[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Permission Denied Error on OpenShift



Thanks Andy for the update.

I changed the permission and looks like the issue is resolved for now. Not sure what changed the permissions. I am using latest v1.4.1 version and there was new version rolled out few hours back. That resulted in hawkular container crash as well. Have opened another issue to track. 
https://github.com/openshift/origin-metrics/issues/331

Thanks,
Rahul

On Wed, Apr 12, 2017 at 12:09 PM, Andy Goldstein <agoldste redhat com> wrote:
I don't have a solution for your permissions issue, but we strongly recommend against NFS for storage for the registry. It doesn't have read-after-write consistency guarantees, which means that even if you fix your permissions, it's possible for pushes to fail. Instead of NFS, we recommend one of the supported object storage drivers, such as S3 (or anything that implements the S3 APIs with read-after-write), Swift, GCS, Azure, Aliyun OSS, or (configured via the filesystem driver) GlusterFS or Ceph RBD. See https://docs.openshift.com/container-platform/3.5/install_config/registry/extended_registry_configuration.html#docker-registry-configuration-reference-storage for more details.

Here's the known issue on NFS + registry: https://docs.openshift.com/container-platform/3.5/install_config/registry/registry_known_issues.html#known-issue-nfs-image-push-fails

Andy

On Wed, Apr 12, 2017 at 11:19 AM, Rahul Agarwal <rahul334481 gmail com> wrote:
Hi Team,

While deploying the builds, receiving below error. Please review. I have checked the storage from NFS side looks good and am able to mount it manually to the master and nodes. It has 777 permission with nfsnobody:nfsnobody ownership.

[root oc-master1 ragarwal]# oc logs dc/docker-registry -n default | grep -i permission

time="2017-04-12T15:09:33.247977501Z" level=error msg="response completed with error" err.code=unknown err.detail="filesystem: mkdir /registry/docker/registry/v2/repositories/gt-test/gt-python/_uploads/acc712ee-ebfd-4d34-b9be-eef40421a401: permission denied" err.message="unknown error" go.version=go1.7.4 http.request.host="172.30.2.117:5000" http.request.id=02dc88ff-eece-41a4-be5a-3d94529f01bd http.request.method=POST http.request.remoteaddr="10.129.0.1:42868" http.request.uri="/v2/gt-test/gt-python/blobs/uploads/" http.request.useragent="docker/1.12.5 go/go1.7.4 kernel/3.10.0-514.6.1.el7.x86_64 os/linux arch/amd64 UpstreamClient(go-dockerclient)" http.response.contenttype="application/json; charset=utf-8" http.response.duration=19.97866ms http.response.status=500 http.response.written=245 instance.id=62514e19-2275-486d-9968-927b6999cfd8 vars.name="gt-test/gt-python" 

time="2017-04-12T15:09:33.374532632Z" level=error msg="response completed with error" err.code=unknown err.detail="filesystem: mkdir /registry/docker/registry/v2/repositories/gt-test/gt-django/_uploads/5f69a8f1-7094-4b1a-beaf-97c3cd3abf01: permission denied" err.message="unknown error" go.version=go1.7.4 http.request.host="172.30.2.117:5000" http.request.id=adb18498-2bec-4bf1-b009-f7dd4c31fb60 http.request.method=POST http.request.remoteaddr="10.129.0.1:42884" http.request.uri="/v2/gt-test/gt-django/blobs/uploads/" http.request.useragent="docker/1.12.5 go/go1.7.4 kernel/3.10.0-514.6.1.el7.x86_64 os/linux arch/amd64 UpstreamClient(go-dockerclient)" http.response.contenttype="application/json; charset=utf-8" http.response.duration=23.048585ms http.response.status=500 http.response.written=245 instance.id=62514e19-2275-486d-9968-927b6999cfd8 vars.name="gt-test/gt-django" 

time="2017-04-12T15:11:31.23962074Z" level=error msg="response completed with error" err.code=unknown err.detail="filesystem: mkdir /registry/docker/registry/v2/repositories/gt-test/gt-django/_uploads/3fe39c4f-ffc1-4697-a654-ed2cae3f703e: permission denied" err.message="unknown error" go.version=go1.7.4 http.request.host="172.30.2.117:5000" http.request.id=04df2ed0-f337-46c9-a4b4-c85659803cdc http.request.method=POST http.request.remoteaddr="10.129.0.1:43022" http.request.uri="/v2/gt-test/gt-django/blobs/uploads/" http.request.useragent="docker/1.12.5 go/go1.7.4 kernel/3.10.0-514.6.1.el7.x86_64 os/linux arch/amd64 UpstreamClient(go-dockerclient)" http.response.contenttype="application/json; charset=utf-8" http.response.duration=19.852262ms http.response.status=500 http.response.written=245 instance.id=62514e19-2275-486d-9968-927b6999cfd8 vars.name="gt-test/gt-django" 


Thanks,

Rahul Agarwal


_______________________________________________
users mailing list
users lists openshift redhat com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]