Yes you are correct I am also running my slave jenkins user under docker group but I cant run docker commands using Jenkins user.
My Dockerfile end of the lines look likes.. RUN usermod -aG docker jenkins RUN gpasswd -a jenkins docker #RUN systemctl restart docker USER jenkins ENTRYPOINT ["/usr/local/bin/jenkins-slave"] Kidly suggest how to fix this issue. On Tuesday, February 2, 2016 at 9:34:34 PM UTC+5:30, Mulloy Morrow wrote: > > My Jenkins user is part of the docker group. That's why I was surprised by > this error. > > On Mon, Feb 1, 2016, 11:41 PM nicolas de loof <[email protected] > <javascript:>> wrote: > >> docker socket is only accessible to users in docker group or to root. >> running from a container doesn't bypass such permission check. >> >> 2016-02-01 23:55 GMT+01:00 Mulloy Morrow <[email protected] >> <javascript:>>: >> >>> Was able to get this working. Mounted the docker socket using the mount >>> point configs in the jenkins plugin. However, I was getting a permission >>> denied when trying to nc or curl the socket for info. I had to run the >>> slaves as user root rather than user jenkins. Has either of you come across >>> this issue? >>> >>> >>> On Monday, February 1, 2016 at 10:48:15 AM UTC-8, Mulloy Morrow wrote: >>>> >>>> >>>> Has anyone successfully been able to mount the Docker UNIX socket on >>>> the slave containers? I've attempted to mount this socket using the >>>> Jenkins >>>> ECS plugin (v1.2) by configuring "container mount points". (see jenkins >>>> config screenshot below) >>>> >>>> >>>> <https://lh3.googleusercontent.com/-OMv5j1De_So/Vq-oNwqovqI/AAAAAAACzGo/hppFEgNB3bs/s1600/Screen%2BShot%2B2016-02-01%2Bat%2B10.42.52%2BAM.png> >>>> >>>> On Monday, January 25, 2016 at 7:52:30 AM UTC-8, nicolas de loof wrote: >>>>> >>>>> Latest development build for ECS plugin do let you define bind mounts, >>>>> see >>>>> https://jenkins.ci.cloudbees.com/job/plugins/job/amazon-ecs-plugin/ >>>>> >>>>> 2016-01-25 16:33 GMT+01:00 Brandon Wagner <[email protected]>: >>>>> >>>>>> If I'm understanding correctly, I would mount the docker.sock to the >>>>>> slave container? I created an image extended from the >>>>>> jenkinsci/jnlp-slave >>>>>> that does a wget for the docker CLI. >>>>>> >>>>>> However, I don't see a place to mount the docker.sock through the ECS >>>>>> configuration options. >>>>>> >>>>>> >>>>>> -Brandon Wagner >>>>>> >>>>>> On Sat, Jan 23, 2016 at 1:08 PM, nicolas de loof < >>>>>> [email protected]> wrote: >>>>>> >>>>>>> You could use docker-custom-build-environment-plugin for this exact >>>>>>> scenario, with bind mounted /var/run/docker.sock so you can run >>>>>>> containers >>>>>>> side by side (vs "in-docker"). Would need some tests on my side to >>>>>>> ensure >>>>>>> this scenario is supported, I have this on my TOD for a while but never >>>>>>> took time to setup a test environment for it... >>>>>>> >>>>>>> 2016-01-22 21:01 GMT+01:00 Brandon Wagner <[email protected]>: >>>>>>> >>>>>>>> I would like to run Docker containers for all of my software >>>>>>>> projects and dynamically allocate build slaves via ECS (so that I can >>>>>>>> have >>>>>>>> a core cluster that can do builds quickly; in contrast to spinning up >>>>>>>> an >>>>>>>> EC2 instance). >>>>>>>> >>>>>>>> For example, I have a Java application which is completely >>>>>>>> contained in a Docker container (I can build it, run tests, and run >>>>>>>> the >>>>>>>> actual application with Tomcat all within the container). I want to >>>>>>>> use >>>>>>>> this for a variety of different purposes (dev, testing, qa, and >>>>>>>> production). In order to make it reusable like that, I don't want to >>>>>>>> include Jenkins Slave packages and expose ports. I'd rather deploy out >>>>>>>> a >>>>>>>> Jenkins-Slave container to my ECS cluster, and then have that slave >>>>>>>> handle >>>>>>>> running my application's docker container which also performs tests. >>>>>>>> >>>>>>>> I also support other team applications which are already running >>>>>>>> docker container builds in Jenkins (locally on the Jenkins Master). I >>>>>>>> want >>>>>>>> it to be transparent to them that I'm "outsourcing" build slaves to >>>>>>>> ECS. It >>>>>>>> shouldn't matter to them that I'm changing the way Jenkins is >>>>>>>> performing >>>>>>>> builds. >>>>>>>> >>>>>>>> Let me know if you (or anyone else) have suggestions based on my >>>>>>>> goals. >>>>>>>> >>>>>>>> -Brandon Wagner >>>>>>>> >>>>>>>> >>>>>>>> On Fri, Jan 22, 2016 at 2:48 PM, nicolas de loof < >>>>>>>> [email protected]> wrote: >>>>>>>> >>>>>>>>> privileged flag has been added to development build ( >>>>>>>>> https://jenkins.ci.cloudbees.com/job/plugins/job/amazon-ecs-plugin/ >>>>>>>>> ) >>>>>>>>> anyway, DinD is probably not a good idea (there's really few >>>>>>>>> docker usages to actually require it). What's your actual need ? >>>>>>>>> >>>>>>>>> 2016-01-22 20:46 GMT+01:00 Brandon Wagner <[email protected]>: >>>>>>>>> >>>>>>>>>> So I ended up figuring my issue out. I think there were a couple >>>>>>>>>> of issues. My JNLP port was set to 50,000 instead of 5,000 which the >>>>>>>>>> Jenkins Docker Container I was using was mapping to the host port >>>>>>>>>> 5000. And >>>>>>>>>> my Load Balancer in front of Jenkins was not forwarding port 5000 to >>>>>>>>>> the >>>>>>>>>> host (only 443). Anyways, all of that is fixed and I can now run >>>>>>>>>> builds on >>>>>>>>>> slaves in ECS. >>>>>>>>>> >>>>>>>>>> My next problem: I want to use docker-in-docker to run docker >>>>>>>>>> builds on my docker jenkins slaves. I'm trying to use >>>>>>>>>> https://github.com/tehranian/dind-jenkins-slave which looks >>>>>>>>>> good, but I don't see an option on the Jenkins ECS plugin to run the >>>>>>>>>> slave >>>>>>>>>> as privileged which is necessary for docker-in-docker. >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> -Brandon Wagner >>>>>>>>>> >>>>>>>>>> On Fri, Jan 22, 2016 at 7:11 AM, nicolas de loof < >>>>>>>>>> [email protected]> wrote: >>>>>>>>>> >>>>>>>>>>> First look into jenkins logs. >>>>>>>>>>> Also check on ECS a task definition has been created for >>>>>>>>>>> jenkins-slaves. >>>>>>>>>>> Also double check ECS nodes can ping your jenkins master URL. >>>>>>>>>>> >>>>>>>>>>> 2016-01-21 22:13 GMT+01:00 Brandon Wagner <[email protected]>: >>>>>>>>>>> >>>>>>>>>>>> I'm trying to use the Jenkins AWS EC2 Container Service (ECS) >>>>>>>>>>>> plugin to deploy Jenkins Slave Containers for builds. I have an >>>>>>>>>>>> ECS cluster >>>>>>>>>>>> setup, and I have it configured in my Jenkins Configuration. >>>>>>>>>>>> Everything >>>>>>>>>>>> appears to be good until I try to build a job, restricting to the >>>>>>>>>>>> ecs cloud >>>>>>>>>>>> label I setup, and it just comes back with "(pending— >>>>>>>>>>>> Jenkins-Container-Cloud-456...164 >>>>>>>>>>>> <https://jenkins.itsec.aolcloud.net/computer/Jenkins-Container-Cloud-456b6d1601164>is >>>>>>>>>>>> >>>>>>>>>>>> offline)" . >>>>>>>>>>>> >>>>>>>>>>>> Does anyone know how to fix this, or have suggestions on >>>>>>>>>>>> debugging steps? >>>>>>>>>>>> >>>>>>>>>>>> -- >>>>>>>>>>>> You received this message because you are subscribed to the >>>>>>>>>>>> Google Groups "Jenkins Users" group. >>>>>>>>>>>> To unsubscribe from this group and stop receiving emails from >>>>>>>>>>>> it, send an email to [email protected]. >>>>>>>>>>>> To view this discussion on the web visit >>>>>>>>>>>> https://groups.google.com/d/msgid/jenkinsci-users/f9bf24d9-a9e3-46f6-8fba-041b3344bdc7%40googlegroups.com >>>>>>>>>>>> >>>>>>>>>>>> <https://groups.google.com/d/msgid/jenkinsci-users/f9bf24d9-a9e3-46f6-8fba-041b3344bdc7%40googlegroups.com?utm_medium=email&utm_source=footer> >>>>>>>>>>>> . >>>>>>>>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> -- >>>>>>>>>>> You received this message because you are subscribed to a topic >>>>>>>>>>> in the Google Groups "Jenkins Users" group. >>>>>>>>>>> To unsubscribe from this topic, visit >>>>>>>>>>> https://groups.google.com/d/topic/jenkinsci-users/kSBWy3gBQbg/unsubscribe >>>>>>>>>>> . >>>>>>>>>>> To unsubscribe from this group and all its topics, send an email >>>>>>>>>>> to [email protected]. >>>>>>>>>>> To view this discussion on the web visit >>>>>>>>>>> https://groups.google.com/d/msgid/jenkinsci-users/CANMVJzks3yceTvUxrFd5cGo8tYwSFh%3D00V%3DzL%2BxJVB2kCmi%3DhQ%40mail.gmail.com >>>>>>>>>>> >>>>>>>>>>> <https://groups.google.com/d/msgid/jenkinsci-users/CANMVJzks3yceTvUxrFd5cGo8tYwSFh%3D00V%3DzL%2BxJVB2kCmi%3DhQ%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>>>>>>>>> . >>>>>>>>>>> >>>>>>>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>>>>>>> >>>>>>>>>> >>>>>>>>>> -- >>>>>>>>>> You received this message because you are subscribed to the >>>>>>>>>> Google Groups "Jenkins Users" group. >>>>>>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>>>>>> send an email to [email protected]. >>>>>>>>>> To view this discussion on the web visit >>>>>>>>>> https://groups.google.com/d/msgid/jenkinsci-users/CAKgdMg-%2Bs99MCNpwJz99QBs0NTke7EV2Tt%3DWPEj5NZBzjkJaHg%40mail.gmail.com >>>>>>>>>> >>>>>>>>>> <https://groups.google.com/d/msgid/jenkinsci-users/CAKgdMg-%2Bs99MCNpwJz99QBs0NTke7EV2Tt%3DWPEj5NZBzjkJaHg%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>>>>>>>> . >>>>>>>>>> >>>>>>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>>>>>> >>>>>>>>> >>>>>>>>> -- >>>>>>>>> You received this message because you are subscribed to a topic in >>>>>>>>> the Google Groups "Jenkins Users" group. >>>>>>>>> To unsubscribe from this topic, visit >>>>>>>>> https://groups.google.com/d/topic/jenkinsci-users/kSBWy3gBQbg/unsubscribe >>>>>>>>> . >>>>>>>>> To unsubscribe from this group and all its topics, send an email >>>>>>>>> to [email protected]. >>>>>>>>> To view this discussion on the web visit >>>>>>>>> https://groups.google.com/d/msgid/jenkinsci-users/CANMVJzmdKoB9PZfYNcA6tGMyC2pT5Mg13LP9UMMW%2Bt3FAC1qTA%40mail.gmail.com >>>>>>>>> >>>>>>>>> <https://groups.google.com/d/msgid/jenkinsci-users/CANMVJzmdKoB9PZfYNcA6tGMyC2pT5Mg13LP9UMMW%2Bt3FAC1qTA%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>>>>>>> . >>>>>>>>> >>>>>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>>>>> >>>>>>>> >>>>>>>> -- >>>>>>>> You received this message because you are subscribed to the Google >>>>>>>> Groups "Jenkins Users" group. >>>>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>>>> send an email to [email protected]. >>>>>>>> To view this discussion on the web visit >>>>>>>> https://groups.google.com/d/msgid/jenkinsci-users/CAKgdMg_jXunkKPoQHertFKDtu9Sikmm4X8vLvD2oOAm2n-OF7A%40mail.gmail.com >>>>>>>> >>>>>>>> <https://groups.google.com/d/msgid/jenkinsci-users/CAKgdMg_jXunkKPoQHertFKDtu9Sikmm4X8vLvD2oOAm2n-OF7A%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>>>>>> . >>>>>>>> >>>>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>>>> >>>>>>> >>>>>>> -- >>>>>>> You received this message because you are subscribed to a topic in >>>>>>> the Google Groups "Jenkins Users" group. >>>>>>> To unsubscribe from this topic, visit >>>>>>> https://groups.google.com/d/topic/jenkinsci-users/kSBWy3gBQbg/unsubscribe >>>>>>> . >>>>>>> To unsubscribe from this group and all its topics, send an email to >>>>>>> [email protected]. >>>>>>> To view this discussion on the web visit >>>>>>> https://groups.google.com/d/msgid/jenkinsci-users/CANMVJz%3DQhj1%2Bs2bKikkhbrn-8ws6ducuRr4c2o80i3X8XA_neQ%40mail.gmail.com >>>>>>> >>>>>>> <https://groups.google.com/d/msgid/jenkinsci-users/CANMVJz%3DQhj1%2Bs2bKikkhbrn-8ws6ducuRr4c2o80i3X8XA_neQ%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>>>>> . >>>>>>> >>>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>>> >>>>>> >>>>>> -- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "Jenkins Users" group. >>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>> send an email to [email protected]. >>>>>> To view this discussion on the web visit >>>>>> https://groups.google.com/d/msgid/jenkinsci-users/CAKgdMg9RGOr3yEuAN8CutBT9x3RcAGUya4fomKhE%2BsyHK77_cg%40mail.gmail.com >>>>>> >>>>>> <https://groups.google.com/d/msgid/jenkinsci-users/CAKgdMg9RGOr3yEuAN8CutBT9x3RcAGUya4fomKhE%2BsyHK77_cg%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>>>> . >>>>>> >>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>> >>>>> >>>>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Jenkins Users" group. >>> >> To unsubscribe from this group and stop receiving emails from it, send an >>> email to [email protected] <javascript:>. >>> >> To view this discussion on the web visit >>> https://groups.google.com/d/msgid/jenkinsci-users/b99c9efe-c1a8-49fb-a60f-029b551f0051%40googlegroups.com >>> >>> <https://groups.google.com/d/msgid/jenkinsci-users/b99c9efe-c1a8-49fb-a60f-029b551f0051%40googlegroups.com?utm_medium=email&utm_source=footer> >>> . >>> >>> For more options, visit https://groups.google.com/d/optout. >>> >> -- >> You received this message because you are subscribed to a topic in the >> Google Groups "Jenkins Users" group. >> To unsubscribe from this topic, visit >> https://groups.google.com/d/topic/jenkinsci-users/kSBWy3gBQbg/unsubscribe >> . >> To unsubscribe from this group and all its topics, send an email to >> [email protected] <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/jenkinsci-users/CANMVJzkwsGswL-x83YBkBepRgVfHLg0yMwVY3q%3DJ4W8htv1FTg%40mail.gmail.com >> >> <https://groups.google.com/d/msgid/jenkinsci-users/CANMVJzkwsGswL-x83YBkBepRgVfHLg0yMwVY3q%3DJ4W8htv1FTg%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > -- > > Best, > Mulloy Morrow > 858.598.3059 > -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/54ae3445-54aa-4708-8bc8-7016183f17ce%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
