search

mviereck / x11docker

Run GUI applications and desktops in docker and podman containers. Focus on security.
MIT License
5.63k stars 378 forks source link

docker deamon error : mkdir /usr/bin/docker-init: read-only file system #202

Closed bopnrgi closed 4 years ago

bopnrgi commented 4 years ago

Hi,

When i run this command : sudo x11docker --desktop x11docker/lxde-wine I had the following error from docker deamon

x11docker WARNING: On debian 9, switching often between multiple X servers can
  cause a crash of one X server. This bug may be debian specific and is probably
  some sort of race condition. If you know more about this or it occurs on
  other systems, too, please report at https://github.com/mviereck/x11docker.

  You can avoid this issue with switching to a black tty before switching to X.

x11docker ERROR: Got error message from docker daemon: 
docker: Error response from daemon: error while creating mount source path '/usr/bin/docker-init': mkdir /usr/bin/docker-init: read-only file system. 

  Last lines of logfile: 

  Type 'x11docker --help' for usage information
  Debug options: '--verbose' (full log) or '--debug' (log excerpt).
  Logfile will be: /home/clement/.cache/x11docker/x11docker.log
  Please report issues at https://github.com/mviereck/x11docker
mviereck commented 4 years ago

Thank you for the report!

The error message is odd. Docker should not try to create /usr/bin/docker-init. Does /usr/bin/docker-init exist on your host? Could you please run with option --debug and show me the output?

As a first workaround: It should work if you set option --init=none.

bopnrgi commented 4 years ago

Hi thanks for fast reply,

/usr/bin/docker-init exists, it outputs 

docker-init (tini version 0.18.0 - git.fec3683)
Usage: docker-init [OPTIONS] PROGRAM -- [ARGS] | --version

Execute a program under the supervision of a valid init process (docker-init)

Command line options:

  --version: Show version and exit.
  -h: Show this help message and exit.
  -s: Register as a process subreaper (requires Linux >= 3.4).
  -p SIGNAL: Trigger SIGNAL when parent dies, e.g. "-p SIGKILL".
  -v: Generate more verbose output. Repeat up to 3 times.
  -w: Print a warning when processes are getting reaped.
  -g: Send signals to the child's process group.
  -e EXIT_CODE: Remap EXIT_CODE (from 0 to 255) to 0.
  -l: Show license and exit.

Environment variables:

  TINI_SUBREAPER: Register as a process subreaper (requires Linux >= 3.4).
  TINI_VERBOSITY: Set the verbosity level (default: 1).
  TINI_KILL_PROCESS_GROUP: Send signals to the child's process group.

--init=none throws new error :

x11docker ERROR: Got error message from docker daemon: 
Error response from daemon: Container e0e14a4273beba3d59a229ae4fd2f2220c12ae46df8b532482abc4ec3c6d6747 is not running 

  Last lines of logfile: 

  Type 'x11docker --help' for usage information
  Debug options: '--verbose' (full log) or '--debug' (log excerpt).
  Logfile will be: /home/clement/.cache/x11docker/x11docker.log
  Please report issues at https://github.com/mviereck/x11docker

and finally this is the output of command

sudo x11docker --debug --desktop x11docker/lxde-wine
DEBUGNOTE[08:37:37,564]: check_host(): ps can watch root processes: yes
DEBUGNOTE[08:37:37,794]: storeinfo(): cache=/home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600
DEBUGNOTE[08:37:37,803]: storeinfo(): stdout=/home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600/share/stdout
DEBUGNOTE[08:37:37,812]: storeinfo(): stderr=/home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600/share/stderr
DEBUGNOTE[08:37:37,844]: storeinfo(): x11dockerpid=6194
DEBUGNOTE[08:37:37,899]: 
x11docker version: 6.4.0
docker version:    Docker version 19.03.3, build a872fc2f86
Host system:       "Ubuntu 19.04"
Command:           '/usr/bin/x11docker' '--debug' '--desktop' 'x11docker/lxde-wine' 
Parsed options:     --debug --desktop -- 'x11docker/lxde-wine'
DEBUGNOTE[08:37:37,904]: --xephyr: Neither Xephyr nor Xnest found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:37,908]: Dependency check for --xephyr: 1
DEBUGNOTE[08:37:37,913]: --xephyr not possible: missing dependencies.
DEBUGNOTE[08:37:37,918]: --weston-xwayland: weston not found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:37,923]: --weston-xwayland: Xwayland not found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:37,927]: Dependency check for --weston-xwayland: 1
DEBUGNOTE[08:37:37,933]: --weston-xwayland not possible: missing dependencies.
DEBUGNOTE[08:37:37,938]: --kwin-xwayland: kwin_wayland not found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:37,943]: --kwin-xwayland: Xwayland not found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:37,948]: Dependency check for --kwin-xwayland: 1
DEBUGNOTE[08:37:37,953]: --kwin-xwayland not possible: missing dependencies.
DEBUGNOTE[08:37:37,958]: --xephyr: Neither Xephyr nor Xnest found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:37,964]: Dependency check for --xephyr: 1
DEBUGNOTE[08:37:37,969]: --xephyr not possible: missing dependencies.
DEBUGNOTE[08:37:37,974]: --kwin-xwayland: kwin_wayland not found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:37,978]: --kwin-xwayland: Xwayland not found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:37,983]: Dependency check for --kwin-xwayland: 1
DEBUGNOTE[08:37:37,988]: --kwin-xwayland not possible: missing dependencies.
DEBUGNOTE[08:37:37,994]: Dependency check for --hostdisplay: 0
DEBUGNOTE[08:37:37,999]: --xwin: XWin is available in Cygwin on MS Windows only.
DEBUGNOTE[08:37:38,004]: Dependency check for --xwin: 1
DEBUGNOTE[08:37:38,009]: --xwin not possible: missing dependencies.
DEBUGNOTE[08:37:38,014]: --nxagent: nxagent not found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:38,019]: Dependency check for --nxagent: 1
DEBUGNOTE[08:37:38,024]: --nxagent not possible: missing dependencies.
DEBUGNOTE[08:37:38,029]: --weston-xwayland: weston not found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:38,034]: --weston-xwayland: Xwayland not found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:38,038]: Dependency check for --weston-xwayland: 1
DEBUGNOTE[08:37:38,043]: --weston-xwayland not possible: missing dependencies.
DEBUGNOTE[08:37:38,048]: --xpra: xpra not found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:38,053]: Dependency check for --xpra: 1
DEBUGNOTE[08:37:38,059]: --xpra not possible: missing dependencies.
DEBUGNOTE[08:37:38,063]: --xephyr: Neither Xephyr nor Xnest found.
  You can look for the package name of this command at: 
 https://github.com/mviereck/x11docker/wiki/dependencies#table-of-all-packages
DEBUGNOTE[08:37:38,068]: Dependency check for --xephyr: 1
DEBUGNOTE[08:37:38,074]: --xephyr not possible: missing dependencies.
DEBUGNOTE[08:37:38,079]: Dependency check for --xorg: 0
x11docker note: Using X server option --xorg

DEBUGNOTE[08:37:38,084]: storeinfo(): xserver=--xorg
x11docker note: Could not find Xephyr, Xnest, nxagent,
  xpra, weston+Xwayland or kwin_wayland+Xwayland to run a nested X server.
  Consider to install one of them.

x11docker WARNING: x11docker will run Xorg as root.

DEBUGNOTE[08:37:38,135]: waitforlogentry(): tailstdout: Waiting for logentry "x11docker=ready" in store.info
DEBUGNOTE[08:37:38,137]: waitforlogentry(): tailstderr: Waiting for logentry "x11docker=ready" in store.info
DEBUGNOTE[08:37:38,188]: storepid(): Stored pid '6877' of 'watchpidlist':  6877 pts/0    00:00:00 bash
DEBUGNOTE[08:37:38,204]: storepid(): Stored pid '6887' of 'watchmessagefifo':  6887 pts/0    00:00:00 bash
DEBUGNOTE[08:37:38,610]: check_vt(): TTYs currently known to kernel:    1  2  3  4  5  6  8 
x11docker note: New Xorg server  will run on tty 9.
  Access it with [CTRL][ALT][F9].

x11docker WARNING: On debian 9, switching often between multiple X servers can
  cause a crash of one X server. This bug may be debian specific and is probably
  some sort of race condition. If you know more about this or it occurs on
  other systems, too, please report at https://github.com/mviereck/x11docker.

  You can avoid this issue with switching to a black tty before switching to X.

DEBUGNOTE[08:37:38,639]: storeinfo(): DISPLAY=:103
DEBUGNOTE[08:37:38,652]: storeinfo(): XAUTHORITY=/home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600/share/Xauthority.client
DEBUGNOTE[08:37:38,662]: storeinfo(): XSOCKET=/tmp/.X11-unix/X103
DEBUGNOTE[08:37:38,672]: storeinfo(): XDG_RUNTIME_DIR=
DEBUGNOTE[08:37:38,681]: storeinfo(): Xenv= DISPLAY=:103 XAUTHORITY=/home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600/share/Xauthority.client XSOCKET=/tmp/.X11-unix/X103 XDG_RUNTIME_DIR=
DEBUGNOTE[08:37:38,709]: X server command:
  /usr/bin/Xorg :103 vt9  \
  -retro \
  +extension RANDR \
  +extension RENDER \
  +extension GLX \
  +extension XVideo \
  +extension DOUBLE-BUFFER \
  +extension SECURITY \
  +extension DAMAGE \
  +extension X-Resource \
  -extension XINERAMA -xinerama \
  -extension MIT-SHM \
  +extension Composite +extension COMPOSITE \
  -extension XTEST -tst \
  -dpms \
  -s off \
  -auth /home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600/Xauthority.server \
  -nolisten tcp \
  -dpi 96 \
  -verbose
DEBUGNOTE[08:37:38,828]: storeinfo(): tini=/usr/bin/docker-init
DEBUGNOTE[08:37:38,839]: Users and terminal:
  x11docker was started by:                       root
  As host user serves (running X, storing cache): clement
  Container user will be:                         clement
  Container user password:                        x11docker
  Getting permission to run docker with:          eval 
  Terminal for password frontend:                 bash -c
  Running in a terminal:                          yes
  Running on console:                             no
  Running over SSH:                               no
  Running sourced:                                no
  bash $-:                                        huBE
DEBUGNOTE[08:37:38,845]: storeinfo(): containername=x11docker_X103_x11docker-lxde-wine_26657461600
DEBUGNOTE[08:37:39,177]: Docker command:
  docker run --tty --rm --detach \
  --name x11docker_X103_x11docker-lxde-wine_26657461600 \
  --user 1000:1001 \
  --env USER=clement \
  --userns host \
  --cap-drop ALL \
  --security-opt no-new-privileges \
  --security-opt label=type:container_runtime_t \
  --volume '/usr/bin/docker-init':'/usr/local/bin/tini':ro \
  --tmpfs /run --tmpfs /run/lock \
  --volume '/home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600/share':'/x11docker':rw \
  --volume '/tmp/.X11-unix/X103':'/X103':rw \
  --workdir '/tmp' \
  --entrypoint env \
  --env 'container=docker' \
  --env 'XAUTHORITY=/x11docker/Xauthority.client' \
  --env 'DISPLAY=:103' \
  --env 'XDG_RUNTIME_DIR=/tmp/XDG_RUNTIME_DIR' \
  -- x11docker/lxde-wine /usr/local/bin/tini -- /bin/sh - /x11docker/containerrc
DEBUGNOTE[08:37:39,382]: storepid(): Stored pid '7499' of 'containershell':  7499 pts/0    00:00:00 bash
DEBUGNOTE[08:37:39,387]: Running xtermrc: Ask for password if needed (no)
DEBUGNOTE[08:37:39,398]: waitforlogentry(): start_xserver(): Waiting for logentry "readyforX=ready" in store.info
DEBUGNOTE[08:37:39,405]: Running dockerrc: Setup as root or as user docker on host.
DEBUGNOTE[08:37:39,483]: dockerrc: Found default Runtime: runc
DEBUGNOTE[08:37:39,502]: dockerrc: All  Runtimes: runc
DEBUGNOTE[08:37:39,525]: dockerrc: Container Runtime: runc
DEBUGNOTE[08:37:39,541]: storeinfo(): runtime=runc
DEBUGNOTE[08:37:39,606]: dockerrc: Image CMD: /usr/local/bin/start
DEBUGNOTE[08:37:39,620]: dockerrc: Image USER: 
DEBUGNOTE[08:37:39,636]: storeinfo(): containeruser=clement
DEBUGNOTE[08:37:39,649]: dockerrc: Image ENTRYPOINT: 
DEBUGNOTE[08:37:39,661]: dockerrc: Image WORKDIR: 
DEBUGNOTE[08:37:39,675]: storeinfo(): readyforX=ready
DEBUGNOTE[08:37:39,686]: waitforlogentry(): dockerrc: Waiting for logentry "xinitrc is ready" in xinit.log
DEBUGNOTE[08:37:39,933]: waitforlogentry(): start_xserver(): Found log entry "readyforX=ready" in store.info.
DEBUGNOTE[08:37:41,410]: Running xinitrc
DEBUGNOTE[08:37:41,425]: xinitrc: Created cookie: #ffff#636c656d656e742d7063#:103  MIT-MAGIC-COOKIE-1  91448accba3813bbf7f44c88f190adec
DEBUGNOTE[08:37:42,248]: storeinfo(): xinitrc=ready
DEBUGNOTE[08:37:42,266]: waitforlogentry(): dockerrc: Found log entry "xinitrc is ready" in xinit.log.
DEBUGNOTE[08:37:42,462]: storeinfo(): containerid=bf6e3e7a8670e1df8fb68105416c03358f1da97cd9ddd47edfd41b7985a414e0
DEBUGNOTE[08:37:42,517]: dockerrc: Container is up and running.
DEBUGNOTE[08:37:42,617]: dockerrc: 1. check for PID 1: 
DEBUGNOTE[08:37:42,797]: dockerrc: 2. check for PID 1: 
DEBUGNOTE[08:37:42,988]: dockerrc: 3. check for PID 1: 
DEBUGNOTE[08:37:43,174]: dockerrc: 4. check for PID 1: 
DEBUGNOTE[08:37:43,365]: dockerrc: 5. check for PID 1: 
DEBUGNOTE[08:37:43,554]: dockerrc: 6. check for PID 1: 
DEBUGNOTE[08:37:43,743]: dockerrc: 7. check for PID 1: 
DEBUGNOTE[08:37:43,932]: dockerrc: 8. check for PID 1: 
DEBUGNOTE[08:37:44,120]: dockerrc: 9. check for PID 1: 
DEBUGNOTE[08:37:44,309]: dockerrc: 10. check for PID 1: 
DEBUGNOTE[08:37:44,498]: dockerrc: 11. check for PID 1: 
DEBUGNOTE[08:37:44,689]: dockerrc: 12. check for PID 1: 
DEBUGNOTE[08:37:44,867]: dockerrc: 13. check for PID 1: 
DEBUGNOTE[08:37:45,055]: dockerrc: 14. check for PID 1: 
DEBUGNOTE[08:37:45,244]: dockerrc: 15. check for PID 1: 
DEBUGNOTE[08:37:45,434]: dockerrc: 16. check for PID 1: 
DEBUGNOTE[08:37:45,622]: dockerrc: 17. check for PID 1: 
DEBUGNOTE[08:37:45,811]: dockerrc: 18. check for PID 1: 
DEBUGNOTE[08:37:45,998]: dockerrc: 19. check for PID 1: 
DEBUGNOTE[08:37:46,188]: dockerrc: 20. check for PID 1: 
DEBUGNOTE[08:37:46,379]: dockerrc: 21. check for PID 1: 
DEBUGNOTE[08:37:46,568]: dockerrc: 22. check for PID 1: 
DEBUGNOTE[08:37:46,758]: dockerrc: 23. check for PID 1: 
DEBUGNOTE[08:37:46,945]: dockerrc: 24. check for PID 1: 
DEBUGNOTE[08:37:47,134]: dockerrc: 25. check for PID 1: 
DEBUGNOTE[08:37:47,320]: dockerrc: 26. check for PID 1: 
DEBUGNOTE[08:37:47,510]: dockerrc: 27. check for PID 1: 
DEBUGNOTE[08:37:47,698]: dockerrc: 28. check for PID 1: 
DEBUGNOTE[08:37:47,890]: dockerrc: 29. check for PID 1: 
DEBUGNOTE[08:37:48,079]: dockerrc: 30. check for PID 1: 
DEBUGNOTE[08:37:48,265]: dockerrc: 31. check for PID 1: 
DEBUGNOTE[08:37:48,454]: dockerrc: 32. check for PID 1: 
DEBUGNOTE[08:37:48,643]: dockerrc: 33. check for PID 1: 
DEBUGNOTE[08:37:48,839]: dockerrc: 34. check for PID 1: 
DEBUGNOTE[08:37:49,028]: dockerrc: 35. check for PID 1: 
DEBUGNOTE[08:37:49,218]: dockerrc: 36. check for PID 1: 
DEBUGNOTE[08:37:49,409]: dockerrc: 37. check for PID 1: 
DEBUGNOTE[08:37:49,595]: dockerrc: 38. check for PID 1: 
DEBUGNOTE[08:37:49,783]: dockerrc: 39. check for PID 1: 
DEBUGNOTE[08:37:49,966]: dockerrc: 40. check for PID 1: 
DEBUGNOTE[08:37:50,102]: storeinfo(): pid1pid=
DEBUGNOTE[08:37:50,171]: dockerrc: Command at Line 528 returned with error code 1: 
  docker inspect --format '{{ .NetworkSettings.IPAddress }}' x11docker_X103_x11docker-lxde-wine_26657461600 2>> /home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600/share/container.log 
  0 - ::
DEBUGNOTE[08:37:50,175]: waitforlogentry(): start_docker(): Waiting for logentry "dockerrc=ready" in store.info
DEBUGNOTE[08:37:50,185]: time to say goodbye (watchpidlist)
DEBUGNOTE[08:37:50,186]: time to say goodbye (dockerrc-traperror)
DEBUGNOTE[08:37:50,204]: dockerrc: Command at Line 528 returned with error code 64: 
  Containerip="$(docker inspect --format '{{ .NetworkSettings.IPAddress }}' x11docker_X103_x11docker-lxde-wine_26657461600 2>>/home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600/share/container.log)" 
  0 - ::
DEBUGNOTE[08:37:50,216]: time to say goodbye (dockerrc-traperror)
DEBUGNOTE[08:37:50,228]: storeinfo(): xtermrc=ready
DEBUGNOTE[08:37:50,697]: waitforlogentry(): start_docker(): Stopped waiting for dockerrc=ready in store.info due to terminating signal.
DEBUGNOTE[08:37:50,712]: traperror: Command at Line 5734 returned with error code 1:
  return 1
  8307 - ::start_docker::main::main
DEBUGNOTE[08:37:50,722]: storeinfo(): error=64
DEBUGNOTE[08:37:50,735]: time to say goodbye (traperror)
DEBUGNOTE[08:37:50,743]: traperror: Command at Line 8307 returned with error code 1:
  return 1
  8374 - ::main::main
DEBUGNOTE[08:37:50,749]: storeinfo(): error=64
DEBUGNOTE[08:37:50,769]: time to say goodbye (traperror)
DEBUGNOTE[08:37:50,796]: watchpidlist(): Setting pid NOPID on watchlist: pid1pid
DEBUGNOTE[08:37:50,807]: storepid(): Stored pid 'NOPID' of 'pid1pid': 
DEBUGNOTE[08:37:50,821]: watchpidlist(): Setting pid 7854 on watchlist: xinit
DEBUGNOTE[08:37:50,838]: storepid(): Stored pid '7854' of 'xinit':  7854 pts/0    00:00:00 xinit
DEBUGNOTE[08:37:50,865]: waitforlogentry(): tailstdout: Waiting since 11s for log entry "x11docker=ready" in store.info
DEBUGNOTE[08:37:50,865]: waitforlogentry(): tailstderr: Waiting since 11s for log entry "x11docker=ready" in store.info
DEBUGNOTE[08:37:50,875]: waitforlogentry(): tailstdout: Stopped waiting for x11docker=ready in store.info due to terminating signal.
DEBUGNOTE[08:37:50,878]: waitforlogentry(): tailstderr: Stopped waiting for x11docker=ready in store.info due to terminating signal.
DEBUGNOTE[08:37:50,895]: Process tree of x11docker:
bash(6194)-+-bash(6835)---tail(6841)
           |-bash(6837)
           |-bash(6838)
           |-bash(6887)
           |-bash(7499)---bash(10008)---pstree(10009)
           `-xinit(7854)---Xorg(7855)

DEBUGNOTE[08:37:50,901]: storeinfo(): Stored info:
cache=/home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600
stdout=/home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600/share/stdout
stderr=/home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600/share/stderr
x11dockerpid=6194
xserver=--xorg
DISPLAY=:103
XAUTHORITY=/home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600/share/Xauthority.client
XSOCKET=/tmp/.X11-unix/X103
XDG_RUNTIME_DIR=
Xenv= DISPLAY=:103 XAUTHORITY=/home/clement/.cache/x11docker/x11docker-lxde-wine-26657461600/share/Xauthority.client XSOCKET=/tmp/.X11-unix/X103 XDG_RUNTIME_DIR=
tini=/usr/bin/docker-init
containername=x11docker_X103_x11docker-lxde-wine_26657461600
runtime=runc
containeruser=clement
readyforX=ready
xinitrc=ready
containerid=bf6e3e7a8670e1df8fb68105416c03358f1da97cd9ddd47edfd41b7985a414e0
pid1pid=
xtermrc=ready
error=64
DEBUGNOTE[08:37:50,909]: storepid(): Stored pids:
6877 watchpidlist
6887 watchmessagefifo
7499 containershell
NOPID pid1pid
7854 xinit
DEBUGNOTE[08:37:50,914]: storeinfo(): x11docker=ready
DEBUGNOTE[08:37:51,169]: time to say goodbye (main)
DEBUGNOTE[08:37:51,194]: Terminating x11docker.
DEBUGNOTE[08:37:51,219]: time to say goodbye (finish)
DEBUGNOTE[08:37:51,302]: finish(): Checking pid 7854 (xinit): (already gone)
DEBUGNOTE[08:37:51,319]: finish(): Checking pid NOPID (pid1pid): (already gone)
DEBUGNOTE[08:37:51,339]: finish(): Checking pid 7499 (containershell): (already gone)
DEBUGNOTE[08:37:51,358]: finish(): Checking pid 6887 (watchmessagefifo):  6887 pts/0    00:00:00 bash
DEBUGNOTE[08:37:51,379]: finish(): Checking pid 6877 (watchpidlist): (already gone)
DEBUGNOTE[08:37:51,422]: termpid(): Terminating 6887 (watchmessagefifo):  6887 pts/0    00:00:00 bash
DEBUGNOTE[08:37:51,572]: x11docker exit code: 64
mviereck commented 4 years ago

Thanks for the output.

It seems the container starts, but immediatly stops for unknown reasons. It might be a similar or same issue as in unresolved ticket #196 .

Can you try with option --newprivileges? Can you try with option --cap-default?

How did you install docker? If you have installed Docker with snap, please try with latest x11docker master version (x11docker --update-master).

mviereck commented 4 years ago

@bopnrgi Are you still at this? It would be nice if you check the suggestions from my previous post.

bopnrgi commented 4 years ago

Hi sorry for delay, i wasn't at home

sudo x11docker --desktop --newprivileges x11docker/lxde-wine

output 

x11docker note: Using X server option --xorg

x11docker WARNING: x11docker will run Xorg as root.

x11docker note: New Xorg server  will run on tty 9.
  Access it with [CTRL][ALT][F9].

x11docker WARNING: On debian 9, switching often between multiple X servers can
  cause a crash of one X server. This bug may be debian specific and is probably
  some sort of race condition. If you know more about this or it occurs on
  other systems, too, please report at https://github.com/mviereck/x11docker.

  You can avoid this issue with switching to a black tty before switching to X.

x11docker WARNING: Option --newprivileges=yes: x11docker does not set 
  docker run option --security-opt=no-new-privileges. 
  That degrades container security.
  However, this is still within a default docker setup.

x11docker ERROR: Got error message from docker daemon: 
docker: Error response from daemon: error while creating mount source path '/usr/bin/docker-init': mkdir /usr/bin/docker-init: read-only file system. 

  Last lines of logfile: 

  Type 'x11docker --help' for usage information
  Debug options: '--verbose' (full log) or '--debug' (log excerpt).
  Logfile will be: /home/clement/.cache/x11docker/x11docker.log
  Please report issues at https://github.com/mviereck/x11docker

and for sudo x11docker --desktop --cap-default x11docker/lxde-wine outputs

x11docker note: Using X server option --xorg

x11docker WARNING: Option --cap-default disables security hardening
  for containers done by x11docker. Default docker capabilities are allowed.
  This is considered to be less secure.

x11docker note: Option --cap-default: Enabling option --newprivileges.
  You can avoid this with --newprivileges=no

x11docker WARNING: x11docker will run Xorg as root.

x11docker note: New Xorg server  will run on tty 10.
  Access it with [CTRL][ALT][F10].

x11docker WARNING: On debian 9, switching often between multiple X servers can
  cause a crash of one X server. This bug may be debian specific and is probably
  some sort of race condition. If you know more about this or it occurs on
  other systems, too, please report at https://github.com/mviereck/x11docker.

  You can avoid this issue with switching to a black tty before switching to X.

x11docker WARNING: Option --newprivileges=yes: x11docker does not set 
  docker run option --security-opt=no-new-privileges. 
  That degrades container security.
  However, this is still within a default docker setup.

x11docker ERROR: Got error message from docker daemon: 
docker: Error response from daemon: error while creating mount source path '/usr/bin/docker-init': mkdir /usr/bin/docker-init: read-only file system. 

  Last lines of logfile: 

  Type 'x11docker --help' for usage information
  Debug options: '--verbose' (full log) or '--debug' (log excerpt).
  Logfile will be: /home/clement/.cache/x11docker/x11docker.log
  Please report issues at https://github.com/mviereck/x11docker

For your information, all scripts, with all options starts a gray fullscreen with only black cross for mouse cursor, and it close approximately 5 secondes after opening

Hope that can help you, this is the last version of x11 docker

mviereck commented 4 years ago

For your information, all scripts, with all options starts a gray fullscreen with only black cross for mouse cursor, and it close approximately 5 secondes after opening

That is correct so far. Though, the container should not stop here.

Hope that can help you, this is the last version of x11 docker

Unfortunately I still have no idea. I've added a few messages in latest commit, at least the error message should be clearer now.

Could you please update again, run another test and provide me the logfile ~/.cache/x11docker/x11docker.log at www.pastebin.com?

mviereck commented 4 years ago

Closing due to inactivity.

@bopnrgi If you like to come back to this, please update to latest master version and provide x11docker.log.

mviereck commented 4 years ago

@bopnrgi Is docker on you system installed with snap or snappy? That caused similar issues, compare #223 and #191 . The current master version contains some fixes, maybe it works on your system now.

If not, please try:

x11docker --init=none --newprivileges --xoverip --xorg x11docker/fvwm xterm