingray · Accepted Answer · 2018-01-25T19:14:20+0000

The user jenkinsmust be added to the group docker:

sudo usermod -a -G docker jenkins

Then restart Jenkins.

edit

If you came to this stack overflow question because you received this message from docker but don’t use jenkins, then most likely the error is the same: your unprivileged user does not belong to the docker group.

You can do:

sudo usermod -a -G docker alice

.

, cat/etc/group - :

docker:x:998:alice

.

, relogin!

Granted permission to refuse when trying to connect to the socket of the Docker daemon in unix: ///var/run/docker.sock

edit

Docker

Docker

UID GID

More articles: