CODEWITHSUNDEEP
dockerdocker-composeapparmor
kuzdogan
kuzdogan

Reputation: 835

Docker killing container "permission denied" due to AppArmor. Just why?

I am trying to kill containers I launched through docker-compose. Either by gracefully stopping (Ctrl+C) or by docker-compose down I encounter the following error:

ERROR: for <container-name>  cannot stop container: b60c1c4d886899504b...2a022e4d39429dc6ca6e4784afdd: Cannot kill container b60c1c4d886899504b...2a022e4d39429dc6ca6e4784afdd: unknown error after kill: runc did not terminate sucessfully: container_linux.go:388: signaling init process caused "permission denied"
: unknown

I am just looking for the answer WHY. I am trying to understand AppArmor better but understanding WHY I can't stop the containers before everything would help to understand what's going on.

I see that this is an error many people come across. 1 2 3 4 However, most of the answers suggest workarounds and no solutions. Even the explanatory answers like 1 dive directly into AppArmor and profiles. From docker documentation I see docker has a default AppArmor policy docker-default. I partly understand the concept but still don't get WHY I can't stop the containers through the user and the environment I've started them in.

If I try to wrap my questions:

Any feedback or explanations welcome. Thanks.

Upvotes: 5

Views: 4116

Answers (2)

Tommy Tremblay
Tommy Tremblay

Reputation: 11

I know this thread is old but since it's the first thing that pop in Google Search, I'll leave this here since this worked for me trying to update a docker container on Ubuntu 22.04, I had the same error (AppArmor)

sudo systemctl restart docker.socket docker.service
sudo docker-compose down

Cheers!

Upvotes: 1

kuzdogan
kuzdogan

Reputation: 835

I couldn't find the exact reason but came close. It seems there were conflicting docker installations on my Ubuntu 19.10 and this was causing this access control issue.

As stated here, I've removed the snap installation. As I already had another installation I didn't have to install it via another way.

sudo snap remove docker

Upvotes: 3

Related Questions