{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/20658","repository_url":"https://api.github.com/repos/docker/docker","labels_url":"https://api.github.com/repos/docker/docker/issues/20658/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/20658/comments","events_url":"https://api.github.com/repos/docker/docker/issues/20658/events","html_url":"https://github.com/docker/docker/issues/20658","id":136089310,"number":20658,"title":"setcap is no longer supported in Docker  1.10.0 ?","user":{"login":"Dan33l","id":10237275,"avatar_url":"https://avatars.githubusercontent.com/u/10237275?v=3","gravatar_id":"","url":"https://api.github.com/users/Dan33l","html_url":"https://github.com/Dan33l","followers_url":"https://api.github.com/users/Dan33l/followers","following_url":"https://api.github.com/users/Dan33l/following{/other_user}","gists_url":"https://api.github.com/users/Dan33l/gists{/gist_id}","starred_url":"https://api.github.com/users/Dan33l/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Dan33l/subscriptions","organizations_url":"https://api.github.com/users/Dan33l/orgs","repos_url":"https://api.github.com/users/Dan33l/repos","events_url":"https://api.github.com/users/Dan33l/events{/privacy}","received_events_url":"https://api.github.com/users/Dan33l/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2016-02-24T15:11:44Z","updated_at":"2016-03-15T16:37:10Z","closed_at":"2016-03-15T16:37:10Z","body":"With the following version of docker engine :\r\n\r\n```\r\n$ docker version\r\nClient:\r\n Version:      1.10.0\r\n API version:  1.22\r\n Go version:   go1.5.3\r\n Git commit:   590d5108\r\n Built:        Thu Feb  4 18:41:30 2016\r\n OS/Arch:      linux/amd64\r\n\r\nServe\r\n Version:      1.10.0\r\n API version:  1.22\r\n Go version:   go1.5.3\r\n Git commit:   590d5108\r\n Built:        Thu Feb  4 18:41:30 2016\r\n OS/Arch:      linux/amd64\r\n```\r\n\r\n```\r\n$ docker info\r\nContainers: 4\r\n Running: 0\r\n Paused: 0\r\n Stopped: 4\r\nImages: 3\r\nServer Version: 1.10.0\r\nStorage Driver: aufs\r\n Root Dir: /var/lib/docker/aufs\r\n Backing Filesystem: extfs\r\n Dirs: 10\r\n Dirperm1 Supported: true\r\nExecution Driver: native-0.2\r\nLogging Driver: json-file\r\nPlugins: \r\n Volume: local\r\n Network: null host bridge\r\nKernel Version: 4.2.0-27-generic\r\nOperating System: Ubuntu 15.10\r\nOSType: linux\r\nArchitecture: x86_64\r\nCPUs: 1\r\nTotal Memory: 488.8 MiB\r\nName: dockerbuild110\r\nID: PN7T:67UM:UGI3:XJEZ:VOPV:RVM7:W7XA:E2LH:T7KK:2EXB:J3VQ:62ZR\r\nWARNING: No swap limit support\r\n```\r\n\r\nI got this result \r\n\r\n```\r\n$ docker run registry110.lan:5000/wily:latest setcap cap_net_bind_service=+ep /bin/true\r\nFailed to set capabilities on file `/bin/true' (Invalid argument)\r\nThe value of the capability argument is not permitted for a file. Or the file is not a regular (non-symlink) file\r\n```\r\n\r\nThe expected result is like with the following version of docker engine :\r\n\r\n```\r\n$ docker version\r\nClient:\r\n Version:      1.9.1\r\n API version:  1.21\r\n Go version:   go1.4.2\r\n Git commit:   a34a1d5\r\n Built:        Fri Nov 20 13:16:54 UTC 2015\r\n OS/Arch:      linux/amd64\r\n\r\nServer:\r\n Version:      1.9.1\r\n API version:  1.21\r\n Go version:   go1.4.2\r\n Git commit:   a34a1d5\r\n Built:        Fri Nov 20 13:16:54 UTC 2015\r\n OS/Arch:      linux/amd64\r\n```\r\n```\r\n$ docker info\r\nContainers: 1\r\nImages: 11\r\nServer Version: 1.9.1\r\nStorage Driver: aufs\r\n Root Dir: /var/lib/docker/aufs\r\n Backing Filesystem: extfs\r\n Dirs: 13\r\n Dirperm1 Supported: true\r\nExecution Driver: native-0.2\r\nLogging Driver: json-file\r\nKernel Version: 3.19.0-42-generic\r\nOperating System: Ubuntu 15.04\r\nCPUs: 1\r\nTotal Memory: 489 MiB\r\nName: dockerbuild.lan\r\nID: NKBM:3MR6:IBLI:5IUA:7LW2:ZJVE:P2KU:SR56:57C2:AP3G:ERJL:ZMRL\r\nWARNING: No swap limit support\r\n```\r\n\r\n```\r\n$ docker run registry110.lan:5000/wily:latest setcap cap_net_bind_service=+ep /bin/true\r\nUnable to find image 'registry110.lan:5000/wily:latest' locally\r\nlatest: Pulling from wily\r\n5eb823f9c912: Pull complete \r\nDigest: sha256:8b29ed2dfb1eb71964794bd6834823b4731569c3e7e425046ebc0eefd564baaf\r\nStatus: Downloaded newer image for registry110.lan:5000/wily:latest\r\n```\r\n\r\n\r\nProvide additional info you think is important:\r\n\r\nI am running two virtual machines .\r\nWhere i am able to use setcap for the docker run is ubuntu vivid.\r\nWhere i am unable to use setcap for the docker run is ubuntu wily.\r\n\r\nOn a wily host i can use setcap.\r\n"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/196912448","html_url":"https://github.com/docker/docker/issues/20658#issuecomment-196912448","issue_url":"https://api.github.com/repos/docker/docker/issues/20658","id":196912448,"user":{"login":"Dan33l","id":10237275,"avatar_url":"https://avatars.githubusercontent.com/u/10237275?v=3","gravatar_id":"","url":"https://api.github.com/users/Dan33l","html_url":"https://github.com/Dan33l","followers_url":"https://api.github.com/users/Dan33l/followers","following_url":"https://api.github.com/users/Dan33l/following{/other_user}","gists_url":"https://api.github.com/users/Dan33l/gists{/gist_id}","starred_url":"https://api.github.com/users/Dan33l/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Dan33l/subscriptions","organizations_url":"https://api.github.com/users/Dan33l/orgs","repos_url":"https://api.github.com/users/Dan33l/repos","events_url":"https://api.github.com/users/Dan33l/events{/privacy}","received_events_url":"https://api.github.com/users/Dan33l/received_events","type":"User","site_admin":false},"created_at":"2016-03-15T16:37:10Z","updated_at":"2016-03-15T16:37:10Z","body":"doh ! You are right.\r\nThis setting is different between ubuntu 15.04 and 15.10.\r\nwith 15.04  , CONFIG_AUFS_XATTR=y. \r\nwith 15.10 , CONFIG_AUFS_XATTR is not set."}}