Runtime error about hbm HOT 7 OPEN

which docker command did you run to get that error?

from hbm.

It's docker-compose so it's kind of hard to tell the exact docker command, but when I switch HBM off it looks like it's a container_create command that's next. I'll see if I can get more debug info from docker-compose...

from hbm.

Got some more information from docker-compose:
compose.cli.verbose_proxy.proxy_callable: docker create_container <- (command='worker', environment=['CONCOURSE_TSA_HOST=host:2222', 'CONCOURSE_GARDEN_DNS_SERVER=x.x.x.x', 'CONCOURSE_GARDEN_LOG_LEVEL=info', 'HOST_HOSTNAME=host1', 'HOST_DOMAINNAME=.xxx.se', 'CONCOURSE_NAME=host1_2018.October.15_14.21.03', 'SET_CONTAINER_TIMEZONE=true', 'CONTAINER_TIMEZONE=Europe/Stockholm', 'CONCOURSE_BAGGAGECLAIM_DRIVER=btrfs', 'CONCOURSE_GARDEN_MAX_CONTAINERS=512', 'CONCOURSE_GARDEN_NETWORK_POOL=10.254.0.0/21'], image='portus.se/concourse:3.14.1', ports=[('7777', 'tcp'), ('7788', 'tcp'), ('7799', 'tcp')], volumes={'/concourse-keys': {}}, name='sed_worker-host1_2018.October.15_14.21.03', detach=True, labels={'com.docker.compose.project': 'config', 'com.docker.compose.service': 'concourse-worker-host1', 'com.docker.compose.oneoff': 'False', 'com.docker.compose.container-number': '1', 'com.docker.compose.version': '1.22.0', 'com.docker.compose.config-hash': '899ee2f4ee6fda6990da6a422d03f2985a0ea354ac2514c8525733a8c504b801'}, host_config={'Privileged': True, 'NetworkMode': 'config_default', 'VolumesFrom': [], 'Binds': ['/proj/prov/env1/runarea/ci/concourse/production/keys/worker:/concourse-keys:rw'], 'PortBindings': {'7777/tcp': [{'HostIp': '', 'HostPort': '7777'}], '7788/tcp': [{'HostIp': '', 'HostPort': '7788'}], '7799/tcp': [{'HostIp': '', 'HostPort': '7799'}]}, 'Links': [], 'LogConfig': {'Type': '', 'Config': {}}}, networking_config={'EndpointsConfig': {'config_default': {'Aliases': ['concourse-worker-sekalx583'], 'IPAMConfig': {}}}})
compose.parallel.feed_queue: Pending: set()
urllib3.connectionpool._make_request: http://localhost:None "POST /v1.25/containers/create?name=sed_worker-sekalx583_2018.October.15_14.21.03 HTTP/1.1" 500 119
Creating sed_worker-sekalx583_2018.October.15_14.21.03 ... error
compose.parallel.feed_queue: Pending: set()

ERROR: for sed_worker-sekalx583_2018.October.15_14.21.03 Cannot create container for service concourse-worker-sekalx583: plugin hbm failed with error: AuthZPlugin.AuthZReq: an error occurred; contact your system administrator
compose.parallel.parallel_execute_iter: Failed: <Service: concourse-worker-sekalx583>
compose.parallel.feed_queue: Pending: set()

Don't know if you can find something from these logs...

from hbm.

Hi Julien,
Did some more digging and found that it looks like a regression with HBM 0.11.0, docker-compose doesn't work but if I revert to 0.10.0 the same docker-compose.yml works.

Does that help?

Regards Emil

from hbm.

Hi
I experience the same issues. But for me it also fails also in 0.10.0, as long as I have config:authorization set to true.

But I managed to use a simple docker-compose file with 0.12.0, after adding network create, network disconnect and network connect. But initially I got it to crash there also.

from hbm.

This a really strange bug. I just noticed I have it workin on a RHEL 7.4 host but not on RHEL 7.5 or 7.6.

So I removed the installed 0.11.0 version, installed 0.10.0. Ensured authorization was enabled. Removed the hbm database and applied all rules again. Tested. Successful.

Upgraded back to 0.11.0 version. Ensured authorization was enabled. Tested. Successful.

Is there any database difference between 0.10.0 and 0.11.0, when the database is initialized?

from hbm.

Interesting I haven't had time to look into it anymore but does it still work with 0.12.0 and a new initialization?

from hbm.