Permission errors running jenkins inside docker using persistent volumes with marathon and mesos

Question

I am trying to get jenkins running inside docker using marathon and mesos to lunch a jenkins docker image.

I used the create application button which produces the following json

{
  "type": "DOCKER",
  "volumes": [
    {
      "containerPath": "/var/jenkins_home",
      "hostPath": "jenkins_home",
      "mode": "RW"
    },
    {
      "containerPath": "jenkins_home",
      "mode": "RW",
      "persistent": {
        "size": 200
      }
    }
  ],
  "docker": {
    "image": "jenkins",
    "network": "HOST",
    "privileged": false,
    "parameters": [],
    "forcePullImage": false
    }
}

stdout shows

--container="mesos-c8bd5b26-6e71-4e18-b490-821dbf7edd9d-S0.ac0b4dbb-10e4-4684-a4df-9539258d77ee" --docker="docker" --docker_socket="/var/run/docker.sock" --help="false" --initialize_driver_logging="true" --launcher_dir="/home/ajazam/mesos-0.28.0/build/src" --logbufsecs="0" --logging_level="INFO" --mapped_directory="/mnt/mesos/sandbox" --quiet="false" --sandbox_directory="/var/lib/mesos/data/slaves/c8bd5b26-6e71-4e18-b490-821dbf7edd9d-S0/frameworks/6079a596-90a8-4fa5-9c92-9215558737d1-0000/executors/jenkins-t7.9be44260-f99c-11e5-b0ac-e4115bb26fcc/runs/ac0b4dbb-10e4-4684-a4df-9539258d77ee" --stop_timeout="0ns"
Registered docker executor on slave4
Starting task jenkins-t7.9be44260-f99c-11e5-b0ac-e4115bb26fcc
Can not write to /var/jenkins_home/copy_reference_file.log. Wrong volume permissions?

stderr shows

I0403 14:04:51.026866  6569 exec.cpp:143] Version: 0.28.0
I0403 14:04:51.032097  6585 exec.cpp:217] Executor registered on slave c8bd5b26-6e71-4e18-b490-821dbf7edd9d-S0
WARNING: Your kernel does not support swap limit capabilities, memory limited without swap.
touch: cannot touch ‘/var/jenkins_home/copy_reference_file.log’: Permission denied

I am using

marathon 1.0.0 RC1 mesos 0.28.0

docker 1.10.3

OS is ubuntu 14.04.4 LTS

Does anybody have any pointers to where I'm going wrong? My feeling is that the problem is todo with the persistent volume and the mapping of it into the jenkins container.

What are the permissions on the agent's `/var/jenkins_home` folder? — Tobi, Apr 05 '16 at 11:27
I've just corrected a mistake in host_path. It was jenkins_path but should have said jenkins_home. I have made the correction. However the two container path references do not match. I'll alter those when I get home so they match. — Abdul Jabbar Azam, Apr 05 '16 at 12:21
I think the issue is https://github.com/jenkinsci/docker/issues/177 — Abdul Jabbar Azam, Apr 05 '16 at 19:54

score 0 · Accepted Answer · answered Apr 05 '16 at 23:23

0

I got it working. git clone https://github.com/jenkinsci/docker.git on to your agent nodes. I've done it on all mine

insert # in front of lines 16 and 17 in Dockerfile e.g

#    RUN groupadd -g ${gid} ${group} \
#        && useradd -d "$JENKINS_HOME" -u ${uid} -g ${gid} -m -s /bin/bash ${user}

run sudo docker build . use sudo docker tag xyz jenkins to rename the repo to jenkins and then create an application using docker, jenkins and persistent volumes.

answered Apr 05 '16 at 23:23

Abdul Jabbar Azam

111
9

Could you please help with latest JSON you used? – Pravin Mishra Apr 07 '16 at 05:37
That only removes the user in the container, and makes the image build fail – csanchez Apr 07 '16 at 09:31
I'm not sure what you mean by failing. The image has built and it works. I do realise jenkins runs as root with the above statements commented out. The persistent volume as default has root permissions so having any other user in the jenkins container wouldn't work. @pravin have a look at marathon google group – Abdul Jabbar Azam Apr 08 '16 at 18:55

Permission errors running jenkins inside docker using persistent volumes with marathon and mesos

1 Answers1