Proper setup of a host for Discourse Docker container

[verulian]

The preferred method of setting up an instance of Discourse is to use Ubuntu 18.04 to install a Dockerized container for Discourse. Unfortunately Discourse developers are very particular about keeping with their configuration standards and so there's not a lot of wiggle room if you want any serious support on their forums.

Is there a way to install an Ubuntu 18.04 container in Proxmox that will then in turn allow for a Docker installation of Discourse? Or is using an Ubuntu full VM guest install the only real option to run a Docker container afterwards?

Furthermore, I was hoping to find an Ubuntu 18.04 container option to experiment with, but when I went to select a template list is empty. Is there something I'm missing in the way of populating the contents of the containers for installation?

 

[tom]

when I went to select a template list is empty

we have templates for all ubuntu versions, even 19.10.

you can download these templates directly to your local template storage (there is a download button.)

 

[verulian]

Hmm, I'm not seeing a download button anywhere oddly...

Furthermore, can Docker containers run within an LXC container or would the VM path be better in this case?

 

[tom]

Hmm, I'm not seeing a download button anywhere oddly...

See my screenshot - click on "Templates"

 

[verulian]

Oh, so you're saying click on "Templates" at this point, but on the other "Create: LXC Container" > "Template" THAT is where they don't show up, you have to add them first here at your screenshot point. Thanks.

 

[verulian]

So this got me to the next point of my question regarding Docker. It turns out that Discourse will not work with the `vfs` storage driver. Is there a way to use aufs or overlay2 instead with Proxmox?

 

[verulian]

It turns out that I did hit a wall running Docker within an LXC container and this appears to be the solution to :
https://forum.proxmox.com/threads/container-linux-in-a-kvm.43136/#post-207264

 

[verulian]

To document my steps at getting Docker with Discourse working further, I edited:

/etc/pve/nodes/nodename/lxc

to contain:

lxc.apparmor.profile: unconfined
lxc.cgroup.devices.allow: a
lxc.cap.drop:

I then edited `nano /etc/modules` to contain:

aufs
overlay

I rebooted to verify that these modules are loaded, and they are.

After I had followed the steps from these instructions previously, I then ran this:

/var/discourse/launcher bootstrap app

This got me closer, but still having trouble:

/usr/bin/docker: Error response from daemon: Could not check if docker-default AppArmor profile was loaded: open /sys/kernel/security/apparmor/profiles: permission denied.
Your Docker installation is not working correctly

 

[LnxBil]

lxc.apparmor.profile: unconfined

Hopefully, you're not running this in production. Security-wise, best is still to run Docker inside of a VM

 

[verulian]

Thanks for the concern: No, this is on an isolated LAN with no security risk whatsoever for development/staging/testing only purposes. I'm still hitting a wall here and would like to know how to get past this open /sys/kernel/security/apparmor/profiles: permission denied issue.

 

[oguz]

I'm still hitting a wall here and would like to know how to get past this open /sys/kernel/security/apparmor/profiles: permission denied issue.

did you enable nesting? docker needs it to work in lxc containers.

 

[verulian]

I did enable it this via the options method:


However I still get the same AppArmor issue:

/usr/bin/docker: Error response from daemon: Could not check if docker-default AppArmor profile was loaded: open /sys/kernel/security/apparmor/profiles: permission denied.

 

[oguz]

try to see if docker run hello-world works in the container