I installed docker image and built a image successfully.
When I ssh to the container and run the command service xxx start
, an error popped:
This is known issue with systemd
-based OSes inside Docker containers.
Short answer: as well as replacing fakesystemd
with systemd
you need to attach /sys/fs/cgroup
as a read-only volume into the container, build the image and then run it in "privileged" mode.
This is the best guide I've found for this. It uses Centos as the example, but should work with any systemd
-based OS.
I've managed to fix this issue in a CentOS:7 Docker container. I've followed mainly the Guide on CentOS Docker image project.
FROM centos:7
ENV container docker
RUN (cd /lib/systemd/system/sysinit.target.wants/; for i in *; do [ $i == \
systemd-tmpfiles-setup.service ] || rm -f $i; done); \
rm -f /lib/systemd/system/multi-user.target.wants/*;\
rm -f /etc/systemd/system/*.wants/*;\
rm -f /lib/systemd/system/local-fs.target.wants/*; \
rm -f /lib/systemd/system/sockets.target.wants/*udev*; \
rm -f /lib/systemd/system/sockets.target.wants/*initctl*; \
rm -f /lib/systemd/system/basic.target.wants/*;\
rm -f /lib/systemd/system/anaconda.target.wants/*;
# Install anything. The service you want to start must be a SystemD service.
CMD ["/usr/sbin/init"]
Now, build the image, and run it using at least the following arguments to docker run
command: -v /run -v /sys/fs/cgroup:/sys/fs/cgroup:ro
Then main point is that /usr/sbin/init
must be the first process inside the Docker container.
So if you want to use a custom script that executes some commands before running /usr/sbin/init
, launch it at the end of your script using exec /usr/sbin/init
(in a bash script).
Here is an example:
ADD cmd.sh /usr/local/bin/
RUN chmod +x /usr/local/bin/cmd.sh
CMD ["/usr/local/bin/cmd.sh"]
And here is the content of cmd.sh
:
#!/bin/bash
# Do some stuffs
exec /usr/sbin/init # To correctly start D-Bus thanks to https://forums.docker.com/t/any-simple-and-safe-way-to-start-services-on-centos7-systemd/5695/8
You could have System is booting up. See pam_nologin(8)
if your using the PAM system, in that case, delete /usr/lib/tmpfiles.d/systemd-nologin.conf
in your Dockerfile
because it creates the file /var/run/nologin
which generates this specific error.