我正在从jenkins的官方docker容器中运行jenkins。而且我dockerfile在https://docs.docker.com/engine/installation/linux/debian/上具有以下指示
FROM jenkins:2.32.1
# install docker inside this container
USER root
# Install Docker inside Jenkins
RUN apt-get update
RUN apt-get purge "docker.io*"
RUN apt-get update
RUN apt-get install -y apt-transport-https ca-certificates gnupg2
RUN apt-key adv \
--keyserver hkp://ha.pool.sks-keyservers.net:80 \
--recv-keys 58118E89F3A912897C070ADBF76221572C52609D
RUN echo "deb https://apt.dockerproject.org/repo debian-jessie main" > /etc/apt/sources.list.d/docker.list
RUN apt-get update
RUN apt-cache policy docker-engine
RUN apt-get update
RUN apt-get install -y docker-engine
RUN gpasswd -a jenkins docker
USER jenkins
然后我执行以下操作：
sudo docker service start在容器内以bash运行这是我得到的：
root@1e0f4b325d58:/# sudo service docker start
mount: permission denied
rmdir: failed to remove ‘cpu’: Read-only file system
mount: permission denied
rmdir: failed to remove ‘cpuacct’: Read-only file system
mount: permission denied
rmdir: failed to remove ‘net_cls’: Read-only file system
mount: permission denied
rmdir: failed to remove ‘net_prio’: Read-only file system
/etc/init.d/docker: 96: ulimit: error setting limit (Operation not permitted)
如果要在docker内部运行docker，则需要将该容器作为特权容器运行。
docker run --privileged your_image:tag
您还需要谨慎使用iptables和App Armour，但这在稍作修改后仍然可以使用。
另一种方法是授予对容器内的docker守护进程的访问，例如（2）：
docker run -v /var/run/docker.sock:/var/run/docker.sock your_image:tag
参考：
1 https://blog.docker.com/2013/09/docker-can-now-run-within-docker/
2 https://jpetazzo.github.io/2015/09/03/do-not-use-docker-in-docker-for-ci/
本文收集自互联网，转载请注明来源。
如有侵权，请联系[email protected] 删除。
我来说两句