Docker安装Jenkins报错

蔚落 2022-12-03 08:37 221阅读 0赞

`创建Jenkins容器`

docker run -d --name jenkins -p 8040:8080 -p 50000:50000 -v /data/jenkins_home:/var/jenkins_home jenkins:latest

### `问题描述` ###

`无法启动jenkins`

`查看错误原因`

docker logs jenkins

`能看到提示权限不足：Permission denied`

touch: cannot touch '/var/jenkins_home/copy_reference_file.log': Permission denied
    Can not write to /var/jenkins_home/copy_reference_file.log. Wrong volume permissions?

### `解决方法` ###

由于jenkins启动之后内部用户默认为 jenkins，但是外部Linux系统中没有包含该用户，且一般创建好的数据卷权限为 root
    
    解决：修改启动命令，增加 "-u 0"，使用外部传入用户的方式，来覆盖内部默认的用户
    docker run -d --name jenkins -p 8040:8080 -p 50001:50001 -u 0 -v /data/jenkins_home:/var/jenkins_home jenkins:latest

`-u 0：表示root用户，root用户的uid是0`

--------------------

`若使用以上方法还是提示权限不足：Permission denied`

检查一下selinux的状态，开启的情况下会导致一些服务安装、使用不成功

`查看selinux状态：sestatus`

[root@localhost ~]# sestatus  
    SELinux status:                 enabled  
    SELinuxfs mount:                /sys/fs/selinux  
    SELinux root directory:         /etc/selinux  
    Loaded policy name:             targeted  
    Current mode:                   enforcing  
    Mode from config file:          enforcing  
    Policy MLS status:              enabled  
    Policy deny_unknown status:     allowed  
    Max kernel policy version:      28

`临时关闭selinux`

setenforce 0

`永久关闭selinux`

修改配置文件 /etc/selinux/config，将其中SELINUX设置为disabled
    
    [root@localhost ~]# cat /etc/selinux/config   
       
    # This file controls the state of SELinux on the system.  
    # SELINUX= can take one of these three values:  
    #     enforcing - SELinux security policy is enforced.  
    #     permissive - SELinux prints warnings instead of enforcing.  
    #     disabled - No SELinux policy is loaded.  
    #SELINUX=enforcing  
    SELINUX=disabled  
    # SELINUXTYPE= can take one of three two values:  
    #     targeted - Targeted processes are protected,  
    #     minimum - Modification of targeted policy. Only selected processes are protected.   
    #     mls - Multi Level Security protection.  
    SELINUXTYPE=targeted