Getting following error when updating cpuset configuration of running container (from core 0 to 2).
# docker update --cpuset-cpus 2 e670b0ba3386
Error response from daemon: Cannot update container e670b0ba3386da5028f95a2234c2441ed44fad1f6c2399290257b8ce53526b44: rpc error: code = 13 desc = invalid header field value "failed to write a *:* rwm to devices.allow: write /sys/fs/cgroup/devices/docker/e670b0ba3386da5028f95a2234c2441ed44fad1f6c2399290257b8ce53526b44/devices.allow: invalid argument\n"
# docker version
Client:
Version: 1.12.6
API version: 1.24
Go version: go1.6.4
Git commit: 78d1802
Built: Tue Jan 10 20:20:01 2017
OS/Arch: linux/amd64
Server:
Version: 1.12.6
API version: 1.24
Go version: go1.6.4
Git commit: 78d1802
Built: Tue Jan 10 20:20:01 2017
OS/Arch: linux/amd64
# docker info
Containers: 2
Running: 2
Paused: 0
Stopped: 0
Images: 3
Server Version: 1.12.6
Storage Driver: devicemapper
Pool Name: docker-thinpool
Pool Blocksize: 524.3 kB
Base Device Size: 10.74 GB
Backing Filesystem: ext4
Data file:
Metadata file:
Data Space Used: 4.061 GB
Data Space Total: 22.88 GB
Data Space Available: 18.82 GB
Metadata Space Used: 2.675 MB
Metadata Space Total: 234.9 MB
Metadata Space Available: 232.2 MB
Thin Pool Minimum Free Space: 2.288 GB
Udev Sync Supported: true
Deferred Removal Enabled: true
Deferred Deletion Enabled: false
Deferred Deleted Device Count: 0
Library Version: 1.02.135-RHEL7 (2016-09-28)
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
Volume: local
Network: overlay bridge host null
Swarm: inactive
Runtimes: runc
Default Runtime: runc
Security Options: seccomp
Kernel Version: 4.14.15-adva-15
Operating System: CentOS Linux 7 (Core)
OSType: linux
Architecture: x86_64
CPUs: 1
Total Memory: 15.64 GiB
Name: MaestrOS
ID: GW5Y:TJEG:RHPT:UJSJ:AIZX:Z5R7:JTJY:UP6T:JIXD:VIQ3:T7LZ:7XAL
Docker Root Dir: /mnt/images/docker
Debug Mode (client): false
Debug Mode (server): true
File Descriptors: 183
Goroutines: 45
System Time: 2018-06-26T13:19:34.886108827-05:00
EventsListeners: 0
Registry: https://index.docker.io/v1/
WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled
Insecure Registries:
127.0.0.0/8
Seeing below error in syslog:
Jun 26 13:11:45 dockerd[15020]: time="2018-06-26T13:11:45.406433041-05:00" level=debug msg="Calling POST /v1.24/containers/e670b0ba3386/update"
Jun 26 13:11:45 dockerd[15020]: time="2018-06-26T13:11:45.407234982-05:00" level=debug msg="form data: {\"BlkioDeviceReadBps\":null,\"BlkioDeviceReadIOps\":
null,\"BlkioDeviceWriteBps\":null,\"BlkioDeviceWriteIOps\":null,\"BlkioWeight\":0,\"BlkioWeightDevice\":null,\"CgroupParent\":\"\",\"CpuCount\":0,\"CpuPercent\":0,\"
CpuPeriod\":0,\"CpuQuota\":0,\"CpuShares\":0,\"CpusetCpus\":\"2\",\"CpusetMems\":\"\",\"Devices\":null,\"DiskQuota\":0,\"IOMaximumBandwidth\":0,\"IOMaximumIOps\":0,\
"KernelMemory\":0,\"Memory\":0,\"MemoryReservation\":0,\"MemorySwap\":0,\"MemorySwappiness\":null,\"OomKillDisable\":null,\"PidsLimit\":0,\"RestartPolicy\":{\"Maximu
mRetryCount\":0,\"Name\":\"\"},\"Ulimits\":null}"
Jun 26 13:11:45 dockerd[15020]: time="2018-06-26T13:11:45.473638483-05:00" level=error msg="Handler for POST /v1.24/containers/e670b0ba3386/update returned
error: Cannot update container e670b0ba3386da5028f95a2234c2441ed44fad1f6c2399290257b8ce53526b44: rpc error: code = 13 desc = invalid header field value \"failed to w
rite a *:* rwm to devices.allow: write /sys/fs/cgroup/devices/docker/e670b0ba3386da5028f95a2234c2441ed44fad1f6c2399290257b8ce53526b44/devices.allow: invalid argument
\\n\""
Raised this issue.