[Bug]: docker install MO 0.8.0 failed

[dengn]

Is there an existing issue for the same bug?

• I have checked the existing issues.

Environment

- Version or commit-id (e.g. v0.1.0 or 8b23a93): 0.8.0
- Hardware parameters:
- OS type:
- Others:

Actual Behavior

original issue: matrixorigin/matrixorigin.io.cn#508

I've also recreated this issue in a centos 7.9 and docker version 1.13. The developer who fired this issue used docker version 24.0.4.

But this docker problem doesn't happen in debian 11.1 and macOS.

It seems to be a permission related issue.

Expected Behavior

No response

Steps to Reproduce

No response

Additional information

No response

[dengn]

with --privileged=true it is able to run now.

docker run -d -p 6001:6001 --name matrixone --privileged=true matrixorigin/matrixone:0.8.0

[loveRhythm1990]

related with: docker-library/golang#467

the best option maybe disable CGO. also can be fixed by use --priviledge option, we need add document to explain this before CGO is disabled

[dengn]

doc has been updated with this --priviledge option. Let's say this is a temporary fix for now. We may search for better solutions.

https://docs.matrixorigin.cn/0.8.0/MatrixOne/Get-Started/install-on-linux/install-on-linux-method3/#1-docker

But this is still a problem, users may still have doubt or don't have this privilege at all. As I know, for windows, this is a super painful operation.

[loveRhythm1990]

in progress

[loveRhythm1990]

will check this issuer in next week

[loveRhythm1990]

sorry for delay, will check it in next few days

[loveRhythm1990]

I am working on it now

[loveRhythm1990]

I can't reproduce this problem on centos 7 and docker 24.0.5 and 24.0.4, I will try reproduce it on lower version of docker

[loveRhythm1990]

I cannot reproduce this issue on following env(I use a VMware virtual machine):

1. centos 7, use image here: http://isoredirect.centos.org/centos/7/isos/x86_64/

[lr90@localhost ~]$ uname -a
Linux localhost 3.10.0-1160.el7.x86_64 #1 SMP Mon Oct 19 16:18:59 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

2. docker version, I test version 24.0.5、24.0.4 and 18.06.3-ce, but 1.13 is too old(2017 year version), I did not test it (it is hard to install docker version 1.13 on centos, because of compatibly problem).

I install docker following steps here: https://docs.docker.com/engine/install/centos/#install-using-the-repository
then I startup MO by:

docker run -d -p 6001:6001 --name matrixone registry.cn-shanghai.aliyuncs.com/matrixorigin/matrixone:0.8.0

do I miss some points to reproduce this issue @dengn

[loveRhythm1990]

I can reproduce this issue in tencent cloud centos machine with docker 1.13.1, but after I upgrade docker version to community version 24.0.5, MO can start normally. It is very likely that the inherited docker 1.13.1 is too old.

centos kernel version: 3.10.0-1160.88.1.el7.x86_64

[loveRhythm1990]

After communicating with person who open original issue, it turns out that the cause of this issue is version of docker client and docker server mismatched: the docker client version is 24.0.4 while the server version is 20.10.9. after upgrade docker server to 24.0.4 the probelm is solved.

The reason behind this maybe the 24.0.4 client may enable more default seccomp option while server not default allowed.

we may need to determine a porper docker version scope for our user.

[aylei]

@dengn @loveRhythm1990

The root cause is go 1.20.0 introduce a new syscall which will blocked by the default seccompl profile in older versions of docker engine. The problem has been fixed in moby/moby#43594, the fix is available in docker 23.x or 24.x version and has been back-ported to 20.10.18 (https://docs.docker.com/engine/release-notes/20.10/#201018)

We need to update the documentation to notice people that they should and --privileged=true if their docker version is lower than the above versions, or they can upgrade the docker version according to docker's doc.

[loveRhythm1990]

documents need update

[loveRhythm1990]

@dengn hi, should this issue be closed ? since there is another issue tracing document enhancement