Hello,
I’m new to docker.
I have followed the steps for the installation of docker on Windows Server 2016 according to the documentation , and getting responses for docker info and docker version commands. I have successfully loaded hello-world images from another computer, because there is limited access for the server. When docker images command run, it shows hello-world image in the list. But, when I run docker run hello-world command I get the error behind Actual Behavior.
Expected behavior
Hello-World verification is expected to run, as stated in the documentation.
Actual behavior
Giving the error for run hello-world command:
PS> docker run hello-world
C:\Program Files\docker\docker.exe: Error response from daemon: CreateComputeSystem fb69c3ce1994464e62ee7f01213fe5b59177
1ef4151af88686e17500facc4ba0: The parameter is incorrect.
[Event Detail: Failed to attach network endpoint to Container ‘fb69c3ce1994464e62ee7f01213fe5b591771ef4151af88686e17500f
acc4ba0’, network endpoint ID ‘{########-####-####-####-############}’: One or more arguments are invalid (0x80070057).
Provider: 17103e3f-3c6e-4677-bb17-3b267eb5be57 EventID: 12102]
(extra info: {“SystemType”:“Container”,“Name”:“fb69c3ce1994464e62ee7f01213fe5b591771ef4151af88686e17500facc4ba0”,“Owner”
:“docker”,“VolumePath”:"\\?\Volume{3a345ca2-98ad-11e9-9107-005056a2bc59}",“IgnoreFlushesDuringBoot”:true,“LayerFolder
Path”:“C:\ProgramData\docker\windowsfilter\fb69c3ce1994464e62ee7f01213fe5b591771ef4151af88686e17500facc4ba0”,"Layers
":[{“ID”:“293ea06d-5f41-5fd0-85ff-9c31ccaaebab”,“Path”:“C:\ProgramData\docker\windowsfilter\5f355584bafa373d6ca3312a
a1a8aebbcf7e33b8f56c48b2899aaded6a925a43”},{“ID”:“b8be0e98-e183-563d-8795-83e77d8324a0”,“Path”:“C:\ProgramData\docker
\windowsfilter\e481cb381960fd84ed9a6743f768dd84827cd030225d34e719b048a1f080e6de”},{“ID”:“ec1cecc1-4182-58d0-9364-24433c
9e68b0”,“Path”:"C:\ProgramData\docker\windowsfilter\b718c2d67302a5a095f54eeed43d4a7018b88d56049f58629c9d967bc29254cd
"},{“ID”:“a3958c3e-7401-51a0-bcb9-86dd65af84da”,“Path”:“C:\ProgramData\docker\windowsfilter\70082747662fce03578c86e2
3294957da16403f6b3db23e415df16ed890675ba”}],“HostName”:“fb69c3ce1994”,“HvPartition”:false,“EndpointList”:[“8b94dfb7-6f15
-4f6b-a52f-8ddd3233fc23”],“AllowUnqualifiedDNSQuery”:true}).
Information
Symantec AV is installed but disabled and stopped. Windows Firewall is stopped. FireEye Endpoint Agent is working and cannot be stopped.
PS> docker version
Client: Docker Engine - Enterprise
Version: 18.09.5
API version: 1.39
Go version: go1.10.8
Git commit: be4553c277
Built: 04/11/2019 06:44:52
OS/Arch: windows/amd64
Experimental: false
Server: Docker Engine - Enterprise
Engine:
Version: 18.09.5
API version: 1.39 (minimum version 1.24)
Go version: go1.10.8
Git commit: be4553c277
Built: 04/11/2019 06:43:04
OS/Arch: windows/amd64
Experimental: false
PS> docker info
Containers: 10
Running: 0
Paused: 0
Stopped: 10
Images: 27
Server Version: 18.09.5
Storage Driver: windowsfilter
Windows:
Logging Driver: json-file
Plugins:
Volume: local
Network: ics l2bridge l2tunnel nat null overlay transparent
Log: awslogs etwlogs fluentd gelf json-file local logentries splunk syslog
Swarm: inactive
Default Isolation: process
Kernel Version: 10.0 14393 (14393.2906.amd64fre.rs1_release_inmarket.190401-1809)
Operating System: Windows Server 2016 Standard Version 1607 (OS Build 14393.2906)
OSType: windows
Architecture: x86_64
CPUs: 8
Total Memory: 64GiB
Docker Root Dir: C:\ProgramData\docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
Labels:
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: false
-the output of:
- Debug-ContainerHost.ps1 using Powershell on Windows:
Describing Windows Version and Prerequisites
[+] Is Windows 10 Anniversary Update or Windows Server 2016 1.18s
[+] Has KB3192366, KB3194496, or later installed if running Windows build 14393 225ms
[+] Is not a build with blocking issues 58ms
[+] Has ‘Containers’ feature installed 17.58s
Describing Docker is installed
[+] A Docker service is installed - ‘Docker’ or ‘com.Docker.Service’ 286ms
[+] Service is running 79ms
[+] Docker.exe is in path 2.19s
[+] Docker is registered in the EventLog service 88ms
Describing User has permissions to use Docker daemon
[+] docker.exe should not return access denied 221ms
Describing Windows container settings are correct
[+] Do not have DisableVSmbOplock set to 1 89ms
[+] Do not have zz values set 91ms
[+] Do not have FDVDenyWriteAccess set to 1 88ms
Describing The right container base images are installed
WARNING: No mcr.microsoft.com/* base images found. Checking for deprecated images.
At least one of 'mcr.microsoft.com/windows/servercore', 'mcr.microsoft.com/windows/nanoserver', 'mcr.microsoft.com/windows' or deprecated microsoft/windowsservercore, microsof
t/nanoserver should be installed 553ms
ValidationMetadataException: The argument is null or empty. Provide an argument that is not null or empty, and then try the command again.
ParameterBindingValidationException: Cannot validate argument on parameter ‘Property’. The argument is null or empty. Provide an argument that is not null or empty, and then try
the command again.
at , : line 126
Describing Container network is created
[+] At least one local container network is available 5.54s
[+] At least one NAT, Transparent, or L2Bridge Network exists 105ms
[+] NAT Network’s vSwitch is internal 68ms
[+] A Windows NAT is configured if a Docker NAT network exists 618ms
[+] Specified Network Gateway IP for NAT network is assigned to Host vNIC 161ms
[+] NAT Network’s internal prefix does not overlap with external IP’ 80ms
I think the error related with Microsoft base images is related with internet connection limitation.
Steps to reproduce the behavior
- Install docker as per documentation.
- Stop Symantec AV and Windows Firewall
- Run hello-world command
Does anyone who encountered this error before? Does it related with the endpoint protection tool?
Thanks for your responses.
Kind regards.