Docker Community Forums

Share and learn in the Docker community.

DTR Install Fails


(Parvez84) #1

Hi , I am trying to reinstall DTR as my previous install failed. The error I receive now is as below.

$ docker info
Containers: 3
Running: 2
Paused: 0
Stopped: 1
Images: 43
Server Version: 17.03.2-ee-4
Storage Driver: devicemapper
Pool Name: docker-253:5-8435386-pool
Pool Blocksize: 65.54 kB
Base Device Size: 10.74 GB
Backing Filesystem: xfs
Data file: /dev/loop0
Metadata file: /dev/loop1
Data Space Used: 4.365 GB
Data Space Total: 107.4 GB
Data Space Available: 2.517 GB
Metadata Space Used: 5.984 MB
Metadata Space Total: 2.147 GB
Metadata Space Available: 2.141 GB
Thin Pool Minimum Free Space: 10.74 GB
Udev Sync Supported: true
Deferred Removal Enabled: false
Deferred Deletion Enabled: false
Deferred Deleted Device Count: 0
Data loop file: /var/lib/docker/devicemapper/devicemapper/data
Metadata loop file: /var/lib/docker/devicemapper/devicemapper/metadata
Library Version: 1.02.135-RHEL7 (2016-11-16)
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
Volume: local
Network: bridge host macvlan null overlay
Swarm: active
NodeID: jeqlz899lp3w7z05kay333029
Is Manager: false
Node Address:
Manager Addresses:

Runtimes: runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 4ab9917febca54791c5f071a9d1f404867857fcc
runc version: 54296cf40ad8143b62dbcaa1d90e520a2136ddfe
init version: 949e6fa
Security Options:
seccomp
Profile: default
Kernel Version: 3.10.0-327.18.2.el7.x86_64
Operating System: Red Hat Enterprise Linux Server 7.2 (Maipo)
OSType: linux
Architecture: x86_64
CPUs: 1
Total Memory: 3.695 GiB
Name: xnvwslp00007
ID: MGLA:QXP3:ONBJ:IROJ:BCOC:JYRJ:B5KY:AYXE:WFB3:FDFJ:RUIS:XOK6
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: false

$ docker run -it --rm docker/dtr:2.2.6 install --dtr-external-url http://<dtr_host>/dtr --ucp-node --ucp-username --ucp-insecure-tls --ucp-url https://:9080

INFO[0000] Beginning Docker Trusted Registry installation
ucp-password:
INFO[0003] Validating UCP cert
INFO[0003] Connecting to UCP
INFO[0004] UCP cert validation successful
INFO[0004] The UCP cluster contains the following nodes: xnvwslp00006, xnvwslp00007, xnvwslp00003
INFO[0004] verifying [80 443] ports on xnvwslp00003
INFO[0000] Validating UCP cert
INFO[0000] Connecting to UCP
INFO[0000] UCP cert validation successful
INFO[0000] Checking if the node is okay to install on
INFO[0000] Connecting to network: dtr-ol
INFO[0000] Waiting for phase2 container to be known to the Docker daemon
INFO[0001] Starting UCP connectivity test
INFO[0001] UCP connectivity test passed
INFO[0001] Setting up replica volumes…
INFO[0001] Creating initial CA certificates
INFO[0001] Bootstrapping rethink…
INFO[0001] Creating dtr-rethinkdb-50a893c513c4…
INFO[0005] Waiting for database dtr2 to exist
INFO[0007] Generated TLS certificate. domain=<DTR_HOST>
INFO[0008] License config copied from UCP.
INFO[0008] Migrating db…
rpc error: code = 2 desc = oci runtime error: exec failed: cannot exec a container that has run and stopped

FATA[0008] Couldn’t migrate database: exit code 126
FATA[0019] Failed to execute phase 2: Phase 2 returned non-zero status: 1

SOME DEBUG INFO:

DEBU[0018] reset registry config to the default
DEBU[0018] Using default HA settings
DEBU[0018] Using default registry settings
DEBU[0018] Using default auth config settings
DEBU[0018] CA created for at certs/notary_server_ca/cert.pem
DEBU[0018] CA created for at certs/notary_signer_ca/cert.pem
DEBU[0018] CA created for at certs/registry_ca/cert.pem
DEBU[0018] CA created for at certs/garant_ca/cert.pem
DEBU[0018] CA created for at certs/api_ca/cert.pem
DEBU[0018] CA created for fuzzomatic at certs/postgres_ca/cert.pem
DEBU[0018] Client cert created for [] at certs/notary_server_client/cert.pem, signed by CA at certs/notary_server_ca/cert.pem
DEBU[0018] Client cert created for [] at certs/notary_signer_client/cert.pem, signed by CA at certs/notary_signer_ca/cert.pem
DEBU[0018] Client cert created for [] at certs/registry_client/cert.pem, signed by CA at certs/registry_ca/cert.pem
DEBU[0018] Client cert created for [] at certs/api_client/cert.pem, signed by CA at certs/api_ca/cert.pem
DEBU[0018] Client cert created for [] at certs/postgres_client/cert.pem, signed by CA at certs/postgres_ca/cert.pem
DEBU[0018] Client cert created for [dtr-notary-server-fa4159df5546.dtr-br dtr-notary-server-fa4159df5546.dtr-ol] at certs/notary_server_server/cert.pem/fa4159df5546, signed by CA at certs/notary_server_ca/cert.pem
DEBU[0018] Client cert created for [dtr-notary-signer-fa4159df5546.dtr-br dtr-notary-signer-fa4159df5546.dtr-ol] at certs/notary_signer_server/cert.pem/fa4159df5546, signed by CA at certs/notary_signer_ca/cert.pem
DEBU[0018] Client cert created for [dtr-registry-fa4159df5546.dtr-br dtr-registry-fa4159df5546.dtr-ol] at certs/registry_server/cert.pem/fa4159df5546, signed by CA at certs/registry_ca/cert.pem
DEBU[0018] Client cert created for [dtr-garant-fa4159df5546.dtr-br dtr-garant-fa4159df5546.dtr-ol] at certs/garant_server/cert.pem/fa4159df5546, signed by CA at certs/garant_ca/cert.pem
DEBU[0018] Client cert created for [dtr-api-fa4159df5546.dtr-br dtr-api-fa4159df5546.dtr-ol] at certs/api_server/cert.pem/fa4159df5546, signed by CA at certs/api_ca/cert.pem
DEBU[0018] Client cert created for [dtr-scanningstore-fa4159df5546.dtr-br dtr-scanningstore-fa4159df5546.dtr-ol] at certs/postgres_server/cert.pem/fa4159df5546, signed by CA at certs/postgres_ca/cert.pem
INFO[0018] License config copied from UCP.
INFO[0018] Migrating db…
DEBU[0018] executing [rethinkops migrate --replicas 1 --debug] in container dtr-rethinkdb-fa4159df5546
DEBU[0019] container wait
DEBU[0019] about to iocopy into the input
DEBU[0019] iocopied the input
rpc error: code = 2 desc = oci runtime error: exec failed: cannot exec a container that has run and stopped

DEBU[0019] finished reading output
FATA[0019] Couldn’t migrate database: exit code 126
DEBU[0028] Deleting container aaffbf9ed9ea552dbf217ab7452ac313c11dcc26c98a240540eb08d453404612
DEBU[0029] Deleting container aaffbf9ed9ea552dbf217ab7452ac313c11dcc26c98a240540eb08d453404612
DEBU[0029] Failed to remove container: Error response from daemon: Error: No such container: aaffbf9ed9ea552dbf217ab7452ac313c11dcc26c98a240540eb08d453404612
DEBU[0029] Ignored error Error response from daemon: Error: No such container: aaffbf9ed9ea552dbf217ab7452ac313c11dcc26c98a240540eb08d453404612…
FATA[0029] Failed to execute phase 2: Phase 2 returned non-zero status: 1


(Parvez84) #2

Fortunately this step started worked , but the install fails with error:

FATA[0052] Couldn’t reconfigure: error transactionally replacing container: failed to reconcile to bootstrap state: error applying state {2 2 2}: error applying state {2 2 2}: failed to create container dtr-registry-329371d40398: Couldn’t create container ‘dtr-registry-329371d40398’ from image ‘docker/dtr-registry:2.2.6’: Polling failed with 15 attempts 1s apart: Error response from daemon: Error response from daemon: Get https://registry-1.docker.io/v2/docker/dtr-registry/manifests/2.2.6: error parsing HTTP 403 response body: invalid character ‘<’ looking for beginning of value: “\n\n\n \n <meta http-equiv=“Content-Type” content=“text/html; charset=us-ascii”>\n \n Web Page Blocked\n \n <style type=“text/css”>\n html, body {\n margin: 0;\n padding: 0;\n background-color: white;\n font-family: Verdana, Arial, sans-serif;\n font-size: 8px;\n text-align: center;\n }\n div.container {\n width: 450px;\n height: 320px;\n position: absolute;\n left: 50%;\n top: 50%;\n margin-top: -160px;\n /* height / 2 /\n margin-left: -225px;\n / width / 2 */\n background: url(https://auth.docker.io:8010/XX/YY/ZZ/CI/MGPGHGJGOGPFCGHGNCFGHGCHFGDHDH) no-repeat scroll center center #FFFFFF;\n border: 2px solid #999999;\n padding: 4px;\n }\n div.main {\n padding: 4px;\n width: 425px;\n font-size: 12px;\n }\n h1 {\n padding-top: 100px;\n font-size: 20px;\n }\n h2 {\n padding-top: 20px;\n font-size: 12px;\n }\n h3 {\n font-size: 12px;\n \n \n \n }\n \n \n \n \n \n <div class=“container”>\n <div class=“main”>\n

\n Internet Authentication\n

\n Please click proceed to log on to the Internet\n

\n

\n <a href=”/ovrd?fblob=QViymYHNhdRfSBaiZNn5pd6Zpj-98zdSX5vkLfka4op58SYiAqw585PQs3ePzMW9IUaLxVfKlC0SsyXqDTchXputhjKa6_ZDlPgN9OsV7Oy824jH4SIqB9TGAz0f&uri=%2ftoken%3fscope%3drepository%253Adocker%252Fdtr%2dregistry%253Apull%26service%3dregistry%2edocker%2eio&hostname=auth%2edocker%2eio">Override \n<script language=“javascript”>\n

\n \n \n \n \n \n\n\r\n"
FATA[0059] Failed to execute phase 2: Phase 2 returned non-zero status: 1

My Docker has that image locally:

docker/dtr-registry 2.2.6 b4271b38c353


(Patrick Devine) #3

It looks like there’s some kind of firewall that it’s trying to connect through? Do you have each of the container images already, or is it failing when it’s trying to download them?


(Jacob Roy) #4

Hi all, I am also facing the same issue. I was able to download the image successfully, but failing to install the DTR. I was able to install the DTR successfully, when I was trying the DDC in sandbox install.
Any help would be really appreciated!!!


(Jacob Roy) #5

INFO[0007] Migrating db…
rpc error: code = 2 desc = oci runtime error: exec failed: cannot exec a container that has run and stopped

FATA[0007] Couldn’t migrate database: exit code 126
FATA[0021] Failed to execute phase 2: Phase 2 returned non-zero status: 1
[root@SA-ucp-DTR ~]#