Closed maximede closed 7 years ago
I have the exact same problem.
EDIT: seems to be working after doing a factory reset (Preferences -> Uninstall/Reset -> Reset to factory defaults)
Doing this would delete all the images and all the containers, right ?
@maximede yes, a factory reset would delete all images and containers. However your diagnostic contains errors suggesting that the docker symlinks have not been correctly installed by the installer, which is a known issue that we are currently working on. A possible workaround is to install the docker client manually by running:
ln -s ~/Library/Group\ Containers/group.com.docker/bin/docker /usr/local/bin/docker
May be related to docker/for-mac#785
Please ing to reopen if the workaround does not help.
@ijc25 Just tried the command but the symlink was already present
lrwxr-xr-x 1 me staff 73B Nov 17 16:36 /usr/local/bin/docker -> /Users/me/Library/Group Containers/group.com.docker/bin/docker
/var/log/docker.log
contains:
Error creating cluster component: error while loading TLS Certificate in /var/lib/docker/swarm/certificates/swarm-node.crt: x509: certificate has expired or is not yet valid
and the docker daemon appears to have died/exited. I think this relates to https://github.com/docker/docker/issues/24132 but it's unclear how/why this certificate has expired. I'm fairly sure that a factory reset would "fix" this issue at the expense of throwing away your existing containers and pulled images.
It seems like you may have had some residual swarm configuration issues from when you were running 1.12.1. there are lots of messages like this dating from before you updated:
time="2016-11-10T23:52:54.166311997Z" level=error msg="agent: session failed" error="rpc error: code = 2 desc = grpc: the client connection is closing" module=agent
time="2016-11-10T23:52:54.168164670Z" level=debug msg="agent: rebuild session" module=agent
time="2016-11-10T23:52:54.201645652Z" level=debug msg="(*session).start" module=agent
I think at this point my best advice would be to factory reset, sorry about that.
No worries, do you want me to run anything / send you any log before I do the factory reset ?
@maximede
Entering a privileged shell with:
docker run -it --privileged --pid=host debian nsenter -t 1 -m -n /bin/sh
and running
openssl x509 -in /var/lib/docker/swarm/certificates/swarm-node.crt -text -noout
might be interesting, I'm curious what the expiry time time on that crt might be.
well, docker is not running :)
Doh! screen ~/Library/Containers/com.docker.docker/Data/com.docker.driver.amd64-linux/tty
should get you a shell.
Here you go. Looks like it expired Nov 10 23:30:00 2016 GMT
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:8d:cc:40:a3:3c:c2:62:1c:74:c5:90:6b:00:72:b8:1a:a2:4f:da
Signature Algorithm: ecdsa-with-SHA384
Issuer: CN=swarm-ca
Validity
Not Before: Aug 12 23:30:00 2016 GMT
Not After : Nov 10 23:30:00 2016 GMT
Subject: O=e35utc214iur8ibbm6a0egvee, OU=swarm-manager, CN=3o26jujg4jnf1ifbgbl28t4x5
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:94:23:7d:02:2d:49:c9:0f:7b:f8:a8:a1:6a:79:
79:fd:6b:47:77:08:32:09:5e:b8:7e:1e:0d:75:65:
bd:06:00:3e:bc:10:12:33:ba:7d:e8:f8:c8:06:ce:
cb:62:83:c5:ff:61:41:71:c4:b6:bd:de:0c:ca:6d:
cb:a0:0a:9c:67
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
AF:4E:A6:2E:E2:3B:8F:FB:BD:1B:74:03:07:BC:7E:1F:62:50:22:BF
X509v3 Authority Key Identifier:
keyid:4D:C4:83:C4:9A:A7:62:44:27:4B:62:FB:71:68:FF:33:4D:1F:CB:C6
X509v3 Subject Alternative Name:
DNS:swarm-manager, DNS:swarm-ca
Signature Algorithm: ecdsa-with-SHA384
30:66:02:31:00:b7:9c:2f:5b:9f:1b:fa:43:7f:b2:6f:5e:e2:
33:bb:ba:eb:31:9c:b9:2b:2f:df:15:3a:60:bf:5a:cf:5f:9e:
ab:d9:f8:19:f2:f8:e7:b5:d3:c3:39:3e:04:62:60:48:fe:02:
31:00:b9:1c:3b:a6:06:3e:78:f8:56:83:ca:08:ef:9f:89:d0:
68:ce:83:ae:3c:9f:41:e0:96:fa:10:30:58:e4:88:59:ec:1d:
dd:2b:fe:81:3b:db:4a:d8:7e:42:5f:20:81:4c
Thanks, that does correlate rather suspiciously closely with those grpc messages starting to show up in your logs about 20 mins later.
Do you remember how/when you initialised swarm mode? Sadly the diagnostics bundle does not collect much useful swarm mode info (I coincidentally improved that this week so the next betas should be better in this regard).
looks like it was in August
2016-08-12 16:35 docker swarm init
The issue has been fixed in 1.13 (by https://github.com/docker/docker/pull/28228), so closing that issue. Thanks for the report!
Closed issues are locked after 30 days of inactivity. This helps our team focus on active issues.
If you have found a problem that seems similar to this, please open a new issue.
Send feedback to Docker Community Slack channels #docker-for-mac or #docker-for-windows. /lifecycle locked
Hello, After upgrading to the latest version of Docker for Mac this morning, the application is not starting.
Expected behavior
Docker for mac starts as usual
Actual behavior
After launching the app, it stays on "Docker starting..." Tried clicking restart and restarting the app, it did not help.
Information
Docker for Mac: version: 1.12.3 (583d1b8) OS X: version 10.12.1 (build: 16B2555) logs: /tmp/FC561B12-DB93-43D6-8E55-C7AA5F0A3411/20161115-124033.tar.gz failure: docker ps failed: (Failure "docker ps: timeout after 10.00s") [OK] vmnetd [OK] dns [OK] driver.amd64-linux [OK] virtualization VT-X [OK] app [OK] moby [OK] system [OK] moby-syslog [OK] db [OK] env [OK] virtualization kern.hv_support [OK] slirp [OK] osxfs [OK] moby-console [OK] logs [ERROR] docker-cli docker ps failed [OK] menubar [OK] disk Failure: Could not upload diagnostic data to remote server (docker-diagnose exit code is 1)
From
syslog -k Sender Docker
Diagnostic ID : FC561B12-DB93-43D6-8E55-C7AA5F0A3411
Steps to reproduce the behavior