Nethserver-docker on a subscription server

NethServer Version: 7.9
Module: nethserver-docker

After writing up my installation of Joplin Server here: Joplin Server Edition, testing it on a test VM (which, naturally, doesn’t have a subscription), and having it work fine, I decided to try installing it on my production server.

I first noticed that nethserver-docker wasn’t available unless I enabled the nethforge repo–easy enough to do with yum install nethserver-docker --enablerepo=nethforge.

But when I ran docker-compose up on the production server, I get an error I didn’t see on the test system:

[root@neth joplin-server]# docker-compose up -d
Building with native build. Learn about native build in Compose here: https://docs.docker.com/go/compose-native-build/
Creating network "joplin-server_default" with the default driver
ERROR: unable to insert jump to DOCKER-ISOLATION-STAGE-1 rule in FORWARD chain:  (iptables failed: iptables --wait -I FORWARD -j DOCKER-ISOLATION-STAGE-1: iptables v1.4.21: Couldn't load target `DOCKER-ISOLATION-STAGE-1':No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
 (exit status 2))

The obvious difference between the production server and the test server is the subscription, which means repos, and I thought there might be a difference in the installed packages–but yum history doesn’t look like it:

[root@neth-joplin ~]# yum history info 2
Loaded plugins: changelog, fastestmirror, nethserver_events
Transaction ID : 2
Begin time     : Mon Jul 19 19:41:05 2021
Begin rpmdb    : 713:3919edb67eefe33e27449900c85aedb8aa8bc303
End time       :            19:42:23 2021 (78 seconds)
End rpmdb      : 719:555afca302929d4a66a3fe0221a17b9c51bb70d2
User           : root <root>
Return-Code    : Success
Command Line   : install nethserver-docker
Transaction performed with:
    Installed     rpm-4.11.3-45.el7.x86_64                        @anaconda
    Installed     yum-3.4.3-168.el7.centos.noarch                 @anaconda
    Installed     yum-plugin-fastestmirror-1.1.31-54.el7_8.noarch @anaconda
Packages Altered:
    Dep-Install container-selinux-2:2.119.2-1.911c772.el7_8.noarch @ce-extras
    Dep-Install containerd.io-1.2.6-3.3.el7.x86_64                 @nethforge
    Dep-Install docker-ce-3:19.03.8-3.el7.x86_64                   @nethforge
    Dep-Install docker-ce-cli-1:19.03.8-3.el7.x86_64               @nethforge
    Install     nethserver-docker-1.0.12-1.ns7.noarch              @nethforge
    Dep-Install nethserver-httpd-admin-service-2.7.0-1.ns7.noarch  @nethserver-base
history info

vs.

[root@neth joplin-server]# yum history info 342
Loaded plugins: changelog, fastestmirror, nethserver_events, priorities
Transaction ID : 342
Begin time     : Tue Jul 20 10:55:00 2021
Begin rpmdb    : 1701:c2f1f7866e75f7bc921fc8cc803150ea19042b2e
End time       :            10:57:03 2021 (123 seconds)
End rpmdb      : 1706:2cff17f17e8416ba5a1cb0e104c9a124415552a7
User           : root <root>
Return-Code    : Success
Command Line   : install nethserver-docker --enablerepo=nethforge
Transaction performed with:
    Installed     rpm-4.11.3-45.el7.x86_64                        @sb-base
    Installed     yum-3.4.3-168.el7.centos.noarch                 @sb-base
    Installed     yum-plugin-fastestmirror-1.1.31-54.el7_8.noarch @sb-updates
Packages Altered:
    Dep-Install container-selinux-2:2.119.2-1.911c772.el7_8.noarch @sb-extras
    Dep-Install containerd.io-1.2.6-3.3.el7.x86_64                 @nethforge
    Dep-Install docker-ce-3:19.03.8-3.el7.x86_64                   @nethforge
    Dep-Install docker-ce-cli-1:19.03.8-3.el7.x86_64               @nethforge
    Install     nethserver-docker-1.0.12-1.ns7.noarch              @nethforge
Scriptlet output:
   1 setsebool:  SELinux is disabled.
history info

Not sure where else to check here–thoughts?

Did you try to restart docker? IIRC it sets the needed firewall rules.

Maybe you need a

signal-event nethserver-docker-update

4 Likes

That seems to have done it, thanks.

3 Likes