Rare project developers

[David Schmitz <>]

Hi,

On Wed, 15 Feb 2023, mc36 wrote:

> Date: Wed, 15 Feb 2023 08:38:16 +0100
> From: mc36 <>
> To: David Schmitz <>
> Cc: 
> Subject: Re: [rare-dev] netconf
>
> some progess but something is still missing:
>
> mc36@fod:~/FOD$
> mc36@fod:~/FOD$
> mc36@fod:~/FOD$ sudo docker build -f Dockerfiles.d/Dockerfile.fod_netconf_get 
> -t netconfget1 .
> Sending build context to Docker daemon  557.3MB
> Step 1/16 : FROM debian:bullseye
> bullseye: Pulling from library/debian
> 1e4aec178e08: Pull complete
> Digest: 
> sha256:43ef0c6c3585d5b406caa7a0f232ff5a19c1402aeb415f68bcd1cf9d10180af8
> Status: Downloaded newer image for debian:bullseye
> ---> 54e726b437fb
> Step 2/16 : ENV LC_ALL en_US.utf8
> ---> Running in 323415a94986
> Removing intermediate container 323415a94986
> ---> ae17a98ae329
> Step 3/16 : RUN apt-get -yy update
> ---> Running in 1931bbbc04b8
> AppArmor enabled on system but the docker-default profile could not be 
> loaded: running `apparmor_parser apparmor_parser --version` failed with 
> output:
> error: exec: "apparmor_parser": executable file not found in $PATH
This seems to be some issue with your app armor installation.

You could either try to fix it,
maybe by (re-)installing apparmor or so.

But, for now, and not to break anything on your side,
just try to explicitly disable the use of apparmor by docker run
with "--security-opt apparmor=unconfined" :

docker run -ti --security-opt apparmor=unconfined netconfget1 bash

(the container will still be isolated 
regarding filesystem, processes, network, etc. 
(i.e., regarding what is visible inside it),
just not being further restricted by app armor mandatory acces rules
when accessing what is visible inside it (files, sockets, etc.))

Best Regards
David

> mc36@fod:~/FOD$
> mc36@fod:~/FOD$
> mc36@fod:~/FOD$
> mc36@fod:~/FOD$ sudo docker images
> REPOSITORY   TAG        IMAGE ID       CREATED          SIZE
> <none>       <none>     ae17a98ae329   21 seconds ago   124MB
> debian       bullseye   54e726b437fb   6 days ago       124MB
> mc36@fod:~/FOD$
> mc36@fod:~/FOD$
> mc36@fod:~/FOD$ sudo docker run -ti -e=NETCONF_HOST=10.10.10.227 
> -e=NETCONF_PORT=830 -e=NETCONF_USER=netconf -e=NETCONF_PASS=netconf 
> netconfget1
> Unable to find image 'netconfget1:latest' locally
> docker: Error response from daemon: pull access denied for netconfget1, 
> repository does not exist or may require 'docker login': denied: requested 
> access to the resource is denied.
> See 'docker run --help'.
> mc36@fod:~/FOD$
> mc36@fod:~/FOD$
> mc36@fod:~/FOD$

--

David Schmitz

Boltzmannstrasse 1, 85748 Garching
Telefon:   +49 89 35831-8765
Leibniz-Rechenzentrum, Germany
Mail: