{"action":"created","issue":{"url":"https://api.github.com/repos/coreos/rocket/issues/399","labels_url":"https://api.github.com/repos/coreos/rocket/issues/399/labels{/name}","comments_url":"https://api.github.com/repos/coreos/rocket/issues/399/comments","events_url":"https://api.github.com/repos/coreos/rocket/issues/399/events","html_url":"https://github.com/coreos/rocket/issues/399","id":54919633,"number":399,"title":"rkt: can run fleetd","user":{"login":"alban","id":27575,"avatar_url":"https://avatars.githubusercontent.com/u/27575?v=3","gravatar_id":"","url":"https://api.github.com/users/alban","html_url":"https://github.com/alban","followers_url":"https://api.github.com/users/alban/followers","following_url":"https://api.github.com/users/alban/following{/other_user}","gists_url":"https://api.github.com/users/alban/gists{/gist_id}","starred_url":"https://api.github.com/users/alban/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alban/subscriptions","organizations_url":"https://api.github.com/users/alban/orgs","repos_url":"https://api.github.com/users/alban/repos","events_url":"https://api.github.com/users/alban/events{/privacy}","received_events_url":"https://api.github.com/users/alban/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-01-20T18:22:34Z","updated_at":"2015-03-23T18:39:28Z","closed_at":null,"body":"As part of #13, it would be nice to be able to run fleetd from a container.\r\n\r\nFleetd needs to have access to the D-Bus system bus to talk with systemd on the host.\r\n\r\nI enabled that communication with the following in the manifest:\r\n\r\n```\r\n        \"mountPoints\": [\r\n            {\r\n                \"name\": \"dbus-socket\",\r\n                \"path\": \"/var/run/dbus/system_bus_socket\",\r\n                \"readOnly\": false\r\n            },\r\n            {\r\n                \"name\": \"machine-id\",\r\n                \"path\": \"/etc/machine-id\",\r\n                \"readOnly\": true\r\n            }\r\n        ]\r\n```\r\n\r\nAnd starting the container with:\r\n```\r\nsudo bin/rkt --debug run \\\r\n  -volume=dbus-socket:/var/run/dbus/system_bus_socket \\\r\n  -volume=machine-id:/etc/machine-id \\\r\n  /tmp/fleet-0.9.0+git-linux-amd64.aci\r\n```\r\n\r\nWith this method, there will be no security isolation between the fleetd container and the host but I guess that's ok if it is not the point of fleetd's containerization.\r\n\r\nDo you foresee any other containerized apps needing access to the system bus on the host?\r\n"},"comment":{"url":"https://api.github.com/repos/coreos/rocket/issues/comments/85136913","html_url":"https://github.com/coreos/rocket/issues/399#issuecomment-85136913","issue_url":"https://api.github.com/repos/coreos/rocket/issues/399","id":85136913,"user":{"login":"jonboulle","id":2601015,"avatar_url":"https://avatars.githubusercontent.com/u/2601015?v=3","gravatar_id":"","url":"https://api.github.com/users/jonboulle","html_url":"https://github.com/jonboulle","followers_url":"https://api.github.com/users/jonboulle/followers","following_url":"https://api.github.com/users/jonboulle/following{/other_user}","gists_url":"https://api.github.com/users/jonboulle/gists{/gist_id}","starred_url":"https://api.github.com/users/jonboulle/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonboulle/subscriptions","organizations_url":"https://api.github.com/users/jonboulle/orgs","repos_url":"https://api.github.com/users/jonboulle/repos","events_url":"https://api.github.com/users/jonboulle/events{/privacy}","received_events_url":"https://api.github.com/users/jonboulle/received_events","type":"User","site_admin":false},"created_at":"2015-03-23T18:39:28Z","updated_at":"2015-03-23T18:39:28Z","body":"That's symptomatic of the fleet agent not reporting state correctly. Can you check fleetd's logs?"}}