Hello Umang,

What are you current permissions on the /var/run/docker.sock ?

I faced the same issue, and to start and no rebuild the Prometheus image 
with the appropriate user.
I put the rights to read and write the docker.socket.

sudo chmod 766 /var/run/docker.sock

I hope this gonna help you.


On Friday, 7 August 2020 11:59:32 UTC+2, Umang Goel wrote:
>
> Hello Community,
>
> I tired using Docker Swarm Service Discovery in prometheus, but facing 
> problems using it. I followed the docker swarm support documentation 
> <https://prometheus.io/docs/guides/dockerswarm/>. Created a daemon.json 
> file and mounted /var/run/docker.sock in prometheus container. Container is 
> giving permission denied error as prometheus is running as nobody and 
> doesn't have access to mounted /var/run/docker.sock. Below is my 
> prometheus.yml.
> Prometheus Version : v2.20.1
>
>  prometheus:
>     image: prom/prometheus
>     networks:
>       - monitor
>     ports:
>       - "9090:9090"
>     command:
>       - '--config.file=/etc/prometheus/prometheus.yml'
>       - '--storage.tsdb.path=/prometheus'
>       - '--storage.tsdb.retention=${PROMETHEUS_RETENTION:-24h}'
>     volumes:
>       - prometheus:/prometheus
>       - /home/efs/devops/dsm:/etc/prometheus:ro
>       - /var/run/docker.sock:/var/run/docker.sock:ro
>     deploy:
>       mode: replicated
>       replicas: 1
>       resources:
>         limits:
>           memory: 1024M
>         reservations:
>           memory: 128M
>
> Prometheus.yml
>
> scrape_configs:
>   - job_name: 'docker'
>     dockerswarm_sd_configs:
>     - host: unix:///var/run/docker.sock
>       role: nodes
>
> Error:
> [email protected] <javascript:> | 
> level=error ts=2020-08-06T07:21:19.106Z caller=refresh.go:98 
> component="discovery manager scrape" discovery=dockerswarm msg="Unable to 
> refresh target groups" err="error while listing swarm nodes: Got permission 
> denied while trying to connect to the Docker daemon socket at 
> unix:///var/run/docker.sock: Get 
> \"http://%2Fvar%2Frun%2Fdocker.sock/v1.24/nodes\": dial unix 
> /var/run/docker.sock: connect: permission denied
>

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-users/b713d343-7827-45fd-93ce-976dbf38c3aao%40googlegroups.com.

Reply via email to