Arch Linux a nový problém s dockerem - Community-list

15 Apr 2021

Ahoj,

píšu takhle večer a jsem unavený, tak se nezlobte zda jsem přehlédl
nějkou blbost, ale při upgradu systému (Arch Linux) na svojí VPS jsem
narazil na problém, že mi přestal chodit docker. Oprava je na konci
emailu, tak třeba to někomu ušetří trochu práce a stresu.

Update prošel podle následujícího logu:

[2021-04-15T22:20:10+0200] [ALPM] transaction started
[2021-04-15T22:20:10+0200] [ALPM] upgraded borg (1.1.16-1 -> 1.1.16-2)
[2021-04-15T22:20:10+0200] [ALPM] upgraded run-parts (4.8.6.1-2 -> 4.11.2-1)
[2021-04-15T22:20:10+0200] [ALPM] upgraded libxcrypt (4.4.18-1 -> 4.4.19-1)
[2021-04-15T22:20:10+0200] [ALPM] upgraded cronie (1.5.6-1 -> 1.5.7-2)
[2021-04-15T22:20:10+0200] [ALPM] upgraded systemd-libs (247.4-2 -> 248-4)
[2021-04-15T22:20:10+0200] [ALPM] upgraded cryptsetup (2.3.5-1 -> 2.3.5-4)
[2021-04-15T22:20:11+0200] [ALPM] upgraded curl (7.75.0-1 -> 7.76.1-1)
[2021-04-15T22:20:11+0200] [ALPM] upgraded sqlite (3.35.3-1 -> 3.35.4-1)
[2021-04-15T22:20:13+0200] [ALPM] upgraded expat (2.2.10-2 -> 2.3.0-1)
[2021-04-15T22:20:15+0200] [ALPM] upgraded docker (1:20.10.5-1 -> 1:20.10.6-1)
[2021-04-15T22:20:15+0200] [ALPM] upgraded libnsl (1.3.0-1 -> 1.3.0-2)
[2021-04-15T22:20:17+0200] [ALPM] upgraded python (3.9.2-1 -> 3.9.3-1)
[2021-04-15T22:20:17+0200] [ALPM] upgraded python-docker (4.4.4-1 -> 5.0.0-1)
[2021-04-15T22:20:17+0200] [ALPM] upgraded python-dotenv (0.16.0-1 -> 0.17.0-1)
[2021-04-15T22:20:17+0200] [ALPM] upgraded docker-compose (1.28.6-1 -> 1.29.1-1)
[2021-04-15T22:20:17+0200] [ALPM] upgraded file (5.39-1 -> 5.40-2)
[2021-04-15T22:20:18+0200] [ALPM] upgraded glib2 (2.68.0-5 -> 2.68.1-1)
[2021-04-15T22:20:18+0200] [ALPM] warning: /etc/pacman.d/mirrorlist installed as
/etc/pacman.d/mirrorlist.pacnew
[2021-04-15T22:20:18+0200] [ALPM] upgraded pacman-mirrorlist (20210302-1 ->
20210405-1)
[2021-04-15T22:20:19+0200] [ALPM] warning: /etc/systemd/system.conf installed as
/etc/systemd/system.conf.pacnew
[2021-04-15T22:20:19+0200] [ALPM] upgraded systemd (247.4-2 -> 248-4)
[2021-04-15T22:20:19+0200] [ALPM-SCRIPTLET] Creating group sgx with gid 973.
[2021-04-15T22:20:19+0200] [ALPM-SCRIPTLET] Creating group systemd-oom with gid 972.
[2021-04-15T22:20:19+0200] [ALPM-SCRIPTLET] Creating user systemd-oom (systemd Userspace
OOM Killer) with uid 972 and gid 972.
[2021-04-15T22:20:20+0200] [ALPM] upgraded systemd-sysvcompat (247.4-2 -> 248-4)
[2021-04-15T22:20:20+0200] [ALPM] transaction completed

Potom začal ale docker při spouštění triviálních věcí (docker run hello-world) nechávat
tyto věci na terminálu i v journálu:

Apr 15 22:55:26 mouflon dockerd[2006]:
time="2021-04-15T22:55:26.728977443+02:00" level=error msg="Handler for
POST
/v1.41/containers/fc72a2108933f3f8fd557151a9b46c79aec1fa3acb71f0e30af4ca9e40b7b29f/start
returned error: OCI runtime create failed: container_linux.go:367: starting container
process caused: process_linux.go:495: container init caused: process_linux.go:458: setting
cgroup config for procHooks process caused: can't load program: operation not
permitted: unknown"

... Říkal jsem si, že to otestuju na staging a ověřím, co je přesně
problém, ale na stagingu (čerstvě vytvořená vps 19335) mi nefunguje
šablona Arch Linuxu:

# pacman -Syy docker

[...]
error: libxcrypt: signature from "Christian Hesse &lt;eworm(a)archlinux.org&gt;&quot;
is unknown trust
:: File /var/cache/pacman/pkg/libxcrypt-4.4.19-1-x86_64.pkg.tar.zst is corrupted (invalid
or corrupted package (PGP signature)).

... Nakonec jsem downgradoval docker na 1:20.10.5-1, to ale nestačilo.
Downgradoval jsem tedy také systemd* na 247.4-2 (systemd, systemd-libs,
systemd-sysvcompat), to taky nepomohlo, ale po restartu vps už to celé
zabralo.

V tuhle hodinu už to debugovat nechci, zítra se podívám jestli to nějak
umím doklepnout v té staging vpsce.

Kdyby náhodou někdo věděl co se děje, rád si ušetřím práci.

Zdar a dobrou noc,
s pozdravem Ladislav Láska