Docker: setup user operation not permitted

g3d · February 20, 2016, 7:07pm

I tried to run GitHub - codeclimate/codeclimate: Code Climate CLI inside circle ci container, but received error.

ubuntu@box667$ docker run \

–interactive --tty --rm
–env CODE_PATH=“$PWD”
–volume “$PWD”:/code
–volume /var/run/docker.sock:/var/run/docker.sock
–volume /tmp/cc:/tmp/cc
codeclimate/codeclimate analyze
WARNING: Your kernel does not support memory swappiness capabilities, memory swappiness discarded.
Starting analysis
Running brakeman: Done!
error: (CC::Analyzer::Engine::EngineFailure) engine brakeman failed with status 1 and stderr
WARNING: Your kernel does not support memory limit capabilities. Limitation discarded.
time=“2016-02-20T19:01:05Z” level=fatal msg=“setup user operation not permitted”
time=“2016-02-20T19:01:06Z” level=fatal msg=“Error response from daemon: Cannot destroy container 5f1e776791250d08a32fe2b37ae30c439e7e9b6c8f58f411b2963a1ca8549f2b: Driver btrfs failed t
o remove root filesystem 5f1e776791250d08a32fe2b37ae30c439e7e9b6c8f58f411b2963a1ca8549f2b: Failed to destroy btrfs snapshot: operation not permitted”
Error deleting container: Error response from daemon: Cannot destroy container d1f9f4722eb9b47c276c7d7bc6451d4a416877aa9be4a978a973c519ab20dcb2: Driver btrfs failed to remove root files
ystem d1f9f4722eb9b47c276c7d7bc6451d4a416877aa9be4a978a973c519ab20dcb2: Failed to destroy btrfs snapshot: operation not permitted

If I receive rm flag I don’t receive error regarding btrfs, but looks like the root of the problem is user creation https://github.com/codeclimate-community/brakeman/blob/master/Dockerfile#L12.

Could you please suggest anything?

ckaeslin · April 4, 2016, 1:50pm

The problems are these two lines:

github.com

codeclimate/codeclimate/blob/master/lib/cc/analyzer/engine.rb#L56


  end
ensure
  delete_config_file
end


private


attr_reader :name, :metadata
attr_accessor :error


def handle_output(container, io, raw_output)
  output = EngineOutput.new(name, raw_output)


  return if output_filter.filter?(output)


  unless output.valid?
    self.error = Error.new("engine produced invalid output: #{output.error}")
    container.stop("output invalid")
  end


  unless io.write(output_overrider.apply(output).to_json)

and #61

I removed both and built a custom docker image (https://hub.docker.com/r/etops/codeclimate/) which works.

Topic		Replies	Views
Failing Tests using Dockers in CI Build Environment docker , sbt	6	4067	June 18, 2018
Permissions error with Docker Feedback & Bug Reports	5	1355	June 18, 2018
Error removing intermediate container during Docker build Build Environment docker	2	4779	June 18, 2018
Docker Error removing intermediate container Build Environment docker , known-issue	27	34428	June 18, 2018
Exit code from docker run Build Environment docker	1	2699	June 18, 2018

Docker: setup user operation not permitted

Related topics