{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/8539","labels_url":"https://api.github.com/repos/docker/docker/issues/8539/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/8539/comments","events_url":"https://api.github.com/repos/docker/docker/issues/8539/events","html_url":"https://github.com/docker/docker/issues/8539","id":45674071,"number":8539,"title":"Error response from daemon: Cannot start container (fork/exec /usr/sbin/iptables: cannot allocate memory)","user":{"login":"zyndiecate","id":552769,"avatar_url":"https://avatars.githubusercontent.com/u/552769?v=3","gravatar_id":"","url":"https://api.github.com/users/zyndiecate","html_url":"https://github.com/zyndiecate","followers_url":"https://api.github.com/users/zyndiecate/followers","following_url":"https://api.github.com/users/zyndiecate/following{/other_user}","gists_url":"https://api.github.com/users/zyndiecate/gists{/gist_id}","starred_url":"https://api.github.com/users/zyndiecate/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zyndiecate/subscriptions","organizations_url":"https://api.github.com/users/zyndiecate/orgs","repos_url":"https://api.github.com/users/zyndiecate/repos","events_url":"https://api.github.com/users/zyndiecate/events{/privacy}","received_events_url":"https://api.github.com/users/zyndiecate/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":72,"created_at":"2014-10-13T18:53:58Z","updated_at":"2015-08-11T08:59:39Z","closed_at":"2015-02-20T18:19:28Z","body":"We are running some coreos clusters. Over time (after a week) we see the following error taking place.\r\n\r\n```bash\r\n# systemd error log\r\n2014/10/13 16:12:08 Error response from daemon: Cannot start container f9e42f092597e46f5cf6a507d7e70662e6ef1035a8f01d95f56c1f2934234361: iptables failed: iptables --wait -t nat -A DOCKER -p tcp -d 172.31.31.159 --dport 49450 ! -i docker0 -j DNAT --to-destination 172.17.0.95:80:  (fork/exec /usr/sbin/iptables: cannot allocate memory)\r\n```\r\n\r\nHere we need to restart the docker daemon and everything is back to normal. Is there a memory leak? I see there is enough memory available. Is it because of the swap?\r\n\r\nenvironment information\r\n```bash\r\n# top\r\ntop - 16:13:01 up 22 days,  7:56,  1 user,  load average: 6.50, 5.44, 4.58\r\nTasks: 186 total,   3 running, 183 sleeping,   0 stopped,   0 zombie\r\nCpu(s):  0.0%us,  0.0%sy,  0.0%ni, 14.2%id,  1.3%wa, 33.7%hi,  0.0%si, 50.8%st\r\nMem:   4051204k total,  3886188k used,   165016k free,     3168k buffers\r\nSwap:        0k total,        0k used,        0k free,  1681572k cached\r\n\r\n  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND\r\n20318 root      20   0 3449m 1.3g  10m S    0 34.0  18:27.87 docker\r\n\r\n# memory stats\r\n$ free\r\n             total       used       free     shared    buffers     cached\r\nMem:       4051204    3884208     166996          0       3168    1681744\r\n-/+ buffers/cache:    2199296    1851908\r\nSwap:            0          0          0\r\n\r\n# coreos version\r\n$ cat /etc/lsb-release\r\nDISTRIB_ID=CoreOS\r\nDISTRIB_RELEASE=410.0.0\r\nDISTRIB_CODENAME=\"Red Dog\"\r\nDISTRIB_DESCRIPTION=\"CoreOS 410.0.0\"\r\n\r\n# docker info \r\n$ docker info\r\nContainers: 22\r\nImages: 332\r\nStorage Driver: btrfs\r\nExecution Driver: native-0.2\r\nKernel Version: 3.15.8+\r\n\r\n# docker version\r\n$ docker -v\r\nDocker version 1.1.2, build d84a070"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/129778824","html_url":"https://github.com/docker/docker/issues/8539#issuecomment-129778824","issue_url":"https://api.github.com/repos/docker/docker/issues/8539","id":129778824,"user":{"login":"booyaa","id":192864,"avatar_url":"https://avatars.githubusercontent.com/u/192864?v=3","gravatar_id":"","url":"https://api.github.com/users/booyaa","html_url":"https://github.com/booyaa","followers_url":"https://api.github.com/users/booyaa/followers","following_url":"https://api.github.com/users/booyaa/following{/other_user}","gists_url":"https://api.github.com/users/booyaa/gists{/gist_id}","starred_url":"https://api.github.com/users/booyaa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/booyaa/subscriptions","organizations_url":"https://api.github.com/users/booyaa/orgs","repos_url":"https://api.github.com/users/booyaa/repos","events_url":"https://api.github.com/users/booyaa/events{/privacy}","received_events_url":"https://api.github.com/users/booyaa/received_events","type":"User","site_admin":false},"created_at":"2015-08-11T08:59:39Z","updated_at":"2015-08-11T08:59:39Z","body":"@willyyr just to clarify, upgrading to latest docker has resolved the issue?"}}