could not start docker on imx-8 plus board.

[simonkbaby]

Hello Tea,

I am trying to install docker and test some conatiners. When i reboot the system I could see docker daemon started automatically. When I execute docker command (example, docker info) it stuck for 2-3 minutes and then provide the output. Looks like I have to always type a docker command to start the daemon. Below are some of the logs.

I am using NXP i.MX Release Distro 5.15-kirkstone imx8mpevk ttymxc1

root@imx8mpevk:~# systemctl status docker
* docker.service - Docker Application Container Engine
Loaded: loaded (/lib/systemd/system/docker.service; enabled; vendor preset: disabled)
Active: inactive (dead)
TriggeredBy: * docker.socket
Docs: https://docs.docker.com

root@imx8mpevk:~# docker info

waiting for long time 1 to 3 minutes...

........
Client:
Context: default
Debug Mode: false

Server:
Containers: 7
Running: 1
Paused: 0
Stopped: 6
Images: 7
Server Version: 20.10.12-ce
Storage Driver: overlay2
Backing Filesystem: extfs
Supports d_type: true
Native Overlay Diff: true
userxattr: false
Logging Driver: json-file
Cgroup Driver: cgroupfs
Cgroup Version: 1
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
Swarm: inactive
Runtimes: runc io.containerd.runc.v2 io.containerd.runtime.v1.linux
Default Runtime: runc
Init Binary: docker-init
containerd version: d12516713c315ea9e651eb1df89cf32ff7c8137c.m
runc version: v1.1.0-5-gb9460f26-dirty
init version: b9f42a0-dirty
Kernel Version: 5.15.32-rt39-lts-next+gfca3f9c39896
Operating System: NXP i.MX Release Distro 5.15-kirkstone (kirkstone)
OSType: linux
Architecture: aarch64
CPUs: 4
Total Memory: 5.48GiB
Name: imx8mpevk
ID: EYAY:VBTL:42NI:RJDN:ETHD:GQ2C:F5YR:7WX5:25HN:DEJB:YLSN:NPHB
Docker Root Dir: /var/lib/docker
Debug Mode: false
Registry: https://index.docker.io/v1/
Labels:
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: false

Also getting the below logs on the console.

139.467842] IPv6: ADDRCONF(NETDEV_CHANGE): veth9443181: link becomes ready
[ 139.467940] docker0: port 2(veth9443181) entered blocking state
[ 139.467949] docker0: port 2(veth9443181) entered forwarding state
[ 139.684852] docker0: port 2(veth9443181) entered disabled state
[ 139.687849] veth3582799: renamed from eth0
[ 139.756820] docker0: port 2(veth9443181) entered disabled state
[ 139.793898] device veth9443181 left promiscuous mode
[ 139.793941] docker0: port 2(veth9443181) entered disabled state
[ 146.068174] docker0: port 2(veth1f90ee5) entered blocking state
[ 146.068215] docker0: port 2(veth1f90ee5) entered disabled state
[ 146.068634] device veth1f90ee5 entered promiscuous mode
[ 146.068701] kauditd_printk_skb: 14 callbacks suppressed
[ 146.068705] audit: type=1700 audit(1677632357.451:130): dev=veth1f90ee5 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
[ 146.072043] audit: type=1300 audit(1677632357.451:130): arch=c00000b7 syscall=206 success=yes exit=40 a0=e a1=400135e930 a2=28 a3=0 items=0 ppid=1 pid=450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=kernel key=(nu

[simonkbaby]

Here is the manifest file (all the layers info) I used to build the image.

https://source.codeaurora.org/external/imx/imx-manifest/tree/imx-5.15.32-2.0.0.xml?h=imx-linux-kirks....

some of the logs are below.

[ 846.305868] audit: type=1325 audit(1677633564.714:237): table=nat family=2 entries=16 op=xt_replace pid=10018 subj=kernel comm="iptables"
[ 846.804381] eth0: renamed from veth1f601ca
[ 846.810522] IPv6: ADDRCONF(NETDEV_CHANGE): veth8ca26d5: link becomes ready
[ 846.810617] docker0: port 2(veth8ca26d5) entered blocking state
[ 846.810626] docker0: port 2(veth8ca26d5) entered forwarding state
[ 847.005202] veth1f601ca: renamed from eth0
[ 847.017819] docker0: port 2(veth8ca26d5) entered disabled state
[ 847.074804] docker0: port 2(veth8ca26d5) entered disabled state
[ 847.104876] device veth8ca26d5 left promiscuous mode
[ 847.104920] docker0: port 2(veth8ca26d5) entered disabled state
[ 906.988622] docker0: port 2(veth7cbd964) entered blocking state
[ 906.988674] docker0: port 2(veth7cbd964) entered disabled state
[ 906.989238] device veth7cbd964 entered promiscuous mode
[ 906.989338] kauditd_printk_skb: 14 callbacks suppressed
[ 906.989347] audit: type=1700 audit(1677633625.400:242): dev=veth7cbd964 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
[ 906.994019] audit: type=1300 audit(1677633625.400:242): arch=c00000b7 syscall=206 success=yes exit=40 a0=e a1=4001240540 a2=28 a3=0 items=0 ppid=1 pid=431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=kernel key=(null)
[ 906.995365] audit: type=1327 audit(1677633625.400:242): proctitle=2F7573722F62696E2F646F636B657264002D480066643A2F2F
[ 907.054995] audit: type=1325 audit(1677633625.466:243): table=nat family=2 entries=15 op=xt_replace pid=10726 subj=kernel comm="iptables"
[ 907.055017] audit: type=1300 audit(1677633625.466:243): arch=c00000b7 syscall=208 success=yes exit=0 a0=4 a1=0 a2=40 a3=aaab23f2de70 items=0 ppid=431 pid=10726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=kernel key=(null)
[ 907.055027] audit: type=1327 audit(1677633625.466:243): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100444F434B4552002D7000746370002D6400302F30002D2D64706F72740035303030002D6A00444E4154002D2D746F2D64657374696E6174696F6E003137322E31372E302E333A353030300000002D6900646F636B657230
[ 907.062079] audit: type=1325 audit(1677633625.473:244): table=filter family=2 entries=25 op=xt_replace pid=10728 subj=kernel comm="iptables"
[ 907.062099] audit: type=1300 audit(1677633625.473:244): arch=c00000b7 syscall=208 success=yes exit=0 a0=4 a1=0 a2=40 a3=aaaad6156820 items=0 ppid=431 pid=10728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=kernel key=(null)
[ 907.062110] audit: type=1327 audit(1677633625.473:244): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45520000002D6900646F636B657230002D6F00646F636B657230002D7000746370002D64003137322E31372E302E33002D2D64706F72740035303030002D6A00414343455054
[ 907.069905] audit: type=1325 audit(1677633625.481:245): table=nat family=2 entries=16 op=xt_replace pid=10730 subj=kernel comm="iptables"
[ 907.568104] eth0: renamed from vethd45e94c
[ 907.576386] IPv6: ADDRCONF(NETDEV_CHANGE): veth7cbd964: link becomes ready
[ 907.576483] docker0: port 2(veth7cbd964) entered blocking state[ 846.305868] audit: type=1325 audit(1677633564.714:237): table=nat family=2 entries=16 op=xt_replace pid=10018 subj=kernel comm="iptables"
[ 846.804381] eth0: renamed from veth1f601ca
[ 846.810522] IPv6: ADDRCONF(NETDEV_CHANGE): veth8ca26d5: link becomes ready
[ 846.810617] docker0: port 2(veth8ca26d5) entered blocking state
[ 846.810626] docker0: port 2(veth8ca26d5) entered forwarding state
[ 847.005202] veth1f601ca: renamed from eth0
[ 847.017819] docker0: port 2(veth8ca26d5) entered disabled state
[ 847.074804] docker0: port 2(veth8ca26d5) entered disabled state
[ 847.104876] device veth8ca26d5 left promiscuous mode
[ 847.104920] docker0: port 2(veth8ca26d5) entered disabled state
[ 906.988622] docker0: port 2(veth7cbd964) entered blocking state
[ 906.988674] docker0: port 2(veth7cbd964) entered disabled state
[ 906.989238] device veth7cbd964 entered promiscuous mode
[ 906.989338] kauditd_printk_skb: 14 callbacks suppressed
[ 906.989347] audit: type=1700 audit(1677633625.400:242): dev=veth7cbd964 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
[ 906.994019] audit: type=1300 audit(1677633625.400:242): arch=c00000b7 syscall=206 success=yes exit=40 a0=e a1=4001240540 a2=28 a3=0 items=0 ppid=1 pid=431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=kernel key=(null)
[ 906.995365] audit: type=1327 audit(1677633625.400:242): proctitle=2F7573722F62696E2F646F636B657264002D480066643A2F2F
[ 907.054995] audit: type=1325 audit(1677633625.466:243): table=nat family=2 entries=15 op=xt_replace pid=10726 subj=kernel comm="iptables"
[ 907.055017] audit: type=1300 audit(1677633625.466:243): arch=c00000b7 syscall=208 success=yes exit=0 a0=4 a1=0 a2=40 a3=aaab23f2de70 items=0 ppid=431 pid=10726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=kernel key=(null)
[ 907.055027] audit: type=1327 audit(1677633625.466:243): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100444F434B4552002D7000746370002D6400302F30002D2D64706F72740035303030002D6A00444E4154002D2D746F2D64657374696E6174696F6E003137322E31372E302E333A353030300000002D6900646F636B657230
[ 907.062079] audit: type=1325 audit(1677633625.473:244): table=filter family=2 entries=25 op=xt_replace pid=10728 subj=kernel comm="iptables"
[ 907.062099] audit: type=1300 audit(1677633625.473:244): arch=c00000b7 syscall=208 success=yes exit=0 a0=4 a1=0 a2=40 a3=aaaad6156820 items=0 ppid=431 pid=10728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=kernel key=(null)
[ 907.062110] audit: type=1327 audit(1677633625.473:244): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45520000002D6900646F636B657230002D6F00646F636B657230002D7000746370002D64003137322E31372E302E33002D2D64706F72740035303030002D6A00414343455054
[ 907.069905] audit: type=1325 audit(1677633625.481:245): table=nat family=2 entries=16 op=xt_replace pid=10730 subj=kernel comm="iptables"
[ 907.568104] eth0: renamed from vethd45e94c
[ 907.576386] IPv6: ADDRCONF(NETDEV_CHANGE): veth7cbd964: link becomes ready
[ 907.576483] docker0: port 2(veth7cbd964) entered blocking state

Regards

SImonurora.org/external/imx/imx-manifest/tree/imx-5.15.32-2.0.0.xml?h=imx-linux-kirkstone

[Zhiming_Liu]

The first boot of docker need time, this is normal.

[simonkbaby]

Hello Miller ,

docker is not starting after every boot. It starts only if I type any docker command and wait for 2 to 3 minutes (to finish the command to execute) . Also I see lots of audit message and port going to blocking, disabled and forward state.

Regards

simon

[Zhiming_Liu]

This is normal behaviour, we don't have the auto-startup script for docker.It needs start by user manunally.