Nginx gives alerts about not being able to read from upstream server about docker-redmine HOT 12 CLOSED

@AKoetsier This could be something to do with your proxy configuration

from docker-redmine.

@sameersbn This happens within the nginx in the docker, not in my own nginx outside the docker or something like that. Strange thing is it only occurs on one of my workstations (ubuntu 14.10) and not on my servers (ubuntu 14.04).

from docker-redmine.

@AKoetsier do you by any chance have selinux enabled.

from docker-redmine.

@sameersbn No selinux.

from docker-redmine.

We see the same issue with nginx accessing a Unix socket in our docker containers (nginx + unicorn in the same container) on Ubuntu 14.10, but not Ubuntu 14.04. As a workaround, try disabling the AppArmor profile for docker via aa-disable /etc/apparmor.d/docker, then restart the docker container. Interestingly, aa-complain ... is not enough.

from docker-redmine.

@AKoetsier This might have something to do with 14.10 then. I have see similar issue while using containerized nginx (as a proxy) which talks to an upstream application. There it is a selinux issue. My quickfix there was to not run nginx containerized and then add the required selinux filters.

from docker-redmine.

Same issue on 14.04

from docker-redmine.

@vabue Make sure that iptables is enabled. When docker starts a container, it adds iptables rules for the port forwarding to function. This means that iptables is required to to enabled for this configuration to be effective.

from docker-redmine.

Iptables is ok. Disabling apparmor for docker helped.

from docker-redmine.

When I disable apparmor for docker like aa-disable /etc/apparmor.d/docker my containers do not start anymore:

Error response from daemon: Cannot start container database: set apparmor profile docker-default: no such file or directory FATA[0000] Error: failed to start one or more containers

What do I do?

from docker-redmine.

not sure what the issue is. can you read up on moby/moby#14396 to see if anything applies to your setup?

p.s. i used 14.04, with docker installed from official docker repos with apparmor, iptables, etc. enabled as default and have not seen this issue ever.

from docker-redmine.

i close this any subscriber can reopen if that still happens thanks to all

from docker-redmine.