docker-compose进行部署容器的时候，报错权限不足

秦羽 2021-08-05 AM 364℃ 0条

docker-compose 部署时报错
```
app_1  | ls: cannot open directory '.': Permission denied
```
## 解决方法：

1.在运行容器的时候，给容器加特权，及加上 --privileged=true 参数：
docker run -i -t -v /soft:/soft --privileged=true 686672a1d0cc /bin/bash

注：这种适合docker run
2.临时关闭selinux：
setenforce 0

用这种解决了问题。
3.添加selinux规则，改变要挂载的目录的安全性文本

更改安全性文本的格式如下
chcon [-R] [-t type] [-u user] [-r role] 文件或者目录

选顷不参数： 
-R ：连同该目录下癿次目录也同时修改； 
-t ：后面接安全性本文的类型字段！例如 httpd_sys_content_t ； 
-u ：后面接身份识别，例如 system_u； 
-r ：后面街觇色，例如 system_r

[root@localhost Desktop]# chcon --help
Usage: chcon [OPTION]... CONTEXT FILE...
or: chcon [OPTION]... [-u USER] [-r ROLE] [-l RANGE] [-t TYPE] FILE...
or: chcon [OPTION]... --reference=RFILE FILE...
Change the SELinux security context of each FILE to CONTEXT.
With --reference, change the security context of each FILE to that of RFILE.

Mandatory arguments to long options are mandatory for short options too.
--dereference affect the referent of each symbolic link (this is
the default), rather than the symbolic link itself
-h, --no-dereference affect symbolic links instead of any referenced file
-u, --user=USER set user USER in the target security context
-r, --role=ROLE set role ROLE in the target security context
-t, --type=TYPE set type TYPE in the target security context
-l, --range=RANGE set range RANGE in the target security context
--no-preserve-root do not treat '/' specially (the default)
--preserve-root fail to operate recursively on '/'
--reference=RFILE use RFILE's security context rather than specifying
a CONTEXT value
-R, --recursive operate on files and directories recursively
-v, --verbose output a diagnostic for every file processed

The following options modify how a hierarchy is traversed when the -R
option is also specified. If more than one is specified, only the final
one takes effect.

-H if a command line argument is a symbolic link
to a directory, traverse it
-L traverse every symbolic link to a directory
encountered
-P do not traverse any symbolic links (default)

--help display this help and exit
--version output version information and exit

GNU coreutils online help: <http://www.gnu.org/software/coreutils/>
For complete documentation, run: info coreutils 'chcon invocation'
在主机中修改/soft目录的安全性文档

[root@localhost Desktop]# chcon -Rt svirt_sandbox_file_t /soft

[root@ba471da26d07 soft]# ll
total 384264
-rw-r--r--. 1 root root 212046774 Aug 8 10:01 hadoop-2.7.2.tar.gz
-rw-r--r--. 1 root root 181435897 Aug 8 09:23 jdk-8u102-linux-x64.tar.gz
在docker中就可以正常访问该目录下的相关资源了。

参考
https://blog.csdn.net/qq_29860591/article/details/103776446

标签: docker, docker-compose

非特殊说明，本博所有文章均为博主原创。

如若转载，请注明出处：https://www.qinyu.cc/archives/104.html

上一篇启动docker服务时虚拟机端口转发外部无法访问

下一篇 docker-compose安装

docker-compose进行部署容器的时候，报错权限不足

评论啦~

栏目分类

标签云

友情链接申请

docker-compose进行部署容器的时候，报错权限不足

 评论啦~

 栏目分类

标签云

友情链接申请

评论啦~

栏目分类

标签云

友情链接申请