Need help to run EdgeX using Docker (operation not permitted error)

[hzqhpz-universlink]

I keep getting "operation not permitted" for some services that I wanted to run. Thus they kept restarting. I have been running these on Linux Ubuntu 22.04 amd64. I have used kamakura, jakarta and levski.

Apparently, it working just fine in my arm64 device when I run the arm64 version.

[bnevis-i]

@hzqhpz-universlink You are trying to run the arm64 containers on x86_64. (look at the container names).

[hzqhpz-universlink]

My apologies for providing the wrong picture. The above is what I'm trying to run arm64 on my machine instead of the default x86_64. This new picture is when I ran the x86_64 version.

[bnevis-i]

I am somewhat at a loss. You seem to be running the no-security version. There should be very little stopping the containers from starting, especially the 3rd party ones like consul, redis. Portainer somehow still running. Do you have enough free disk space? Start clean with "docker system prune"?

[hzqhpz-universlink]

I have enough free disk space and already ran the mentioned command. Still can't do it. The Portainer is actually executed separately, not with the other docker-compose.

[farshidtz]

I assume you have installed the Docker engine with the snap and hitting a known issue.

See:
https://github.com/docker-snap/docker-snap#usage
https://bugs.launchpad.net/snapd/+bug/1908448

As a workaround, remove all instances of the following from your docker compose file:

    security_opt:
    - no-new-privileges:true

I don't know why that option is set and the implications of removing it. @bnevis-i any idea?

[bnevis-i]

The no-new-privileges option prevents SUID binaries from executing in the container's context. It prevents a non-root process from re-acquiring root privilege. It is a defense-in-depth option.

[hzqhpz-universlink]

Apparently true I installed Docker using Snap. I reinstalled them using APT, and I can now run EdgeX with no issue. Thank you for the help.

[cloudxxx8]

closing this discussion since the problem is resolved.