When trying to run Splunk in Windows via LCOW, I get errors.
docker pull --platform linux splunk/splunk:latest
and running with
docker run --name splunk --hostname splunk -p 8000:8000 -d -e "SPLUNK_START_ARGS=--accept-license" -e "SPLUNK_USER=splunk" splunk/splunk:latest
I get the following error output in the logs:
Copying '/opt/splunk/etc/openldap/ldap.conf.default' to '/opt/splunk/etc/openldap/ldap.conf'.
An unforeseen error occurred:
Exception: <type 'exceptions.OSError'>, Value: [Errno 1] Operation not permitted: '/opt/splunk/etc/openldap/ldap.conf'
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli.py", line 1143, in main
parseAndRun(argsList)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli.py", line 998, in parseAndRun
retVal = cList.getCmd(command, subCmd).call(argList, fromCLI = True)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli.py", line 280, in call
return self.func(args, fromCLI)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/control_api.py", line 30, in wrapperFunc
return func(dictCopy, fromCLI)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/_internal.py", line 128, in firstTimeRun
comm.copyItem(migration.PATH_LDAP_CONF_DEF, migration.PATH_LDAP_CONF)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli_common.py", line 1008, in copyItem
shutil.copy(src, dst)
File "/opt/splunk/lib/python2.7/shutil.py", line 120, in copy
copymode(src, dst)
File "/opt/splunk/lib/python2.7/shutil.py", line 91, in copymode
os.chmod(dst, mode)
OSError: [Errno 1] Operation not permitted: '/opt/splunk/etc/openldap/ldap.conf'
Please file a case online at http://www.splunk.com/page/submit_issue
This appears to be your first time running this version of Splunk.
Running Docker using Linux containers works as expected, but I need to run using Windows containers for other applications.
Check if the user you are using to install the splunk has right permissions on the folders
/opt/splunk/etc/openldap/ldap.conf.default
Which user you are using? and can you list the directory permissions on the splunk installation directory (from base)?
This occurs when running as both root and splunk users. I'm pulling from Docker, which I believe is using this Dockerfile. Are you asking me to pull the Dockerfile and omit the Splunk installation section, run with -ti
and check the permissions on that directory?