Docker Container Issues : permission denied:

[ReallyCrazyChris]

Hi Folks, Crazy Chris here,

For about two week snow I have not been able to get clio to start in her docker container. I now no longer have nay hair ;-)

I created the following docker-compose.yaml file

`
services:

cassandra:
image: cassandra:latest
container_name: cassandra
ports:
- "9042:9042"
environment:
- CASSANDRA_CLUSTER_NAME=clio_cluster
volumes:
- cassandra-data:/var/lib/cassandra
healthcheck:
test: ["CMD", "cqlsh", "-e", "describe keyspaces"]
interval: 30s
timeout: 10s
retries: 10

xrpld:
image: xrpllabsofficial/xrpld:latest
container_name: xrpld
ports:
- "51234:51234" # RPC
- "5005:5005" # JSON-RPC public
volumes:
- ./xrpld/xrpld.cfg:/opt/xrpld/xrpld.cfg

clio:
#image: rippleci/clio:latest # latest is a year old :/
image: rippleci/clio:ba905e38ae16eea8061a39da05947ebe90c512e1
container_name: clio
user: root
depends_on:
cassandra:
condition: service_healthy
xrpld:
condition: service_started
ports:
- "51235:51235" # HTTP
- "50051:50051" # gRPC
volumes:
- ./clio/config.json:/opt/clio/etc/config.json
working_dir: /opt/clio
command: ["/opt/clio/bin/clio_server","--conf", "/opt/clio/etc/config.json"]

volumes:
cassandra-data:
`

xrpld ... runs
cassandra .. runs

however clio throws this error:

Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: exec: "/opt/clio/bin/clio_server": permission denied: unknown

it appears that the container does not have the permissions to runc clio_server.

I would very much appreciate a hint in the right direction

All the best
your hairless crazy chris

[mathbunnyru]

I was able to reproduce using simple docker command:

~ > docker run -it --rm --platform linux/amd64 rippleci/clio:ba905e38ae16eea8061a39da05947ebe90c512e1
docker: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: exec: "/opt/clio/bin/clio_server": permission denied: unknown

Run 'docker run --help' for more information

Note: I added --platform linux/amd64 because I'm on M4 macOS.

Then I added --entrypoint /bin/bash --user root: docker run -it --rm --platform linux/amd64 --entrypoint /bin/bash --user root rippleci/clio:ba905e38ae16eea8061a39da05947ebe90c512e1
It allowed me to start the container under root and to test some things.

I ran:

root@508723d1876f:/# /opt/clio/bin/clio_server
bash: /opt/clio/bin/clio_server: Permission denied

After running: chmod +x /opt/clio/bin/clio_server I was able to run the executable

So, the problem is that the binary file is not executable.
I will fix it in a PR.

[mathbunnyru]

@ReallyCrazyChris I fixed the issue in #2394
Also refactored our Dockerfile so it's easier to understand here: #2395

And finally triggered nigthly release here: https://github.com/XRPLF/clio/actions/runs/16756553845
When it finishes, new image should be uploaded and it shouldn't have this problem

PS: I hope hair will grow back 🙂

[mathbunnyru]

I've checked like this: docker run -it --rm --pull always --platform linux/amd64 rippleci/clio:nightly --version and it works (it didn't before).

Please, if you have any further problems, open them as issues.