Docker Community Forums

Share and learn in the Docker community.

Issue installing DTR: The UCP node has port conflicts, please pick another node or choose a different port

swarm
docker

(Ajnouri) #1

Hi everyone,

In a lab environment, I’m trying to install DTR on a worker with UCP succssfully installed on “manager1”.

/ # docker run -it --rm docker/dtr install \
>   --ucp-node swarm-manager1 \
>   --ucp-username admin \
>   --ucp-url https://192.168.123.2 \
>   --ucp-insecure-tls \
>   --ucp-password pass

Unable to find image ‘docker/dtr:latest’ locally
latest: Pulling from docker/dtr
605ce1bd3f31: Already exists
3229f5297e59: Pull complete
311610a93755: Pull complete
33fb3c0b5eca: Pull complete
Digest: sha256:713cd5692136d203d10a94084dca13c1918f3ef25543e3908d9358dad83e2aac
Status: Downloaded newer image for docker/dtr:latest
INFO[0000] Beginning Docker Trusted Registry installation
INFO[0000] Validating UCP cert
INFO[0000] Connecting to UCP
FATA[0001] failed to choose ucp node: The UCP node ‘swarm-manager1’ has port conflicts, please pick another node or choose a different port.

According to some rare discussions around similar issue, it looks like DTR is looking for free UCP port 443.
But on the UCP it is used by UCP controller.

/ # docker ps

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
6281808796b1 docker/ucp-agent:2.2.7 “/bin/ucp-agent agent” 2 hours ago Up 2 hours 2376/tcp ucp-agent.sr40esf5zt3p8astipnyzr2bw.kof31jl31huoufcdbatew46aa
5bd0e7ea7fe5 docker/ucp-controller:2.2.7 “/bin/controller ser…” 2 hours ago Up 2 hours (healthy) 0.0.0.0:443->8080/tcp ucp-controller
093a783bb49d docker/ucp-auth:2.2.7 “/usr/local/bin/enzi…” 2 hours ago Up 2 hours (healthy) 0.0.0.0:12385->4443/tcp ucp-auth-api
466b94ef06cf docker/ucp-swarm:2.2.7 “/bin/swarm manage -…” 2 hours ago Up 2 hours (healthy) 0.0.0.0:2376->2375/tcp ucp-swarm-manager
754b1af92281 docker/ucp-auth:2.2.7 “/usr/local/bin/enzi…” 2 hours ago Up 2 hours (healthy) 0.0.0.0:12386->4443/tcp ucp-auth-worker
ea2c7b77c281 docker/ucp-metrics:2.2.7 “/bin/entrypoint.sh …” 2 hours ago Up 2 hours (healthy) 0.0.0.0:12387->12387/tcp ucp-metrics
b062aaa184ee docker/ucp-auth-store:2.2.7 “rethinkdb --bind al…” 2 hours ago Up 2 hours (healthy) 0.0.0.0:12383-12384->12383-12384/tcp ucp-auth-store
309cc885e1b9 docker/ucp-etcd:2.2.7 “/bin/etcd --data-di…” 2 hours ago Up 2 hours (healthy) 2380/tcp, 4001/tcp, 7001/tcp, 0.0.0.0:12380->12380/tcp, 0.0.0.0:12379->2379/tcp ucp-kv
42110212072f docker/ucp-cfssl:2.2.7 “/bin/ucp-ca serve -…” 2 hours ago Up 2 hours (healthy) 0.0.0.0:12382->12382/tcp ucp-client-root-ca
96932853ebcc docker/ucp-cfssl:2.2.7 “/bin/ucp-ca serve -…” 2 hours ago Up 2 hours (healthy) 0.0.0.0:12381->12381/tcp ucp-cluster-root-ca
1a51e9022e3b docker/ucp-agent:2.2.7 “/bin/ucp-agent prox…” 2 hours ago Up 2 hours (healthy) 0.0.0.0:12376->2376/tcp ucp-proxy

How can I pick another UCP node if it will also take the port 443?
I have tried to choose another port (ex: 445) on the DTR instal command:

–ucp-url https://192.168.123.2:445

But this doesn’t work as expected, connection refused by UCP node.

Cannot isolate the conditions under which this happens as I successfully installed DTR many times without encoutering this issue.

Any hint?


(Sbedocker) #2

Got the same error. Did you finally find a workaround?