Hello,
it might be a SELinux issue. Could you check /var/log/audit/audit.log for
lines containing the port number? If it is a SELinux issue you should see
something like this there
type=AVC msg=audit(1473324981.209:1007): avc: denied { name_connect } for
pid=4380 comm="diagnostic_con*" dest=4243
scontext=system_u:system_r:passenger_t:s0
tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
Adam
On Thu, Sep 8, 2016 at 10:43 AM, Thomas Bendler <[email protected]>
wrote:
> Hi @all,
>
> I try to setup the docker plugin on foreman but didn't get it up and
> running so far. I have two CentOS 7 boxes, one running foreman and one
> running docker. I've modified the docker sysconfig file to start docker
> with the remote API:
>
> [email protected] ~$ curl -XGET http://localhost:4243/version
>
> {"Version":"1.10.3","ApiVersion":"1.22","GitCommit"
> :"d381c64-unsupported","GoVersion":"go1.6.3","Os":"linux","Arch":"amd64","
> KernelVersion":"3.10.0-327.28.2.el7.x86_64","BuildTime":"
> 2016-08-04T13:21:17.566257784+00:00","PkgVersion":"docker-
> common-1.10.3-46.el7.centos.10.x86_64"}
>
> [email protected] ~$
>
> [...]
>
> [email protected] ~$ curl -XGET http://docker1.domain.local:
> 4243/version
>
> {"Version":"1.10.3","ApiVersion":"1.22","GitCommit"
> :"d381c64-unsupported","GoVersion":"go1.6.3","Os":"linux","Arch":"amd64","
> KernelVersion":"3.10.0-327.28.2.el7.x86_64","BuildTime":"
> 2016-08-04T13:21:17.566257784+00:00","PkgVersion":"docker-
> common-1.10.3-46.el7.centos.10.x86_64"}
>
> [email protected] ~$
>
> It work from the docker host and the foreman host, so far so good.
> Checking if additional operations work looks also good:
>
> [email protected] ~$ curl -XPOST http://docker1.domain.local:
> 4243/images/create?fromImage=centos:7
>
> {"status":"Trying to pull repository docker.io/library/centos ... "}
>
> {"status":"Pulling from docker.io/library/centos","id":"7"}
>
> {"status":"Pulling fs layer","progressDetail":{},"id":"8d30e94188e7"}
>
> {"status":"Downloading","progressDetail":{"current":
> 526329,"total":70591526},"progress":"[\u003e
> ] 526.3 kB/70.59 MB","id":"8d30e94188e7"}
>
> [...]
>
> {"status":"Extracting","progressDetail":{"current":
> 70591526,"total":70591526},"progress":"[==================
> ================================\u003e] 70.59 MB/70.59
> MB","id":"8d30e94188e7"}
>
> {"status":"Pull complete","progressDetail":{},"id":"8d30e94188e7"}
>
> {"status":"Pull complete","progressDetail":{},"id":"8d30e94188e7"}
>
> {"status":"Digest: sha256:2ae0d2c881c7123870114fb9cc7afa
> bd1e31f9888dac8286884f6cf59373ed9b"}
>
> {"status":"Status: Downloaded newer image for docker.io/centos:7"}
>
> [email protected] ~$
>
> But when I create the compute resource in foreman (without
> user/password/email), I get:
>
> Permission denied - connect(2) for 192.168.XXX.XXX:4243 (Errno::EACCES)
>
> If I use my Docker Hub credentials for user/password/email, I got the
> same error:
>
> Permission denied - connect(2) for 192.168.XXX.XXX:4243 (Errno::EACCES)
>
> Anyone any idea how can fix this?
>
> Regards Thomas
> --
> Linux ... enjoy the ride!
>
> --
> You received this message because you are subscribed to the Google Groups
> "Foreman users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> Visit this group at https://groups.google.com/group/foreman-users.
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.
