Error when opening terminal

[FrankBezemer]

Hi Don,

FYI After running the container I am unable to open a terminal, I get error "Failed to fdwalk: Operation not permitted". The error is describer here as well. https://github.com/mviereck/x11docker/issues/346

The solution they suggest does work for me as well, by running. docker run -it -p 6080:6080 -p 56780:56780 --security-opt seccomp=unconfined --name alpine-novnc alpine-xfce4

Then the error is resolved.

[novaspirit]

thanks i have not received that error yet but i'll look into it

[martadinata666]

can you attach your system or docker version? 🤔

[novaspirit]

docker version 20.10.20

[martadinata666]

docker version 20.10.20

yes, as expected, I assume this is due older installation of docker version. let's see OP reply about the docker version.

[FrankBezemer]

I am using OpenSUSE Tumbleweed, my docker version (latest available in the repo) is: Docker version 20.10.17-ce, build a89b84221c85

[martadinata666]

I tried to replicate it, but i cant, as for note My suse installation is minimal from netinstall.. So something in your system preventing it. Assuming the tumbleweed package updated correctly, likely selinux. You can check disabling and enabling to test it out.

[FrankBezemer]

SUSE including OpenSUSE uses apparmor, not selinux by default (it can if you enable it). Selinux is disabled in my setup, I've checked the apparmor logs and can't see anything related to docker. If it is just an issue with my setup then ignore it, I'll troubleshoot some more later.

Cheers

[martadinata666]

I see, looking forward what you find. :thumbsup:

Edit: my # aa-status

opensuse@localhost:~> sudo aa-status
[sudo] password for root: 
apparmor module is loaded.
57 profiles are loaded.
56 profiles are in enforce mode.
   /usr/bin/lessopen.sh
   apache2
   apache2//DEFAULT_URI
   apache2//HANDLING_UNTRUSTED_INPUT
   apache2//phpsysinfo
   avahi-daemon
   dnsmasq
   dnsmasq//libvirt_leaseshelper
   docker-default
   dovecot
   dovecot-anvil
   dovecot-auth
   dovecot-config
   dovecot-deliver
   dovecot-dict
   dovecot-dovecot-auth
   dovecot-dovecot-lda
   dovecot-dovecot-lda//sendmail
   dovecot-imap
   dovecot-imap-login
   dovecot-lmtp
   dovecot-log
   dovecot-managesieve
   dovecot-managesieve-login
   dovecot-pop3
   dovecot-pop3-login
   dovecot-script-login
   dovecot-ssl-params
   dovecot-stats
   ghostscript
   identd
   klogd
   lsb_release
   mdnsd
   nmbd
   nscd
   ntpd
   nvidia_modprobe
   nvidia_modprobe//kmod
   php-fpm
   ping
   samba-bgqd
   samba-dcerpcd
   samba-rpcd
   samba-rpcd-classic
   samba-rpcd-spoolss
   smbd
   smbldap-useradd
   smbldap-useradd///etc/init.d/nscd
   syslog-ng
   syslogd
   traceroute
   winbindd
   zgrep
   zgrep//helper
   zgrep//sed
1 profiles are in complain mode.
   ghostscript///usr/bin/hpijs
0 profiles are in kill mode.
0 profiles are in unconfined mode.
37 processes have profiles defined.
37 processes are in enforce mode.
   /usr/bin/bash (10327) docker-default
   /usr/bin/xinit (10378) docker-default
   /bin/busybox (10379) docker-default
   /usr/bin/pulseaudio (10381) docker-default
   /bin/busybox (10382) docker-default
   /usr/bin/node (10384) docker-default
   /bin/busybox (10385) docker-default
   /usr/bin/bash (10386) docker-default
   /bin/busybox (10387) docker-default
   /usr/bin/python3.10 (10395) docker-default
   /usr/bin/Xvnc (10401) docker-default
   /usr/libexec/pulse/gsettings-helper (10402) docker-default
   /usr/bin/xfce4-session (10413) docker-default
   /usr/bin/alts (10444) docker-default
   /usr/bin/dbus-daemon (10450) docker-default
   /usr/libexec/at-spi-bus-launcher (10452) docker-default
   /usr/bin/dbus-daemon (10456) docker-default
   /usr/lib/xfce4/xfconf/xfconfd (10460) docker-default
   /usr/libexec/at-spi2-registryd (10465) docker-default
   /usr/bin/xfwm4 (10471) docker-default
   /usr/bin/xfsettingsd (10479) docker-default
   /usr/bin/xfce4-panel (10482) docker-default
   /usr/bin/thunar (10486) docker-default
   /usr/bin/xfdesktop (10495) docker-default
   /usr/bin/xfce4-power-manager (10500) docker-default
   /usr/lib/tumbler-1/tumblerd (10503) docker-default
   /usr/lib/xfce4/panel/wrapper-2.0 (10511) docker-default
   /usr/lib/xfce4/panel/wrapper-2.0 (10512) docker-default
   /usr/lib/xfce4/panel/wrapper-2.0 (10520) docker-default
   /usr/bin/python3.10 (10562) docker-default
   /usr/bin/python3.10 (10563) docker-default
   /usr/bin/python3.10 (10564) docker-default
   /usr/bin/python3.10 (10565) docker-default
   /usr/bin/python3.10 (10566) docker-default
   /usr/bin/python3.10 (10567) docker-default
   /usr/bin/python3.10 (10568) docker-default
   /usr/sbin/nscd (730) nscd
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.
0 processes are in mixed mode.
0 processes are in kill mode.