issue starting docker when userns remap active

uplight-dev commented 1 week ago

Before you submit this issue

If this is not an issue but a request for help, please post it on the discussions section. There is a search function that will help you find solutions to common problems.

Please make sure that you are running latest or stable for either ib-gateway or tws-rdesktop. Please run one of these as required

# ib-gateway
docker pull ghcr.io/gnzsnz/ib-gateway:latest
docker pull ghcr.io/gnzsnz/ib-gateway:stable
# tws-rdesktop
docker pull ghcr.io/gnzsnz/tws-rdesktop:latest
docker pull ghcr.io/gnzsnz/tws-rdesktop:stable

Please make sure that you are using the docker-compose.yml file provided as example, those files are tested and you should be able to get things working by using it.

The example .env file on README.md contains safe default values. Make sure you test the container using it as starting point.

If after all this work you are still facing problems, please open an issue.

Describe the bug

Getting this error when starting docker compose:

/home/ibgateway/scripts/common.sh: line 11: /home/ibgateway/ibc/config.ini: Permission denied

Seems that the files under /home/ibgateway are owned by user root.

total 428
algo-trader-ib-gateway-1  | drwxr-xr-x 3 root root   4096 Nov 12 13:15 .
algo-trader-ib-gateway-1  | drwxr-xr-x 1 root root   4096 Nov 12 13:18 ..
algo-trader-ib-gateway-1  | -rw-r--r-- 1 root root 119173 Aug 12 18:00 IBC.jar
algo-trader-ib-gateway-1  | -rw-r--r-- 1 root root  33096 Feb  8  2018 LICENSE.txt
algo-trader-ib-gateway-1  | -rw-r--r-- 1 root root    129 Feb 19  2018 README.txt
algo-trader-ib-gateway-1  | -rwxr--r-- 1 root root   1156 Jan 31  2024 commandsend.sh
algo-trader-ib-gateway-1  | -rw-r--r-- 1 root root  36379 Apr  4  2024 config.ini

To Reproduce

Steps to reproduce the behavior. Please include information related to docker, ex docker run command, .env file, docker-compose.yml.

Please provide the output of docker compose config MANDATORY ⚠️⚠️

` name: algo-trader services: ib-gateway: build: context: /home/light/algotrader/ibgateway-build.dkr/stable dockerfile: Dockerfile tags:

ghcr.io/gnzsnz/ib-gateway:latest environment: ALLOW_BLIND_TRADING: "no" AUTO_LOGOFF_TIME: "" AUTO_RESTART_TIME: "" BYPASS_WARNING: "" CUSTOM_CONFIG: "NO" EXISTING_SESSION_DETECTED_ACTION: primary JAVA_HEAP_SIZE: "" READ_ONLY_API: "" RELOGIN_AFTER_TWOFA_TIMEOUT: "no" SAVE_TWS_SETTINGS: "" SSH_ALIVE_COUNT: "" SSH_ALIVE_INTERVAL: "" SSH_OPTIONS: "" SSH_PASSPHRASE: "" SSH_REMOTE_PORT: "" SSH_RESTART: "" SSH_TUNNEL: "" SSH_USER_TUNNEL: "" SSH_VNC_PORT: "" TIME_ZONE: Etc/UTC TRADING_MODE: paper TWOFA_DEVICE: "" TWOFA_EXIT_INTERVAL: "60" TWOFA_TIMEOUT_ACTION: exit TWS_ACCEPT_INCOMING: manual TWS_COLD_RESTART: "" TWS_PASSWORD: "" TWS_PASSWORD_PAPER: "" TWS_SETTINGS_PATH: "" TWS_USERID: "" TWS_USERID_PAPER: "" TZ: Etc/UTC VNC_SERVER_PASSWORD: "" networks: default: null ports:
- mode: ingress host_ip: 127.0.0.1 target: 4003 published: "4001" protocol: tcp
- mode: ingress host_ip: 127.0.0.1 target: 4004 published: "4002" protocol: tcp
- mode: ingress host_ip: 127.0.0.1 target: 5900 published: "5900" protocol: tcp restart: always networks: default: name: algo-trader_default `
  Expected

The container starts as expected.

Container logs

If applicable, add the container logs docker logs <CONTAINER> or docker compose logs to help explain your problem. MANDATORY ⚠️⚠️

Versions

Please complete the following information:

OS: Linux
Docker version: Docker version 24.0.7, build afdd53b
Image Tag (docker image inspect ghcr.io/gnzsnz/ib-gateway:tag): [e.g. latest, stable] MANDATORY ⚠️⚠️
Image Digest (docker images --digests): [e.g. sha256:60d9d54009b1b66908bbca1ebf5b8a03a39fe0cb35c2ab4023f6e41b55d17894] MANDATORY ⚠️⚠️

Additional context

Add any other context about the problem here.

What have you tried and failed.

My primary objective is to fix any bug on the container, ex Dockerfile, run.sh script, docker-compose.yml. Please don't expect upstream issues to be solved here (ex. IB gateway, IBC, etc)

uplight-dev commented 1 week ago

Actually I realized I've userns remap active in my docker configs.

/etc/subuid
light:1000:65536

/etc/docker/daemon.json
{
  "userns-remap": "light"
}

Is it possible to still make it work given this config?

uplight-dev commented 1 week ago

Seems I had to use 1001 as user/group id.

In docker-compose.yml file:

services:
  myservice:
    build:
      context: .
      args:
        USER_ID: 1001  # or any other user ID you want to pass

gnzsnz commented 1 week ago

both docker images (ib-gateway and tws-rdesktop) use UID/GID 1000:1000, based on your needs you can update that

gnzsnz / ib-gateway-docker