Permission denied on temp config file in entrypoint

Question

Permission denied on temp config file in entrypoint

razaqq opened this issue 2 years ago · comments

/entrypoint.sh: line 303: /tmp/config.yml: Permission denied and container restarts indefinitely

Joshua Powers · Answer 1 · Wed Sep 21 2022 01:13:35 GMT+0800 (China Standard Time)

Hi,

Can you provide some more details, like what container image you are using? How you are launching that container? A docker file if applicable?

Thanks

razaqq · Answer 2 · Wed Sep 21 2022 06:44:59 GMT+0800 (China Standard Time)

has nothing to do with the compose file but here it is anyways
the temp file is being created with wrong permissions, set the permissions in the entrypoint or smth

version: '3'

services:
  influxdb:
    image: influxdb:latest
    container_name: influxdb
    ports:
      - 8086:8086
    volumes:
      - ./influxdb/data:/var/lib/influxdb2
      - ./influxdb/config:/etc/influxdb2
    environment:
      - DOCKER_INFLUXDB_INIT_MODE=setup
      - DOCKER_INFLUXDB_INIT_USERNAME=user
      - DOCKER_INFLUXDB_INIT_PASSWORD=pass
      - DOCKER_INFLUXDB_INIT_ORG=grafana
      - DOCKER_INFLUXDB_INIT_BUCKET=grafana
      - DOCKER_INFLUXDB_INIT_CLI_CONFIG_NAME=grafana
      - DOCKER_INFLUXDB_INIT_ADMIN_TOKEN=token
      - INFLUXD_CONFIG_PATH=/etc/influxdb2
    restart: always

Joshua Powers · Answer 3 · Wed Sep 21 2022 21:49:14 GMT+0800 (China Standard Time)

has nothing to do with the compose file but here it is anyways

This repo contains docker files for more than one product. Based on your initial post it was not entirely clear if it was about InfluxDB or a different product. Nor did you provide a way to reproduce.

If I run with the influxdb:latest docker image, influxdb starts up with no restarting. If I run with your env settings added, InfluxDB starts up as expected as well:

docker run -it --rm -p 8086:8086 --name influxdb --env DOCKER_INFLUXDB_INIT_MODE=setup --env DOCKER_INFLUXDB_INIT_USERNAME=user --env DOCKER_INFLUXDB_INIT_PASSWORD=password! --env DOCKER_INFLUXDB_INIT_ORG=grafana --env DOCKER_INFLUXDB_INIT_BUCKET=grafana --env DOCKER_INFLUXDB_INIT_CLI_CONFIG_NAME=grafana --env DOCKER_INFLUXDB_INIT_ADMIN_TOKEN=token influxdb:latest
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
2022-09-21T13:45:44.872573491Z	info	booting influxd server in the background	{"system": "docker"}
2022-09-21T13:45:44.926775Z	info	Welcome to InfluxDB	{"log_id": "0d44b2sW000", "version": "v2.4.0", "commit": "de247bab08", "build_date": "2022-08-18T19:41:15Z", "log_level": "info"}
2022-09-21T13:45:44.926796Z	warn	nats-port argument is deprecated and unused	{"log_id": "0d44b2sW000"}
2022-09-21T13:45:44.930628Z	info	Resources opened	{"log_id": "0d44b2sW000", "service": "bolt", "path": "/var/lib/influxdb2/influxd.bolt"}
2022-09-21T13:45:44.930661Z	info	Resources opened	{"log_id": "0d44b2sW000", "service": "sqlite", "path": "/var/lib/influxdb2/influxd.sqlite"}
2022-09-21T13:45:44.932770Z	info	Bringing up metadata migrations	{"log_id": "0d44b2sW000", "service": "KV migrations", "migration_count": 20}
2022-09-21T13:45:45.119530Z	info	Bringing up metadata migrations	{"log_id": "0d44b2sW000", "service": "SQL migrations", "migration_count": 7}
2022-09-21T13:45:45.145449Z	info	Using data dir	{"log_id": "0d44b2sW000", "service": "storage-engine", "service": "store", "path": "/var/lib/influxdb2/engine/data"}
2022-09-21T13:45:45.145475Z	info	Compaction settings	{"log_id": "0d44b2sW000", "service": "storage-engine", "service": "store", "max_concurrent_compactions": 16, "throughput_bytes_per_second": 50331648, "throughput_bytes_per_second_burst": 50331648}
2022-09-21T13:45:45.145483Z	info	Open store (start)	{"log_id": "0d44b2sW000", "service": "storage-engine", "service": "store", "op_name": "tsdb_open", "op_event": "start"}
2022-09-21T13:45:45.145517Z	info	Open store (end)	{"log_id": "0d44b2sW000", "service": "storage-engine", "service": "store", "op_name": "tsdb_open", "op_event": "end", "op_elapsed": "0.035ms"}
2022-09-21T13:45:45.145531Z	info	Starting retention policy enforcement service	{"log_id": "0d44b2sW000", "service": "retention", "check_interval": "30m"}
2022-09-21T13:45:45.145537Z	info	Starting precreation service	{"log_id": "0d44b2sW000", "service": "shard-precreation", "check_interval": "10m", "advance_period": "30m"}
2022-09-21T13:45:45.145929Z	info	Starting query controller	{"log_id": "0d44b2sW000", "service": "storage-reads", "concurrency_quota": 1024, "initial_memory_bytes_quota_per_query": 9223372036854775807, "memory_bytes_quota_per_query": 9223372036854775807, "max_memory_bytes": 0, "queue_size": 1024}
2022-09-21T13:45:45.147014Z	info	Configuring InfluxQL statement executor (zeros indicate unlimited).	{"log_id": "0d44b2sW000", "max_select_point": 0, "max_select_series": 0, "max_select_buckets": 0}
2022-09-21T13:45:45.153822Z	info	Starting	{"log_id": "0d44b2sW000", "service": "telemetry", "interval": "8h"}
2022-09-21T13:45:45.154139Z	info	Listening	{"log_id": "0d44b2sW000", "service": "tcp-listener", "transport": "http", "addr": ":9999", "port": 9999}
2022-09-21T13:45:45.874486866Z	info	pinging influxd...	{"system": "docker", "ping_attempt": "0"}
2022-09-21T13:45:45.888892964Z	info	got response from influxd, proceeding	{"system": "docker", "total_pings": "1"}
User	Organization	Bucket
user	grafana		grafana
2022-09-21T13:45:45.973079287Z	info	Executing user-provided scripts	{"system": "docker", "script_dir": "/docker-entrypoint-initdb.d"}
2022-09-21T13:45:45.974292376Z	info	initialization complete, shutting down background influxd	{"system": "docker"}
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
2022-09-21T13:45:46.069897334Z	info	found existing boltdb file, skipping setup wrapper	{"system": "docker", "bolt_path": "/var/lib/influxdb2/influxd.bolt"}
2022-09-21T13:45:46.123898Z	info	Welcome to InfluxDB	{"log_id": "0d44b7Yl000", "version": "v2.4.0", "commit": "de247bab08", "build_date": "2022-08-18T19:41:15Z", "log_level": "info"}
2022-09-21T13:45:46.123937Z	warn	nats-port argument is deprecated and unused	{"log_id": "0d44b7Yl000"}
2022-09-21T13:45:46.130344Z	info	Resources opened	{"log_id": "0d44b7Yl000", "service": "bolt", "path": "/var/lib/influxdb2/influxd.bolt"}
2022-09-21T13:45:46.130381Z	info	Resources opened	{"log_id": "0d44b7Yl000", "service": "sqlite", "path": "/var/lib/influxdb2/influxd.sqlite"}
2022-09-21T13:45:46.135675Z	info	Checking InfluxDB metadata for prior version.	{"log_id": "0d44b7Yl000", "bolt_path": "/var/lib/influxdb2/influxd.bolt"}
2022-09-21T13:45:46.135735Z	info	Using data dir	{"log_id": "0d44b7Yl000", "service": "storage-engine", "service": "store", "path": "/var/lib/influxdb2/engine/data"}
2022-09-21T13:45:46.135751Z	info	Compaction settings	{"log_id": "0d44b7Yl000", "service": "storage-engine", "service": "store", "max_concurrent_compactions": 16, "throughput_bytes_per_second": 50331648, "throughput_bytes_per_second_burst": 50331648}
2022-09-21T13:45:46.135758Z	info	Open store (start)	{"log_id": "0d44b7Yl000", "service": "storage-engine", "service": "store", "op_name": "tsdb_open", "op_event": "start"}
2022-09-21T13:45:46.135806Z	info	Open store (end)	{"log_id": "0d44b7Yl000", "service": "storage-engine", "service": "store", "op_name": "tsdb_open", "op_event": "end", "op_elapsed": "0.048ms"}
2022-09-21T13:45:46.135823Z	info	Starting retention policy enforcement service	{"log_id": "0d44b7Yl000", "service": "retention", "check_interval": "30m"}
2022-09-21T13:45:46.135830Z	info	Starting precreation service	{"log_id": "0d44b7Yl000", "service": "shard-precreation", "check_interval": "10m", "advance_period": "30m"}
2022-09-21T13:45:46.136199Z	info	Starting query controller	{"log_id": "0d44b7Yl000", "service": "storage-reads", "concurrency_quota": 1024, "initial_memory_bytes_quota_per_query": 9223372036854775807, "memory_bytes_quota_per_query": 9223372036854775807, "max_memory_bytes": 0, "queue_size": 1024}
2022-09-21T13:45:46.137278Z	info	Configuring InfluxQL statement executor (zeros indicate unlimited).	{"log_id": "0d44b7Yl000", "max_select_point": 0, "max_select_series": 0, "max_select_buckets": 0}
2022-09-21T13:45:46.145620Z	info	Listening	{"log_id": "0d44b7Yl000", "service": "tcp-listener", "transport": "http", "addr": ":8086", "port": 8086}
2022-09-21T13:45:46.145641Z	info	Starting	{"log_id": "0d44b7Yl000", "service": "telemetry", "interval": "8h"}

The only things I am missing now are the two volumes you are mounting. Which makes me wonder what the permissions, user/groups are on those folders and if that is the cause. Do you see the same thing?

razaqq · Answer 4 · Mon Sep 11 2023 21:54:18 GMT+0800 (China Standard Time)

has nothing to do with the compose file but here it is anyways

This repo contains docker files for more than one product. Based on your initial post it was not entirely clear if it was about InfluxDB or a different product. Nor did you provide a way to reproduce.

If I run with the influxdb:latest docker image, influxdb starts up with no restarting. If I run with your env settings added, InfluxDB starts up as expected as well:

docker run -it --rm -p 8086:8086 --name influxdb --env DOCKER_INFLUXDB_INIT_MODE=setup --env DOCKER_INFLUXDB_INIT_USERNAME=user --env DOCKER_INFLUXDB_INIT_PASSWORD=password! --env DOCKER_INFLUXDB_INIT_ORG=grafana --env DOCKER_INFLUXDB_INIT_BUCKET=grafana --env DOCKER_INFLUXDB_INIT_CLI_CONFIG_NAME=grafana --env DOCKER_INFLUXDB_INIT_ADMIN_TOKEN=token influxdb:latest
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
2022-09-21T13:45:44.872573491Z	info	booting influxd server in the background	{"system": "docker"}
2022-09-21T13:45:44.926775Z	info	Welcome to InfluxDB	{"log_id": "0d44b2sW000", "version": "v2.4.0", "commit": "de247bab08", "build_date": "2022-08-18T19:41:15Z", "log_level": "info"}
2022-09-21T13:45:44.926796Z	warn	nats-port argument is deprecated and unused	{"log_id": "0d44b2sW000"}
2022-09-21T13:45:44.930628Z	info	Resources opened	{"log_id": "0d44b2sW000", "service": "bolt", "path": "/var/lib/influxdb2/influxd.bolt"}
2022-09-21T13:45:44.930661Z	info	Resources opened	{"log_id": "0d44b2sW000", "service": "sqlite", "path": "/var/lib/influxdb2/influxd.sqlite"}
2022-09-21T13:45:44.932770Z	info	Bringing up metadata migrations	{"log_id": "0d44b2sW000", "service": "KV migrations", "migration_count": 20}
2022-09-21T13:45:45.119530Z	info	Bringing up metadata migrations	{"log_id": "0d44b2sW000", "service": "SQL migrations", "migration_count": 7}
2022-09-21T13:45:45.145449Z	info	Using data dir	{"log_id": "0d44b2sW000", "service": "storage-engine", "service": "store", "path": "/var/lib/influxdb2/engine/data"}
2022-09-21T13:45:45.145475Z	info	Compaction settings	{"log_id": "0d44b2sW000", "service": "storage-engine", "service": "store", "max_concurrent_compactions": 16, "throughput_bytes_per_second": 50331648, "throughput_bytes_per_second_burst": 50331648}
2022-09-21T13:45:45.145483Z	info	Open store (start)	{"log_id": "0d44b2sW000", "service": "storage-engine", "service": "store", "op_name": "tsdb_open", "op_event": "start"}
2022-09-21T13:45:45.145517Z	info	Open store (end)	{"log_id": "0d44b2sW000", "service": "storage-engine", "service": "store", "op_name": "tsdb_open", "op_event": "end", "op_elapsed": "0.035ms"}
2022-09-21T13:45:45.145531Z	info	Starting retention policy enforcement service	{"log_id": "0d44b2sW000", "service": "retention", "check_interval": "30m"}
2022-09-21T13:45:45.145537Z	info	Starting precreation service	{"log_id": "0d44b2sW000", "service": "shard-precreation", "check_interval": "10m", "advance_period": "30m"}
2022-09-21T13:45:45.145929Z	info	Starting query controller	{"log_id": "0d44b2sW000", "service": "storage-reads", "concurrency_quota": 1024, "initial_memory_bytes_quota_per_query": 9223372036854775807, "memory_bytes_quota_per_query": 9223372036854775807, "max_memory_bytes": 0, "queue_size": 1024}
2022-09-21T13:45:45.147014Z	info	Configuring InfluxQL statement executor (zeros indicate unlimited).	{"log_id": "0d44b2sW000", "max_select_point": 0, "max_select_series": 0, "max_select_buckets": 0}
2022-09-21T13:45:45.153822Z	info	Starting	{"log_id": "0d44b2sW000", "service": "telemetry", "interval": "8h"}
2022-09-21T13:45:45.154139Z	info	Listening	{"log_id": "0d44b2sW000", "service": "tcp-listener", "transport": "http", "addr": ":9999", "port": 9999}
2022-09-21T13:45:45.874486866Z	info	pinging influxd...	{"system": "docker", "ping_attempt": "0"}
2022-09-21T13:45:45.888892964Z	info	got response from influxd, proceeding	{"system": "docker", "total_pings": "1"}
User	Organization	Bucket
user	grafana		grafana
2022-09-21T13:45:45.973079287Z	info	Executing user-provided scripts	{"system": "docker", "script_dir": "/docker-entrypoint-initdb.d"}
2022-09-21T13:45:45.974292376Z	info	initialization complete, shutting down background influxd	{"system": "docker"}
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
Command "print-config" is deprecated, use the influx-cli command server-config to display the configuration values from the running server
2022-09-21T13:45:46.069897334Z	info	found existing boltdb file, skipping setup wrapper	{"system": "docker", "bolt_path": "/var/lib/influxdb2/influxd.bolt"}
2022-09-21T13:45:46.123898Z	info	Welcome to InfluxDB	{"log_id": "0d44b7Yl000", "version": "v2.4.0", "commit": "de247bab08", "build_date": "2022-08-18T19:41:15Z", "log_level": "info"}
2022-09-21T13:45:46.123937Z	warn	nats-port argument is deprecated and unused	{"log_id": "0d44b7Yl000"}
2022-09-21T13:45:46.130344Z	info	Resources opened	{"log_id": "0d44b7Yl000", "service": "bolt", "path": "/var/lib/influxdb2/influxd.bolt"}
2022-09-21T13:45:46.130381Z	info	Resources opened	{"log_id": "0d44b7Yl000", "service": "sqlite", "path": "/var/lib/influxdb2/influxd.sqlite"}
2022-09-21T13:45:46.135675Z	info	Checking InfluxDB metadata for prior version.	{"log_id": "0d44b7Yl000", "bolt_path": "/var/lib/influxdb2/influxd.bolt"}
2022-09-21T13:45:46.135735Z	info	Using data dir	{"log_id": "0d44b7Yl000", "service": "storage-engine", "service": "store", "path": "/var/lib/influxdb2/engine/data"}
2022-09-21T13:45:46.135751Z	info	Compaction settings	{"log_id": "0d44b7Yl000", "service": "storage-engine", "service": "store", "max_concurrent_compactions": 16, "throughput_bytes_per_second": 50331648, "throughput_bytes_per_second_burst": 50331648}
2022-09-21T13:45:46.135758Z	info	Open store (start)	{"log_id": "0d44b7Yl000", "service": "storage-engine", "service": "store", "op_name": "tsdb_open", "op_event": "start"}
2022-09-21T13:45:46.135806Z	info	Open store (end)	{"log_id": "0d44b7Yl000", "service": "storage-engine", "service": "store", "op_name": "tsdb_open", "op_event": "end", "op_elapsed": "0.048ms"}
2022-09-21T13:45:46.135823Z	info	Starting retention policy enforcement service	{"log_id": "0d44b7Yl000", "service": "retention", "check_interval": "30m"}
2022-09-21T13:45:46.135830Z	info	Starting precreation service	{"log_id": "0d44b7Yl000", "service": "shard-precreation", "check_interval": "10m", "advance_period": "30m"}
2022-09-21T13:45:46.136199Z	info	Starting query controller	{"log_id": "0d44b7Yl000", "service": "storage-reads", "concurrency_quota": 1024, "initial_memory_bytes_quota_per_query": 9223372036854775807, "memory_bytes_quota_per_query": 9223372036854775807, "max_memory_bytes": 0, "queue_size": 1024}
2022-09-21T13:45:46.137278Z	info	Configuring InfluxQL statement executor (zeros indicate unlimited).	{"log_id": "0d44b7Yl000", "max_select_point": 0, "max_select_series": 0, "max_select_buckets": 0}
2022-09-21T13:45:46.145620Z	info	Listening	{"log_id": "0d44b7Yl000", "service": "tcp-listener", "transport": "http", "addr": ":8086", "port": 8086}
2022-09-21T13:45:46.145641Z	info	Starting	{"log_id": "0d44b7Yl000", "service": "telemetry", "interval": "8h"}

The only things I am missing now are the two volumes you are mounting. Which makes me wonder what the permissions, user/groups are on those folders and if that is the cause. Do you see the same thing?

influxdb is creating tmp/config.yaml inside the container. how can the permissions be messed up? a year later this issue still exists...
how hard can it be to actually fix something in this repository?