docker-在 ec2 实例上撰写 returns 权限被拒绝：'/etc/grub.d'
docker-compose on ec2 instance returns Permission denied: '/etc/grub.d'
我有 docker-compose --version：docker-compose version 1.25.4, build 8d51620a 在具有 AMI 的 EC2 实例上：Amazon Linux AMI 2.0.20200319 x86_64 ECS HVM GP2
我可以通过 ssh 连接，并安装了 codedeploy 代理。
当 运行 docker-compose -f docker-compose.yml up -d --build 它加注
Creating network "default_default" with the default driver
Building webserver
Traceback (most recent call last):
File "bin/docker-compose", line 6, in <module>
File "compose/cli/main.py", line 72, in main
File "compose/cli/main.py", line 128, in perform_command
File "compose/cli/main.py", line 1077, in up
File "compose/cli/main.py", line 1073, in up
File "compose/project.py", line 548, in up
File "compose/service.py", line 351, in ensure_image_exists
File "compose/service.py", line 1106, in build
File "site-packages/docker/api/build.py", line 160, in build
File "site-packages/docker/utils/build.py", line 30, in tar
File "site-packages/docker/utils/build.py", line 49, in exclude_paths
File "site-packages/docker/utils/build.py", line 214, in rec_walk
File "site-packages/docker/utils/build.py", line 214, in rec_walk
File "site-packages/docker/utils/build.py", line 184, in rec_walk
PermissionError: [Errno 13] Permission denied: '/etc/grub.d'
[11940] Failed to execute script docker-compose
我在互联网上搜索了很多关于它的内容，但我无法找到任何与 grub.d 相关的内容。
它与免费层级 AMI 相关吗？
Docker-编写文件
version: '3'
services:
webserver:
build:
context: .
dockerfile: Dockerfile-version1
image: my_webserver
container_name: my-container
restart: always
volumes:
- ./library:/library
- ./dags:/usr/local/airflow/dags
- ./logs:/usr/local/airflow/logs
ports:
- "8081:8080"
command: webserver
scheduler:
container_name: my-scheduler
build:
context: .
dockerfile: Dockerfile-version1
restart: always
volumes:
- ./library:/library
- ./dags:/usr/local/airflow/dags
- ./logs:/usr/local/airflow/logs
ports:
- "8793:8793"
command: scheduler
Docker文件
FROM ubuntu
ENV PYTHONUNBUFFERED 1
ARG AIRFLOW_VERSION=1.10.1
ARG AIRFLOW_USER_HOME=/usr/local/airflow
ENV AIRFLOW_HOME=${AIRFLOW_USER_HOME}
ENV PYTHONPATH "${PYTHONPATH}:/"
#Allow airflow GPL dependencies
ENV SLUGIFY_USES_TEXT_UNIDECODE=yes
#Install libraries and dependencies
RUN apt-get update && apt-get install -y python3-pip mysql-server vim
#symlink python3 to just python
RUN ln -s /usr/bin/python3 /usr/bin/python & ln -s /usr/bin/pip3 /usr/bin/pip
RUN set -ex \
&& buildDeps=' \
freetds-dev \
libkrb5-dev \
libsasl2-dev \
libssl-dev \
libffi-dev \
libpq-dev \
git \
'&& apt-get update -yqq \
&& apt-get upgrade -yqq \
&& apt-get install -yqq --no-install-recommends \
$buildDeps \
freetds-bin \
build-essential \
default-libmysqlclient-dev \
apt-utils \
curl \
rsync \
netcat \
locales \
&& sed -i 's/^# en_US.UTF-8 UTF-8$/en_US.UTF-8 UTF-8/g' /etc/locale.gen \
&& locale-gen \
&& update-locale LANG=en_US.UTF-8 LC_ALL=en_US.UTF-8 \
#&& useradd -ms /bin/bash -d ${AIRFLOW_USER_HOME} airflow \
&& pip install -U setuptools wheel\
&& pip install pytz \
&& pip install pyOpenSSL \
&& pip install ndg-httpsclient \
&& pip install pyasn1 \
&& pip install apache-airflow[crypto,postgres,ssh]==${AIRFLOW_VERSION} \
&& pip install 'redis==3.2' \
&& if [ -n "${PYTHON_DEPS}" ]; then pip install ${PYTHON_DEPS}; fi \
&& apt-get purge --auto-remove -yqq $buildDeps \
&& apt-get autoremove -yqq --purge \
&& apt-get clean \
&& rm -rf \
/var/lib/apt/lists/* \
/tmp/* \
/var/tmp/* \
/usr/share/man \
/usr/share/doc \
/usr/share/doc-base
RUN pip install --user psycopg2-binary
RUN pip install -r requirements.pip
ADD .entrypoint.sh /entrypoint.sh
ADD .airflow.cfg ${AIRFLOW_USER_HOME}/airflow.cfg
RUN chown -R 777 ${AIRFLOW_USER_HOME}
RUN chmod -R 777 /entrypoint.sh
EXPOSE 8080 5432 5555 8793
WORKDIR "/"
ENTRYPOINT ["/entrypoint.sh"]
CMD ["webserver"]
Docker 正在尝试打包您的整个文件系统并将其发送给构建器。您无权访问其中一些文件，例如 /etc/grub.d。 Docker 发送整个上下文目录，减去 .dockerignore 中指定的任何内容给构建器。您不应该将该上下文目录作为根目录。你不仅会得到这些错误，而且速度会很慢，因为你打包了很多你不需要的文件。
将您的 Dockerfile 和 docker-compose.yml 文件放在一个单独的目录中，该目录不是根目录。理想情况下，它应该只包含您真正需要的图像（.entrypoint.sh 和 .airflow.cfg）。
我有 docker-compose --version：docker-compose version 1.25.4, build 8d51620a 在具有 AMI 的 EC2 实例上：Amazon Linux AMI 2.0.20200319 x86_64 ECS HVM GP2
我可以通过 ssh 连接，并安装了 codedeploy 代理。
当 运行 docker-compose -f docker-compose.yml up -d --build 它加注
Creating network "default_default" with the default driver
Building webserver
Traceback (most recent call last):
File "bin/docker-compose", line 6, in <module>
File "compose/cli/main.py", line 72, in main
File "compose/cli/main.py", line 128, in perform_command
File "compose/cli/main.py", line 1077, in up
File "compose/cli/main.py", line 1073, in up
File "compose/project.py", line 548, in up
File "compose/service.py", line 351, in ensure_image_exists
File "compose/service.py", line 1106, in build
File "site-packages/docker/api/build.py", line 160, in build
File "site-packages/docker/utils/build.py", line 30, in tar
File "site-packages/docker/utils/build.py", line 49, in exclude_paths
File "site-packages/docker/utils/build.py", line 214, in rec_walk
File "site-packages/docker/utils/build.py", line 214, in rec_walk
File "site-packages/docker/utils/build.py", line 184, in rec_walk
PermissionError: [Errno 13] Permission denied: '/etc/grub.d'
[11940] Failed to execute script docker-compose
我在互联网上搜索了很多关于它的内容，但我无法找到任何与 grub.d 相关的内容。
它与免费层级 AMI 相关吗？
Docker-编写文件
version: '3'
services:
webserver:
build:
context: .
dockerfile: Dockerfile-version1
image: my_webserver
container_name: my-container
restart: always
volumes:
- ./library:/library
- ./dags:/usr/local/airflow/dags
- ./logs:/usr/local/airflow/logs
ports:
- "8081:8080"
command: webserver
scheduler:
container_name: my-scheduler
build:
context: .
dockerfile: Dockerfile-version1
restart: always
volumes:
- ./library:/library
- ./dags:/usr/local/airflow/dags
- ./logs:/usr/local/airflow/logs
ports:
- "8793:8793"
command: scheduler
Docker文件
FROM ubuntu
ENV PYTHONUNBUFFERED 1
ARG AIRFLOW_VERSION=1.10.1
ARG AIRFLOW_USER_HOME=/usr/local/airflow
ENV AIRFLOW_HOME=${AIRFLOW_USER_HOME}
ENV PYTHONPATH "${PYTHONPATH}:/"
#Allow airflow GPL dependencies
ENV SLUGIFY_USES_TEXT_UNIDECODE=yes
#Install libraries and dependencies
RUN apt-get update && apt-get install -y python3-pip mysql-server vim
#symlink python3 to just python
RUN ln -s /usr/bin/python3 /usr/bin/python & ln -s /usr/bin/pip3 /usr/bin/pip
RUN set -ex \
&& buildDeps=' \
freetds-dev \
libkrb5-dev \
libsasl2-dev \
libssl-dev \
libffi-dev \
libpq-dev \
git \
'&& apt-get update -yqq \
&& apt-get upgrade -yqq \
&& apt-get install -yqq --no-install-recommends \
$buildDeps \
freetds-bin \
build-essential \
default-libmysqlclient-dev \
apt-utils \
curl \
rsync \
netcat \
locales \
&& sed -i 's/^# en_US.UTF-8 UTF-8$/en_US.UTF-8 UTF-8/g' /etc/locale.gen \
&& locale-gen \
&& update-locale LANG=en_US.UTF-8 LC_ALL=en_US.UTF-8 \
#&& useradd -ms /bin/bash -d ${AIRFLOW_USER_HOME} airflow \
&& pip install -U setuptools wheel\
&& pip install pytz \
&& pip install pyOpenSSL \
&& pip install ndg-httpsclient \
&& pip install pyasn1 \
&& pip install apache-airflow[crypto,postgres,ssh]==${AIRFLOW_VERSION} \
&& pip install 'redis==3.2' \
&& if [ -n "${PYTHON_DEPS}" ]; then pip install ${PYTHON_DEPS}; fi \
&& apt-get purge --auto-remove -yqq $buildDeps \
&& apt-get autoremove -yqq --purge \
&& apt-get clean \
&& rm -rf \
/var/lib/apt/lists/* \
/tmp/* \
/var/tmp/* \
/usr/share/man \
/usr/share/doc \
/usr/share/doc-base
RUN pip install --user psycopg2-binary
RUN pip install -r requirements.pip
ADD .entrypoint.sh /entrypoint.sh
ADD .airflow.cfg ${AIRFLOW_USER_HOME}/airflow.cfg
RUN chown -R 777 ${AIRFLOW_USER_HOME}
RUN chmod -R 777 /entrypoint.sh
EXPOSE 8080 5432 5555 8793
WORKDIR "/"
ENTRYPOINT ["/entrypoint.sh"]
CMD ["webserver"]
Docker 正在尝试打包您的整个文件系统并将其发送给构建器。您无权访问其中一些文件，例如 /etc/grub.d。 Docker 发送整个上下文目录，减去 .dockerignore 中指定的任何内容给构建器。您不应该将该上下文目录作为根目录。你不仅会得到这些错误，而且速度会很慢，因为你打包了很多你不需要的文件。
将您的 Dockerfile 和 docker-compose.yml 文件放在一个单独的目录中，该目录不是根目录。理想情况下，它应该只包含您真正需要的图像（.entrypoint.sh 和 .airflow.cfg）。