Plugin scalr-auth breaks Docker client

Eugene Brodsky's Avatar

Eugene Brodsky

23 Mar, 2017 05:43 PM

On 2 of my hosts since last night, I can't run any Docker client commands (i.e. docker ps). all commands fail with:

Error response from daemon: plugin scalr-auth failed with error: Post http://%2Fvar%2Frun%2Fscalr_docker_authz.sock/AuthZPlugin.AuthZReq: dial unix /var/run/scalr_docker_authz.sock: connect: connection refused

The daemon seems to be still running as I can access containers.
Restarting scalarizr doesn't help.

I'm not sure how to get around the issue. Please assist, this is fairly urgent.

  • Docker v1.12.6
  • Ubuntu 16.04

Thanks!

  1. 1 Posted by Eugene Brodsky on 23 Mar, 2017 05:45 PM

    Eugene Brodsky's Avatar

    Also, on all of my Scalr hosts, the system journal is flooded with:

    Unable to connect to plugin: /var/run/scalr_docker_authz.sock/AuthZPlugin.AuthZReq: Post http://%2Fvar%2Frun%2Fscalr_docker_authz.sock/AuthZPlugin.AuthZReq: dial unix /var/run/scalr_docker_authz.sock: connect: connection refused, retrying in 1s
    
  2. Support Staff 2 Posted by Marat Komarov on 23 Mar, 2017 06:31 PM

    Marat Komarov's Avatar

    Please delete scalr-auth from authorization-plugins in /etc/docker/daemon.json and restart Docker.

    We're working on a permanent fix for this problem.

    Regards,
    Marat

  3. 3 Posted by Eugene Brodsky on 23 Mar, 2017 06:34 PM

    Eugene Brodsky's Avatar

    Thanks. I ended up shutting down the offending instances, but will keep this in mind for the future.
    Is there any way to prevent the scalr-auth plugin from being added in the first place, when the instance is provisioned? We don't use the Docker integration features of Scalr (not yet, at least).

  4. Support Staff 4 Posted by Marat Komarov on 23 Mar, 2017 06:47 PM

    Marat Komarov's Avatar

    If you've spawned a new server and don't use Scalr Docker policies, then Authz plugin is no more enabled.

    There was a bug in 5.5.0, which caused Docker Authz turning on, even if no policies are configured.

    Regards,
    Marat

  5. 5 Posted by Eugene Brodsky on 23 Mar, 2017 07:03 PM

    Eugene Brodsky's Avatar

    I see our Docker hosts in the Discovery Manager... Where would I confirm that I don't have any Docker policies configured?

  6. Support Staff 6 Posted by Marat Komarov on 23 Mar, 2017 07:29 PM

    Marat Komarov's Avatar

    Discovery Manager just brings you a visibility of Docker containers. Docker policies are configured in Policy Groups on Account scope.

  7. 7 Posted by Eugene Brodsky on 23 Mar, 2017 08:26 PM

    Eugene Brodsky's Avatar

    Got it. Looks like the new hosts aren't having these issues. Thank you!

  8. Eugene Brodsky closed this discussion on 23 Mar, 2017 08:26 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac