ChatGPT解决这个技术问题 Extra ChatGPT

docker entrypoint running bash script gets "permission denied"

I'm trying to dockerize my node.js app. When the container is built I want it to run a git clone and then start the node server. Therefore I put these operations in a .sh script. And run the script as a single command in the ENTRYPOINT:

FROM ubuntu:14.04

RUN apt-get update && apt-get install -y build-essential libssl-dev gcc curl npm git

#install gcc 4.9
RUN apt-get install -y software-properties-common python-software-properties
RUN add-apt-repository -y ppa:ubuntu-toolchain-r/test
RUN apt-get update
RUN apt-get install -y libstdc++-4.9-dev

#install newst nodejs
RUN curl -sL https://deb.nodesource.com/setup_4.x | sudo -E bash -
RUN apt-get install -y nodejs

RUN mkdir -p /usr/src/app
WORKDIR /usr/src/app

ADD package.json /usr/src/app/
RUN npm install

ADD docker-entrypoint.sh /usr/src/app/

EXPOSE 8080

ENTRYPOINT ["/usr/src/app/docker-entrypoint.sh"] 

My docker-entrypoint.sh looks like this:

git clone git@<repo>.git
git add remote upstream git@<upstream_repo>.git

/usr/bin/node server.js

After building this image and run:

docker run --env NODE_ENV=development -p 8080:8080 -t -i <image>

I'm getting:

docker: Error response from daemon: oci runtime error: exec: "/usr/src/app/docker-entrypoint.sh": permission denied.

I shell into the container and the permission of docker-entrypoint.sh is:

-rw-r--r-- 1 root root 292 Aug 10 18:41 docker-entrypoint.sh

three questions:

Does my bash script have wrong syntax? How do I change the permission of a bash file before adding it into an image? What's the best way to run multiple git commands in entrypoint without using a bash script?

Thanks.

We need to see the file permissions to be able to answer this question.
BTW, if this is a bash script, not a sh script, a .sh extension leaves a misleading impression about which interpreters can execute it. You might consider taking that out -- it's not conventional for UNIX commands to have extensions (you don't run ls.elf, for instance).
Can we exec a shell that way? wouldn't it need the bash prefix.
@Jean-FrançoisFabre, what exactly do you mean by your question? (I don't understand what "exec a shell that way" means -- what's "that way" in this context?)
Silly question, by the way -- are the script's permissions correct before you add them to the image?

C
Charles Duffy

"Permission denied" prevents your script from being invoked at all. Thus, the only syntax that could be possibly pertinent is that of the first line (the "shebang"), which should look like #!/usr/bin/env bash, or #!/bin/bash, or similar depending on your target's filesystem layout. Most likely the filesystem permissions not being set to allow execute. It's also possible that the shebang references something that isn't executable, but this is far less likely. Mooted by the ease of repairing the prior issues.

The simple reading of

docker: Error response from daemon: oci runtime error: exec: "/usr/src/app/docker-entrypoint.sh": permission denied.

...is that the script isn't marked executable.

RUN ["chmod", "+x", "/usr/src/app/docker-entrypoint.sh"]

will address this within the container. Alternately, you can ensure that the local copy referenced by the Dockerfile is executable, and then use COPY (which is explicitly documented to retain metadata).


I think you are right. I should use COPY instead. But it seems I still need to change the permission after COPYing the bash script.
@raupie, if you want to run a script off a mount point with the noexec flag, run bash yourscript instead of ./yourscript.
I don't undertand, when I run docker build the imtermediate container works fine. But when I do docker run, it throws such error. Seems like a magical intermediate container I have got.
Neither RUN ["chmod", "+x", "/usr/src/app/docker-entrypoint.sh"] nor RUN ["chmod", "a+x", "/usr/src/app/docker-entrypoint.sh"] did change the permissions in my docker image, it's still '-rw-r--r-- '
@niid, if you create a question with a Dockerfile that acts as a minimal reproducible example for the issue, feel free to @-notify me there.
S
Sami Start

An executable file needs to have permissions for execute set before you can execute it.

In your machine where you are building the docker image (not inside the docker image itself) try running:

ls -la path/to/directory

The first column of the output for your executable (in this case docker-entrypoint.sh) should have the executable bits set something like:

-rwxrwxr-x

If not then try:

chmod +x docker-entrypoint.sh

and then build your docker image again.

Docker uses it's own file system but it copies everything over (including permissions bits) from the source directories.


chmod +x docker-entrypoint.sh on tzhe host is actually the recommended solution, as it is much simpler than changing your Dockerfile.
This worked for me. I did not really understand why though xD. If you reader end up in this at some point, I would appreciate the reasons behind this.
if you have a posix compatible filesystems (i.e. you run macos or linux or some bsd) then you docker will copy the rights from the host. on windows, for example, you don't have those, so it will just add them.
S
Saurabhcdt

I faced same issue & it resolved by

ENTRYPOINT ["sh", "/docker-entrypoint.sh"]

For the Dockerfile in the original question it should be like:

ENTRYPOINT ["sh", "/usr/src/app/docker-entrypoint.sh"]

This is a workaround, but not a great one -- this interprets the script with sh, ignoring its shebang's specification of an interpreter; so if it uses #!/bin/bash, saying it wants to be interpreted with bash, that will be ignored and it'll be interpreted with sh instead, thus disallowing language features like [[ ]], arrays, etc.
I've used your approach and it worked. Maybe also dos2unix does the trick
This approach is the one that worked for me. I wonder what is the reason behind it.
thank you, save me hours upon hours of research!
@CharlesDuffy What would be right solution instead?
r
rumbarum

The problem is due to original file not having execute permission.

Check original file has permission.

run ls -al

If result get -rw-r--r-- ,

run
chmod +x docker-entrypoint.sh

before docker build!


A
Abd Abughazaleh

Remove Dot [.]

This problem take with me more than 3 hours finally, I just tried the problem was in removing dot from the end just.

problem was

docker run  -p 3000:80 --rm --name test-con test-app .

/usr/local/bin/docker-entrypoint.sh: 8: exec: .: Permission denied

just remove dot from the end of your command line :

docker run  -p 3000:80 --rm --name test-con test-app 

h
helvete

Grant execution rights to the file docker-entrypoint.sh

sudo chmod 775 docker-entrypoint.sh

B
BradChesney79

This is an old question asked two years prior to my answer, I am going to post what worked for me anyways.

In my working directory I have two files: Dockerfile & provision.sh

Dockerfile:

FROM centos:6.8

# put the script in the /root directory of the container
COPY provision.sh /root

# execute the script inside the container
RUN /root/provision.sh

EXPOSE 80

# Default command
CMD ["/bin/bash"]

provision.sh:

#!/usr/bin/env bash

yum upgrade

I was able to make the file in the docker container executable by setting the file outside the container as executable chmod 700 provision.sh then running docker build . .


O
OZZIE

This is a bit stupid maybe but the error message I got was Permission denied and it sent me spiralling down in a very wrong direction to attempt to solve it. (Here for example)

I haven't even added any bash script myself, I think one is added by nodejs image which I use.

FROM node:14.9.0

I was wrongly running to expose/connect the port on my local:

docker run -p 80:80 [name] . # this is wrong!

which gives

/usr/local/bin/docker-entrypoint.sh: 8: exec: .: Permission denied

But you shouldn't even have a dot in the end, it was added to documentation of another projects docker image by misstake. You should simply run:

docker run -p 80:80 [name]

I like Docker a lot but it's sad it has so many gotchas like this and not always very clear error messages...


b
betontalpfa

If you do not use DockerFile, you can simply add permission as command line argument of the bash:

docker run -t <image>  /bin/bash -c "chmod +x /usr/src/app/docker-entrypoint.sh; /usr/src/app/docker-entrypoint.sh"

J
James Bond

If you still get Permission denied errors when you try to run your script in the docker's entrypoint, just try DO NOT use the shell form of the entrypoint:

Instead of: ENTRYPOINT ./bin/watcher write ENTRYPOINT ["./bin/watcher"]:

https://docs.docker.com/engine/reference/builder/#entrypoint

https://i.stack.imgur.com/TOtR7.png