{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/15938","labels_url":"https://api.github.com/repos/docker/docker/issues/15938/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/15938/comments","events_url":"https://api.github.com/repos/docker/docker/issues/15938/events","html_url":"https://github.com/docker/docker/issues/15938","id":103937501,"number":15938,"title":"Syslogd cannot be started when container is started with --read-only","user":{"login":"piotrminkina","id":2574153,"avatar_url":"https://avatars.githubusercontent.com/u/2574153?v=3","gravatar_id":"","url":"https://api.github.com/users/piotrminkina","html_url":"https://github.com/piotrminkina","followers_url":"https://api.github.com/users/piotrminkina/followers","following_url":"https://api.github.com/users/piotrminkina/following{/other_user}","gists_url":"https://api.github.com/users/piotrminkina/gists{/gist_id}","starred_url":"https://api.github.com/users/piotrminkina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/piotrminkina/subscriptions","organizations_url":"https://api.github.com/users/piotrminkina/orgs","repos_url":"https://api.github.com/users/piotrminkina/repos","events_url":"https://api.github.com/users/piotrminkina/events{/privacy}","received_events_url":"https://api.github.com/users/piotrminkina/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-08-30T18:16:13Z","updated_at":"2015-08-30T22:26:23Z","closed_at":null,"body":"When container is started with option `--read-only` then `syslogd` cannot be started, because `/dev` is also read only and process cannot create socket at `/dev/log`. In previous versions of Docker was not any problems.\r\n\r\nCould You add possibility of select that `/dev` or `/sys` should also be read only when option `--read-only` will be provided? Maybe You have better idea to solve this?\r\n\r\n```\r\n# uname -a\r\nLinux gaia 4.1.0-2-amd64 #1 SMP Debian 4.1.6-1 (2015-08-23) x86_64 GNU/Linux\r\n```\r\n```\r\n# docker version\r\nClient:\r\n Version:      1.8.1\r\n API version:  1.20\r\n Go version:   go1.4.2\r\n Git commit:   d12ea79\r\n Built:        Thu Aug 13 02:24:20 UTC 2015\r\n OS/Arch:      linux/amd64\r\n\r\nServer:\r\n Version:      1.8.1\r\n API version:  1.20\r\n Go version:   go1.4.2\r\n Git commit:   d12ea79\r\n Built:        Thu Aug 13 02:24:20 UTC 2015\r\n OS/Arch:      linux/amd64\r\n```\r\n```\r\n# docker -D info\r\nContainers: 9\r\nImages: 146\r\nStorage Driver: overlay\r\n Backing Filesystem: extfs\r\nExecution Driver: native-0.2\r\nLogging Driver: json-file\r\nKernel Version: 4.1.0-2-amd64\r\nOperating System: Debian GNU/Linux stretch/sid\r\nCPUs: 4\r\nTotal Memory: 11.63 GiB\r\nName: gaia\r\nID: B7WF:V6UQ:DRVY:CL72:HGTY:DA7L:NVC7:XJ47:I3IG:3ZD3:UZX7:DWY2\r\nUsername: piotrminkina\r\nRegistry: https://index.docker.io/v1/\r\n```\r\n\r\nRegards and thanks for great product!\r\nPiotr Minkina"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/136209581","html_url":"https://github.com/docker/docker/issues/15938#issuecomment-136209581","issue_url":"https://api.github.com/repos/docker/docker/issues/15938","id":136209581,"user":{"login":"piotrminkina","id":2574153,"avatar_url":"https://avatars.githubusercontent.com/u/2574153?v=3","gravatar_id":"","url":"https://api.github.com/users/piotrminkina","html_url":"https://github.com/piotrminkina","followers_url":"https://api.github.com/users/piotrminkina/followers","following_url":"https://api.github.com/users/piotrminkina/following{/other_user}","gists_url":"https://api.github.com/users/piotrminkina/gists{/gist_id}","starred_url":"https://api.github.com/users/piotrminkina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/piotrminkina/subscriptions","organizations_url":"https://api.github.com/users/piotrminkina/orgs","repos_url":"https://api.github.com/users/piotrminkina/repos","events_url":"https://api.github.com/users/piotrminkina/events{/privacy}","received_events_url":"https://api.github.com/users/piotrminkina/received_events","type":"User","site_admin":false},"created_at":"2015-08-30T22:26:23Z","updated_at":"2015-08-30T22:26:23Z","body":"Yes, I thought about it. I don't want bind host `/dev/log` for various reasons (e.g. security and control). I think the best for me is simple install busybox in container and run it in background with parameters like`/bin/busybox syslogd -nSO /proc/1/fd/1`. In this case services that require `/dev/log` now log messages to stdout of main process. Thanks to this solution `docker logs` display logs from container (of course if I run container with default log engine).\r\n\r\nAdditionally I have full possibilities of Syslog (like facalities and log levels, and I can also forward messages to external host if I want), but with Docker 1.8 I must run container without `--read-only` parameter.\r\n\r\nMaybe Docker can create own syslog socket inside container `/dev/log` and depending on selected log engine can forward messages to stdout, stderr and real logging daemon?"}}