{"id":36736,"date":"2019-10-31T22:13:26","date_gmt":"2019-10-31T19:13:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/istoriya-problemy-perenosa-docker-storage-docker-root\/"},"modified":"2019-10-31T22:13:26","modified_gmt":"2019-10-31T19:13:26","slug":"istoriya-problemy-perenosa-docker-storage-docker-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/istoriya-problemy-perenosa-docker-storage-docker-root","title":{"rendered":"Istoria problemei privind migrarea stoc\u0103rii docker (docker root)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cu doar c\u00e2teva zile \u00een urm\u0103, s-a decis s\u0103 mut\u0103m stocarea Docker (directorul \u00een care Docker p\u0103streaz\u0103 toate fi\u0219ierele containerelor \u0219i imaginile) pe o parti\u021bie separat\u0103 care
\navea o capacitate mai mare. Sarcina p\u0103rea, de fapt, trivial\u0103 \u0219i nu prevestea nimic r\u0103u...
\n<\/a><\/noindex>
\nS\u0103 \u00eencepem:<\/p>\n

1. Oprim \u0219i elimin\u0103m toate containerele aplica\u021biei noastre: <\/p>\n

docker-compose down<\/code><\/pre>\n
\ndac\u0103 sunt multe containere \u0219i sunt \u00een compuneri diferite, se poate a\u0219a: <\/p>\n
docker rm -f $(docker ps -q)<\/code><\/pre>\n
\n2. Oprim demonul Docker: <\/p>\n
systemctl stop docker<\/code><\/pre>\n
\n3. Mut\u0103m directorul \u00een locul necesar: <\/p>\n
cp -r \/var\/lib\/docker \/docker\/data\/storage<\/code><\/pre>\n
\n4. Inform\u0103m demonul Docker s\u0103 priveasc\u0103 \u00een noua direc\u021bie. Aici sunt mai multe op\u021biuni: fie prin flag-ul -g, fie prin configura\u021biile systemd, pe care le-am folosit. Sau un symlink. Nu m\u0103 voi extinde asupra acestui lucru, pe internet sunt<\/a><\/noindex> o mul\u021bime<\/p>\n
de manuale despre mutarea r\u0103d\u0103cinii Docker \u00eentr-un nou loc. <\/p>\n
5. Pornim demonul Docker \u0219i ne asigur\u0103m c\u0103 se \u00eendreapt\u0103 unde trebuie:<\/code><\/pre>\n
\nsystemctl status docker<\/p>\n
\u00cen una dintre liniile de ie\u0219ire ar trebui s\u0103 vedem:<\/code><\/pre>\n
\n\u251c\u250019493 \/usr\/bin\/dockerd --data-root=\/docker\/data\/storage Ne-am asigurat c\u0103 am transmis op\u021biunea demonului, acum s\u0103 verific\u0103m dac\u0103 a aplicat-o (mul\u021bumim<\/a><\/noindex>)!<\/p>\n
inkvizitor68sl <\/code><\/pre>\n
\ndocker info | awk '\/Root Dir\/ {print $NF}' <\/p>\n
docker-compose up -d<\/code><\/pre>\n
\n6. Pornim aplica\u021bia noastr\u0103:<\/p>\n
7. Verific\u0103m \u0218i aici \u00eencepe partea cea mai interesant\u0103, SGBD, MQ, totul este bine! Baza de date e \u00eentreag\u0103, totul func\u021bioneaz\u0103... cu excep\u021bia Nginx. Avem o construc\u021bie proprie Nginx cu Kerberos \u0219i curtezane. Iar examinarea jurnalelor containerului a ar\u0103tat c\u0103 nu poate scrie \u00een \/var\/tmp\u2014Permission denied. \u00cemi r\u0103sucesc degetele pe t\u00e2mple \u0219i \u00eencerc s\u0103 analizez situa\u021bia... Cum a\u0219a? Imaginea Docker nu s-a schimbat. Am mutat doar directorul. A func\u021bionat \u00eentotdeauna, \u0219i acum... Ca experiment, am intrat manual \u00een container \u0219i am schimbat permisiunile pentru acest director, erau<\/u>root, root 755 , am dat<\/u>root, root 777 <\/p>\n
. \u0218i totul a \u00eenceput s\u0103 func\u021bioneze... \u00cen minte mi-a ap\u0103rut g\u00e2ndul \u2014 absurd... M-am g\u00e2ndit c\u0103 poate am omis ceva... Am decis c\u0103 am pierdut permisiunile de acces la fi\u0219iere \u00een timpul mut\u0103rii. Am oprit aplica\u021bia, demonul Docker, am \u0219ters noul director \u0219i am realizat copierea directorului \/var\/lib\/docker folosind<\/code>. <\/p>\n
rsync -a\nCred c\u0103 acum totul este \u00een regul\u0103, pornim Docker, aplica\u021bia.<\/p>\n
\u0218i\u2026 problema a r\u0103mas\u2026 Mi s-a stricat un ochi. Am fugit la consola virtualului meu, unde rulez diverse teste, aveam aceast\u0103 imagine nginx, \u0219i am intrat \u00een container, \u0219i aici \u00een directorul \/var\/tmp permisiunile sunt root, root 777. Adic\u0103 la fel cum trebuia s\u0103 le seteze manual. Dar imaginile sunt identice! <\/p>\n
FS xfs a fost folosit peste tot.<\/u><\/p>\n
Am comparat prin comanda <\/p>\n
docker inspect my-nginx:12345<\/code><\/pre>\n
\nToate hash-urile sunt identice, totul este la fel. At\u00e2t pe server, c\u00e2t \u0219i pe virtualul meu. Am \u0219ters imaginea local\u0103 nginx \u0219i am desc\u0103rcat-o din nou de la registry, care din diverse motive se afl\u0103 pe aceea\u0219i ma\u0219in\u0103. \u0218i problema este aceea\u0219i\u2026 Acum mi s-a stricat \u0219i cel\u0103lalt ochi.<\/p>\n
Nu mai \u0219tiu ce g\u00e2nduri aveam \u00een cap, \u00een afar\u0103 de strig\u0103te \u00abAAAAAA\u00bb \u0219i altele asemenea. Afar\u0103 sunt 4 diminea\u021ba, am \u00eenceput s\u0103 analizez sursele Docker pentru a \u00een\u021belege principiul hash\u0103rii stratelor imaginii. Am deschis a treia doz\u0103 de energizant. \u0218i, \u00een final, mi-am dat seama c\u0103 hasharea ia \u00een considerare doar fi\u0219ierul, con\u021binutul acestuia, dar NU PERMISIUNILE DE ACCES<\/b>! Asta \u00eenseamn\u0103 c\u0103, \u00eentr-un mod misterios, permisiunile noastre s-au stricat, de\u0219i selinux este dezactivat, acl nu sunt utilizate, sticky bit nu este prezent. <\/p>\n
Am \u0219ters imaginea local\u0103, de asemenea am \u0219ters imaginea din docker registry \u0219i am \u00eenc\u0103rcat-o din nou. \u0218i totul a func\u021bionat. Se pare c\u0103, la transfer, permisiunile s-au stricat, at\u00e2t \u00een interiorul imaginii locale, c\u00e2t \u0219i \u00een imaginea aflat\u0103 \u00een registry. A\u0219a cum am spus, din diverse motive se afla pe aceea\u0219i ma\u0219in\u0103. \u0218i, ca urmare, \u00eentr-un director \/var\/lib\/docker.<\/p>\n
\u0218i anticip\u00e2nd \u00eentrebarea, nu am \u00eencercat s\u0103 readucem Docker la vechiul director \u2014 nu, nu am \u00eencercat, din p\u0103cate, condi\u021biile nu au permis. \u0218i mi-a\u0219 fi dorit mult s\u0103 \u00een\u021beleg.<\/p>\n
Dup\u0103 scrierea acestui articol, solu\u021bia problemei mi se pare evident\u0103, dar \u00een momentul analizei nu p\u0103rea a\u0219a. Am c\u0103utat sincer \u0219i nu am g\u0103sit situa\u021bii asem\u0103n\u0103toare.<\/p>\n
Rezultatul: am rezolvat problema, dar nu am \u00een\u021beles cauza =(<\/p>\n
Dac\u0103 cineva \u0219tie sau are o idee despre posibilele cauze ale acestei probleme \u2014 a\u0219 fi extrem de recunosc\u0103tor pentru comentarii!
\n
Sursa: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041d\u0435 \u0434\u0430\u043b\u0435\u0435, \u0447\u0435\u043c \u043f\u0430\u0440\u0443 \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434 \u0431\u044b\u043b\u043e \u0440\u0435\u0448\u0435\u043d\u043e \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u044b\u043d\u0435\u0441\u0442\u0438 docker storage (\u043a\u0430\u0442\u0430\u043b\u043e\u0433, \u0433\u0434\u0435 \u0434\u043e\u043a\u0435\u0440 \u0445\u0440\u0430\u043d\u0438\u0442 \u0432\u0441\u0435 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0437\u043e\u0432) \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0430\u0437\u0434\u0435\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u043b\u0430\u0434\u0430\u043b \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0435\u043c\u043a\u043e\u0441\u0442\u044c\u044e. \u0417\u0430\u0434\u0430\u0447\u0430, \u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b, \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438 \u043d\u0435 \u043f\u0440\u0435\u0434\u0432\u0435\u0449\u0430\u043b\u0430 \u0431\u0435\u0434\u044b\u2026 \u041f\u0440\u0438\u0441\u0442\u0443\u043f\u0430\u0435\u043c: 1. \u041e\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c \u0438 \u0443\u0431\u0438\u0432\u0430\u0435\u043c \u0432\u0441\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b \u043d\u0430\u0448\u0435\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f: docker-compose down \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u043c\u043d\u043e\u0433\u043e, \u0438 \u043e\u043d\u0438 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36736","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Istoria problemei transferului docker storage (docker root) | ProHoster","description":"Cu c\u00e2teva zile \u00een urm\u0103 s-a decis pe unul dintre servere s\u0103 mut\u0103m docker storage (directorul unde Docker p\u0103streaz\u0103 toate fi\u0219ierele containerelor \u0219i imaginilor) pe o parti\u021bie separat\u0103, care avea o capacitate mai mare.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/istoriya-problemy-perenosa-docker-storage-docker-root","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0430 docker storage (docker root) | ProHoster","og:description":"\u041d\u0435 \u0434\u0430\u043b\u0435\u0435, \u0447\u0435\u043c \u043f\u0430\u0440\u0443 \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434 \u0431\u044b\u043b\u043e \u0440\u0435\u0448\u0435\u043d\u043e \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u044b\u043d\u0435\u0441\u0442\u0438 docker storage (\u043a\u0430\u0442\u0430\u043b\u043e\u0433, \u0433\u0434\u0435 \u0434\u043e\u043a\u0435\u0440 \u0445\u0440\u0430\u043d\u0438\u0442 \u0432\u0441\u0435 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0437\u043e\u0432) \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0430\u0437\u0434\u0435\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u043b\u0430\u0434\u0430\u043b \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0435\u043c\u043a\u043e\u0441\u0442\u044c\u044e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/istoriya-problemy-perenosa-docker-storage-docker-root","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:13:26+00:00","article:modified_time":"2019-10-31T19:13:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36736","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:38:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:39:24","updated":"2026-01-22 04:38:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/36736","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=36736"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/36736\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=36736"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=36736"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=36736"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}