vrr/wirenboard-agent-vm
2
0
Fork 0
mirror of https://github.com/wirenboard/agent-vm.git synced 2026-07-09 16:00:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

image: put /usr/sbin on PATH so dockerd finds iptables / docker-proxy

Browse source 
The previous fix symlinked /usr/sbin/{dockerd,runc} into
/usr/local/bin so users could invoke `dockerd` directly, but that
was whack-a-mole — dockerd itself does PATH lookup at runtime for
its helper binaries:

  - `iptables` (from `iptables` pkg, /usr/sbin/iptables): dockerd
    aborts with "failed to register \"bridge\" driver: failed to
    create NAT chain DOCKER: iptables not found".
  - `docker-proxy` (from docker.io pkg, /usr/sbin/docker-proxy):
    daemon.json validation fails with "userland-proxy is enabled,
    but userland-proxy-path is not set" (the daemon resolves a
    default path via PATH lookup before parsing the config).
  - `runc` (also /usr/sbin/runc): containerd-shim PATH-looks it up
    when starting containers.

Symlinking each one would be unending whack-a-mole as new helpers
get added in future docker.io revs. Adding /usr/sbin to PATH covers
all of them in one line; drop the redundant dockerd/runc symlinks
from the previous fix.

Verified end-to-end inside an agent-vm session built from the
broken (v0.1.11) image: with `PATH=$PATH:/usr/sbin dockerd &` the
daemon starts cleanly, `docker run hello-world` prints the welcome
message, `docker run alpine sh -c 'echo running uid=$(id -u)'`
runs a real container (uid=0, kernel 6.12.68), iptables NAT chain
DOCKER is populated, docker0 bridge comes up.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
agent-vm 2026-05-27 18:39:49 +00:00
parent 4592f0f120
commit 57deafa8ce
1 changed files with 2 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
images/Dockerfile
View file

@ -21,7 +21,7 @@ LABEL org.opencontainers.image.description="Guest OCI image that the agent-vm to
ENV DEBIAN_FRONTEND=noninteractive \
HOME=/root \
PATH=/root/.local/bin:/root/.claude/local/bin:/root/.opencode/bin:/usr/local/bin:/usr/bin:/bin
PATH=/root/.local/bin:/root/.claude/local/bin:/root/.opencode/bin:/usr/local/bin:/usr/bin:/usr/sbin:/bin
# Image-API contract version. Bump on BREAKING image changes only
# (new required mount points, changed env-var contracts, removed
@ -217,9 +217,7 @@ RUN apt-get update \
&& rm -rf /var/lib/apt/lists/* \
&& mkdir -p /etc/docker \
&& printf '%s\n' '{' ' "storage-driver": "fuse-overlayfs"' '}' \
> /etc/docker/daemon.json \
&& ln -s /usr/sbin/dockerd /usr/local/bin/dockerd \
&& ln -s /usr/sbin/runc /usr/local/bin/runc
> /etc/docker/daemon.json
# Claude Code official installer.
RUN curl -fsSL https://claude.ai/install.sh | bash