Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Docker Engine does not start on Ubuntu 22.04 due to iptables issues #47998

Open
spirillen opened this issue Jun 16, 2024 · 3 comments
Open

Docker Engine does not start on Ubuntu 22.04 due to iptables issues #47998

spirillen opened this issue Jun 16, 2024 · 3 comments
Labels
kind/bug Bugs are bugs. The cause may or may not be known at triage time so debugging may be needed. status/0-triage

Comments

@spirillen
Copy link

Description

Some time ago I updated, I did a usual system update and after that, docker refuses to start.

For some reason, It can no longer recognize an existing bridge

Reproduce

No longer recalls the process for when it started, beside the update process.

See log output of dockerd -D below.

Expected behavior

Docker can recognize it's own network bridge

docker version

lient: Docker Engine - Community
Version:           26.1.4
API version:       1.45
Go version:        go1.21.11
Git commit:        5650f9b
Built:             Wed Jun  5 11:28:57 2024
OS/Arch:           linux/amd64
Context:           default
Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?

docker info

spirillen@ns3109441:/opt/youtrack$ sudo docker info
Client: Docker Engine - Community
Version:    26.1.4
Context:    default
Debug Mode: false
Plugins:
buildx: Docker Buildx (Docker Inc.)
Version:  v0.14.1
Path:     /usr/libexec/docker/cli-plugins/docker-buildx
compose: Docker Compose (Docker Inc.)
Version:  v2.27.1
Path:     /usr/libexec/docker/cli-plugins/docker-compose

Server:
ERROR: Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?
errors pretty printing info

Additional Info

sudo dockerd -D
INFO[2024-06-15T23:57:34.767730977Z] Starting up                                  
DEBU[2024-06-15T23:57:34.768194411Z] Listener created for HTTP on unix (/var/run/docker.sock) 
INFO[2024-06-15T23:57:34.768542499Z] detected 127.0.0.53 nameserver, assuming systemd-resolved, so using resolv.conf: /run/systemd/resolve/resolv.conf 
DEBU[2024-06-15T23:57:34.776403422Z] Golang's threads limit set to 227070         
DEBU[2024-06-15T23:57:34.776755420Z] metrics API listening on /var/run/docker/metrics.sock 
DEBU[2024-06-15T23:57:34.778426179Z] Using default logging driver json-file       
DEBU[2024-06-15T23:57:34.778552109Z] No quota support for local volumes in /var/lib/docker/volumes: Filesystem does not support, or has not enabled quotas 
DEBU[2024-06-15T23:57:34.778591605Z] processing event stream                       module=libcontainerd namespace=plugins.moby
DEBU[2024-06-15T23:57:34.779130321Z] [graphdriver] priority list: [overlay2 fuse-overlayfs btrfs zfs vfs] 
DEBU[2024-06-15T23:57:34.780850286Z] successfully detected metacopy status         storage-driver=overlay2 usingMetacopy=false
DEBU[2024-06-15T23:57:34.781471362Z] backingFs=extfs, projectQuotaSupported=false, usingMetacopy=false, indexOff="index=off,", userxattr=""  storage-driver=overlay2
INFO[2024-06-15T23:57:34.781482190Z] [graphdriver] using prior storage driver: overlay2 
DEBU[2024-06-15T23:57:34.781505658Z] Initialized graph driver overlay2            
DEBU[2024-06-15T23:57:34.783086519Z] Max Concurrent Downloads: 3                  
DEBU[2024-06-15T23:57:34.783095638Z] Max Concurrent Uploads: 5                    
DEBU[2024-06-15T23:57:34.783101850Z] Max Download Attempts: 5                     
INFO[2024-06-15T23:57:34.783141148Z] Loading containers: start.                   
DEBU[2024-06-15T23:57:34.783256993Z] processing event stream                       module=libcontainerd namespace=moby
DEBU[2024-06-15T23:57:34.784104380Z] loaded container                              container=1662630e8421b54e88b2ef7f9b98bf3f2d150df51541087f66e278a236528c36 paused=false running=false
DEBU[2024-06-15T23:57:34.784251840Z] loaded container                              container=e33f2d7ab6a0abaa0cb54864d1a12a342abdbc722ab23135ff9ddda92ea2caec paused=false running=false
DEBU[2024-06-15T23:57:34.786170635Z] restoring container                           container=e33f2d7ab6a0abaa0cb54864d1a12a342abdbc722ab23135ff9ddda92ea2caec paused=false restarting=false running=false
DEBU[2024-06-15T23:57:34.786231696Z] restoring container                           container=1662630e8421b54e88b2ef7f9b98bf3f2d150df51541087f66e278a236528c36 paused=false restarting=false running=false
DEBU[2024-06-15T23:57:34.786566903Z] done restoring container                      container=1662630e8421b54e88b2ef7f9b98bf3f2d150df51541087f66e278a236528c36 paused=false restarting=false running=false
DEBU[2024-06-15T23:57:34.786571549Z] done restoring container                      container=e33f2d7ab6a0abaa0cb54864d1a12a342abdbc722ab23135ff9ddda92ea2caec paused=false restarting=false running=false
DEBU[2024-06-15T23:57:34.786618014Z] Option DefaultDriver: bridge                 
DEBU[2024-06-15T23:57:34.786628015Z] Option DefaultNetwork: bridge                
DEBU[2024-06-15T23:57:34.786634061Z] Network Control Plane MTU: 1500              
DEBU[2024-06-15T23:57:34.790506740Z] /usr/sbin/iptables, [--wait -t filter -C FORWARD -j DOCKER-ISOLATION] 
DEBU[2024-06-15T23:57:34.791482356Z] /usr/sbin/iptables, [--wait -t nat -D PREROUTING -m addrtype --dst-type LOCAL -j DOCKER] 
DEBU[2024-06-15T23:57:34.792590639Z] /usr/sbin/iptables, [--wait -t nat -D OUTPUT -m addrtype --dst-type LOCAL ! --dst 127.0.0.0/8 -j DOCKER] 
DEBU[2024-06-15T23:57:34.860065928Z] /usr/sbin/iptables, [--wait -t nat -D OUTPUT -m addrtype --dst-type LOCAL -j DOCKER] 
DEBU[2024-06-15T23:57:34.863664393Z] /usr/sbin/iptables, [--wait -t nat -D PREROUTING] 
DEBU[2024-06-15T23:57:34.866563470Z] /usr/sbin/iptables, [--wait -t nat -D OUTPUT] 
DEBU[2024-06-15T23:57:34.869517897Z] /usr/sbin/iptables, [--wait -t nat -F DOCKER] 
DEBU[2024-06-15T23:57:34.872344247Z] /usr/sbin/iptables, [--wait -t nat -X DOCKER] 
DEBU[2024-06-15T23:57:34.927978576Z] /usr/sbin/iptables, [--wait -t filter -F DOCKER] 
DEBU[2024-06-15T23:57:34.931083160Z] /usr/sbin/iptables, [--wait -t filter -X DOCKER] 
DEBU[2024-06-15T23:57:34.972093544Z] /usr/sbin/iptables, [--wait -t filter -F DOCKER-ISOLATION-STAGE-1] 
DEBU[2024-06-15T23:57:34.975175666Z] /usr/sbin/iptables, [--wait -t filter -X DOCKER-ISOLATION-STAGE-1] 
DEBU[2024-06-15T23:57:35.000584908Z] /usr/sbin/iptables, [--wait -t filter -F DOCKER-ISOLATION-STAGE-2] 
DEBU[2024-06-15T23:57:35.003653833Z] /usr/sbin/iptables, [--wait -t filter -X DOCKER-ISOLATION-STAGE-2] 
DEBU[2024-06-15T23:57:35.048085258Z] /usr/sbin/iptables, [--wait -t filter -F DOCKER-ISOLATION] 
DEBU[2024-06-15T23:57:35.051367725Z] /usr/sbin/iptables, [--wait -t filter -X DOCKER-ISOLATION] 
DEBU[2024-06-15T23:57:35.054220664Z] /usr/sbin/iptables, [--wait -t nat -n -L DOCKER] 
DEBU[2024-06-15T23:57:35.057336392Z] /usr/sbin/iptables, [--wait -t nat -N DOCKER] 
DEBU[2024-06-15T23:57:35.060270482Z] /usr/sbin/iptables, [--wait -t filter -n -L DOCKER] 
DEBU[2024-06-15T23:57:35.063481984Z] /usr/sbin/iptables, [--wait -t filter -n -L DOCKER-ISOLATION-STAGE-1] 
DEBU[2024-06-15T23:57:35.066387736Z] /usr/sbin/iptables, [--wait -t filter -n -L DOCKER-ISOLATION-STAGE-2] 
DEBU[2024-06-15T23:57:35.069227042Z] /usr/sbin/iptables, [--wait -t filter -N DOCKER-ISOLATION-STAGE-2] 
DEBU[2024-06-15T23:57:35.071750338Z] /usr/sbin/iptables, [--wait -t filter -C DOCKER-ISOLATION-STAGE-1 -j RETURN] 
DEBU[2024-06-15T23:57:35.074452054Z] /usr/sbin/iptables, [--wait -A DOCKER-ISOLATION-STAGE-1 -j RETURN] 
DEBU[2024-06-15T23:57:35.077104858Z] /usr/sbin/iptables, [--wait -t filter -C DOCKER-ISOLATION-STAGE-2 -j RETURN] 
DEBU[2024-06-15T23:57:35.079750459Z] /usr/sbin/iptables, [--wait -A DOCKER-ISOLATION-STAGE-2 -j RETURN] 
DEBU[2024-06-15T23:57:35.089751283Z] /usr/sbin/iptables, [--wait -t nat -C POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE] 
DEBU[2024-06-15T23:57:35.092301438Z] /usr/sbin/iptables, [--wait -t nat -C DOCKER -i docker0 -j RETURN] 
DEBU[2024-06-15T23:57:35.094664827Z] /usr/sbin/iptables, [--wait -t nat -I DOCKER -i docker0 -j RETURN] 
DEBU[2024-06-15T23:57:35.096962010Z] /usr/sbin/iptables, [--wait -t nat -C POSTROUTING -m addrtype --src-type LOCAL -o docker0 -j MASQUERADE] 
DEBU[2024-06-15T23:57:35.099585576Z] /usr/sbin/iptables, [--wait -t filter -C FORWARD -i docker0 -o docker0 -j DROP] 
DEBU[2024-06-15T23:57:35.102275865Z] /usr/sbin/iptables, [--wait -t filter -C FORWARD -i docker0 -o docker0 -j ACCEPT] 
DEBU[2024-06-15T23:57:35.105037766Z] /usr/sbin/iptables, [--wait -t filter -C FORWARD -i docker0 ! -o docker0 -j ACCEPT] 
DEBU[2024-06-15T23:57:35.107862423Z] /usr/sbin/iptables, [--wait -t nat -C PREROUTING -m addrtype --dst-type LOCAL -j DOCKER] 
DEBU[2024-06-15T23:57:35.110394839Z] /usr/sbin/iptables, [--wait -t nat -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER] 
DEBU[2024-06-15T23:57:35.112868810Z] /usr/sbin/iptables, [--wait -t nat -C OUTPUT -m addrtype --dst-type LOCAL -j DOCKER ! --dst 127.0.0.0/8] 
DEBU[2024-06-15T23:57:35.115336321Z] /usr/sbin/iptables, [--wait -t nat -A OUTPUT -m addrtype --dst-type LOCAL -j DOCKER ! --dst 127.0.0.0/8] 
DEBU[2024-06-15T23:57:35.117785762Z] /usr/sbin/iptables, [--wait -t filter -C FORWARD -o docker0 -j DOCKER] 
DEBU[2024-06-15T23:57:35.120480292Z] /usr/sbin/iptables, [--wait -t filter -C FORWARD -o docker0 -j DOCKER] 
DEBU[2024-06-15T23:57:35.123125047Z] /usr/sbin/iptables, [--wait -t filter -C FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT] 
DEBU[2024-06-15T23:57:35.125695880Z] /usr/sbin/iptables, [--wait -t filter -C FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT] 
DEBU[2024-06-15T23:57:35.128444317Z] /usr/sbin/iptables, [--wait -t filter -C FORWARD -j DOCKER-ISOLATION-STAGE-1] 
DEBU[2024-06-15T23:57:35.130626628Z] /usr/sbin/iptables, [--wait -D FORWARD -j DOCKER-ISOLATION-STAGE-1] 
DEBU[2024-06-15T23:57:35.132818126Z] /usr/sbin/iptables, [--wait -I FORWARD -j DOCKER-ISOLATION-STAGE-1] 
DEBU[2024-06-15T23:57:35.134864438Z] /usr/sbin/iptables, [--wait -t filter -C DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2] 
DEBU[2024-06-15T23:57:35.137199849Z] /usr/sbin/iptables, [--wait -t filter -I DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2] 
DEBU[2024-06-15T23:57:35.139340347Z] /usr/sbin/iptables, [--wait -t filter -C DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP] 
DEBU[2024-06-15T23:57:35.141610144Z] /usr/sbin/iptables, [--wait -t filter -I DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP] 
DEBU[2024-06-15T23:57:35.143929117Z] Network (ca495b7) restored                   
INFO[2024-06-15T23:57:35.148785913Z] Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address 
DEBU[2024-06-15T23:57:35.148842271Z] Allocating IPv4 pools for network bridge (e3c15033ce78fef18e55e1572fa250de9d5c7d623debd25517210cc9f37dc3cf) 
DEBU[2024-06-15T23:57:35.148858879Z] RequestPool(LocalDefault, 172.17.0.0/16, , _, false)
DEBU[2024-06-15T23:57:35.148902196Z] RequestAddress(LocalDefault/172.17.0.0/16, 172.17.0.1, map[RequestAddressType:com.docker.network.gateway])
DEBU[2024-06-15T23:57:35.148939925Z] Request address PoolID:172.17.0.0/16 Bits: 65536, Unselected: 65534, Sequence: (0x80000000, 1)->(0x0, 2046)->(0x1, 1)->end Curr:0 Serial:false PrefAddress:172.17.0.1
DEBU[2024-06-15T23:57:35.149063108Z] releasing IPv4 pools from network bridge (e3c15033ce78fef18e55e1572fa250de9d5c7d623debd25517210cc9f37dc3cf)
DEBU[2024-06-15T23:57:35.149084436Z] ReleaseAddress(LocalDefault/172.17.0.0/16, 172.17.0.1)
DEBU[2024-06-15T23:57:35.149111509Z] Released address Address:172.17.0.1 Sequence:Bits: 65536, Unselected: 65534, Sequence: (0x80000000, 1)->(0x0, 2046)->(0x1, 1)->end Curr:0
DEBU[2024-06-15T23:57:35.149129027Z] ReleasePool(LocalDefault/172.17.0.0/16)
DEBU[2024-06-15T23:57:35.149159549Z] daemon configured with a 15 seconds minimum shutdown timeout
DEBU[2024-06-15T23:57:35.149183618Z] start clean shutdown of all containers with a 15 seconds timeout...
DEBU[2024-06-15T23:57:35.150120897Z] Unix socket /var/run/docker/libnetwork/e671e8f88020.sock was closed. The external key listener will stop.
DEBU[2024-06-15T23:57:35.150628199Z] Cleaning up old mountid : start.
INFO[2024-06-15T23:57:35.150685373Z] stopping event stream following graceful shutdown  error="<nil>" module=libcontainerd namespace=moby
DEBU[2024-06-15T23:57:35.151002424Z] Cleaning up old mountid : done.
failed to start daemon: Error initializing network controller: error creating default "bridge" network: cannot create network e3c15033ce78fef18e55e1572fa250de9d5c7d623debd25517210cc9f37dc3cf (docker0): conflicts with network ca495b73f0d5180761e35cfab4e58571671bf1bb1eb1c66e681b7fbac426d96f (docker0): networks have same bridge name
INFO[2024-06-15T23:57:35.151346244Z] stopping event stream following graceful shutdown  error="context canceled" module=libcontainerd namespace=plugins.moby
@spirillen spirillen added kind/bug Bugs are bugs. The cause may or may not be known at triage time so debugging may be needed. status/0-triage labels Jun 16, 2024
@spirillen
Copy link
Author

PS: Why do you still uses iptables commands? it have been deprecated for years.

@Karthik0521

This comment was marked as spam.

Sign in to view
@spirillen
Copy link
Author

❓

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
kind/bug Bugs are bugs. The cause may or may not be known at triage time so debugging may be needed. status/0-triage
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@spirillen @Karthik0521