{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/11868","labels_url":"https://api.github.com/repos/docker/docker/issues/11868/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/11868/comments","events_url":"https://api.github.com/repos/docker/docker/issues/11868/events","html_url":"https://github.com/docker/docker/issues/11868","id":64815876,"number":11868,"title":"Report: Unable to launch containers with exposed ports on RHEL 7.0 + docker 1.6.0-rc2 + selinux","user":{"login":"mbentley","id":414445,"avatar_url":"https://avatars.githubusercontent.com/u/414445?v=3","gravatar_id":"","url":"https://api.github.com/users/mbentley","html_url":"https://github.com/mbentley","followers_url":"https://api.github.com/users/mbentley/followers","following_url":"https://api.github.com/users/mbentley/following{/other_user}","gists_url":"https://api.github.com/users/mbentley/gists{/gist_id}","starred_url":"https://api.github.com/users/mbentley/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mbentley/subscriptions","organizations_url":"https://api.github.com/users/mbentley/orgs","repos_url":"https://api.github.com/users/mbentley/repos","events_url":"https://api.github.com/users/mbentley/events{/privacy}","received_events_url":"https://api.github.com/users/mbentley/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels/kind/bug","name":"kind/bug","color":"FF8C94"}],"state":"closed","locked":false,"assignee":{"login":"crosbymichael","id":749551,"avatar_url":"https://avatars.githubusercontent.com/u/749551?v=3","gravatar_id":"","url":"https://api.github.com/users/crosbymichael","html_url":"https://github.com/crosbymichael","followers_url":"https://api.github.com/users/crosbymichael/followers","following_url":"https://api.github.com/users/crosbymichael/following{/other_user}","gists_url":"https://api.github.com/users/crosbymichael/gists{/gist_id}","starred_url":"https://api.github.com/users/crosbymichael/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/crosbymichael/subscriptions","organizations_url":"https://api.github.com/users/crosbymichael/orgs","repos_url":"https://api.github.com/users/crosbymichael/repos","events_url":"https://api.github.com/users/crosbymichael/events{/privacy}","received_events_url":"https://api.github.com/users/crosbymichael/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/docker/docker/milestones/37","html_url":"https://github.com/docker/docker/milestones/1.6.0","labels_url":"https://api.github.com/repos/docker/docker/milestones/37/labels","id":952335,"number":37,"title":"1.6.0","description":"","creator":{"login":"crosbymichael","id":749551,"avatar_url":"https://avatars.githubusercontent.com/u/749551?v=3","gravatar_id":"","url":"https://api.github.com/users/crosbymichael","html_url":"https://github.com/crosbymichael","followers_url":"https://api.github.com/users/crosbymichael/followers","following_url":"https://api.github.com/users/crosbymichael/following{/other_user}","gists_url":"https://api.github.com/users/crosbymichael/gists{/gist_id}","starred_url":"https://api.github.com/users/crosbymichael/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/crosbymichael/subscriptions","organizations_url":"https://api.github.com/users/crosbymichael/orgs","repos_url":"https://api.github.com/users/crosbymichael/repos","events_url":"https://api.github.com/users/crosbymichael/events{/privacy}","received_events_url":"https://api.github.com/users/crosbymichael/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":121,"state":"open","created_at":"2015-01-26T23:40:13Z","updated_at":"2015-04-01T00:21:14Z","due_on":"2015-04-07T07:00:00Z","closed_at":null},"comments":21,"created_at":"2015-03-27T17:45:00Z","updated_at":"2015-04-01T14:35:42Z","closed_at":"2015-03-31T00:12:53Z","body":"Description of problem:  On RHEL 7.0 + docker 1.6.0-rc2 and selinux enabled on the host, I am unable to launch containers with exposed ports.\r\n\r\n`docker version`:\r\nClient version: 1.6.0-rc2\r\nClient API version: 1.18\r\nGo version (client): go1.4.2\r\nGit commit (client): c5ee149\r\nOS/Arch (client): linux/amd64\r\nServer version: 1.6.0-rc2\r\nServer API version: 1.18\r\nGo version (server): go1.4.2\r\nGit commit (server): c5ee149\r\nOS/Arch (server): linux/amd64\r\n\r\n\r\n`docker info`:\r\nContainers: 9\r\nImages: 39\r\nStorage Driver: devicemapper\r\n Pool Name: docker-202:2-16819213-pool\r\n Pool Blocksize: 65.54 kB\r\n Backing Filesystem: xfs\r\n Data file: /dev/loop2\r\n Metadata file: /dev/loop3\r\n Data Space Used: 1.08 GB\r\n Data Space Total: 107.4 GB\r\n Data Space Available: 1.873 GB\r\n Metadata Space Used: 2.449 MB\r\n Metadata Space Total: 2.147 GB\r\n Metadata Space Available: 1.873 GB\r\n Udev Sync Supported: false\r\n Data loop file: /var/lib/docker/devicemapper/devicemapper/data\r\n Metadata loop file: /var/lib/docker/devicemapper/devicemapper/metadata\r\n Library Version: 1.02.82-git (2013-10-04)\r\nExecution Driver: native-0.2\r\nKernel Version: 3.10.0-123.20.1.el7.x86_64\r\nOperating System: Red Hat Enterprise Linux Server 7.0 (Maipo)\r\nCPUs: 1\r\nTotal Memory: 3.519 GiB\r\nName: ip-172-31-28-201.ec2.internal\r\nID: ZMHP:4MA3:4XUV:V6DK:BBCA:7PCG:ZA4N:QIBW:6XGM:H2VY:CK6R:VHEZ\r\nDebug mode (server): false\r\nDebug mode (client): true\r\nFds: 13\r\nGoroutines: 19\r\nSystem Time: Fri Mar 27 13:37:20 EDT 2015\r\nEventsListeners: 0\r\nInit SHA1: 2858afa354fa56af645c92db74ac85060961662c\r\nInit Path: /usr/bin/docker\r\nDocker Root Dir: /var/lib/docker\r\nUsername: mbentley\r\nRegistry: [https://index.docker.io/v1/]\r\n\r\n\r\n`uname -a`:\r\nLinux ip-172-31-28-201.ec2.internal 3.10.0-123.20.1.el7.x86_64 #1 SMP Wed Jan 21 09:45:55 EST 2015 x86_64 x86_64 x86_64 GNU/Linux\r\n\r\n\r\nEnvironment details (AWS, VirtualBox, physical, etc.):\r\nRHEL 7.0 in AWS [RHEL-7.0_HVM_GA-20150209-x86_64-1-Hourly2-GP2 (ami-60a1e808)]\r\nDocker Engine 1.6.0-rc2 [Docker version 1.6.0-rc2, build c5ee149]\r\n\r\n\r\nHow reproducible:\r\n\r\n\r\nSteps to Reproduce:\r\n\r\n1. Create AWS RHEL 7.0 instance\r\n2. Install Docker via the AWS extras repo:\r\n\r\n    ```\r\n    yum install -y yum-utils wget &&\\\r\n    yum-config-manager --enable rhui-REGION-rhel-server-extras &&\\\r\n    yum install -y docker &&\\\r\n    systemctl enable docker\r\n    ```\r\n\r\n3. Download the docker engine 1.6.0-rc2:\r\n    ```\r\n    mv /usr/bin/docker /usr/bin/docker.bak; wget -O /usr/bin/docker \"https://test.docker.com/builds/Linux/x86_64/docker-1.6.0-rc2\" && chmod +x /usr/bin/docker\r\n    ```\r\n\r\n4. Comment out `ADD_REGISTRY='--add-registry registry.access.redhat.com'` in `/etc/sysconfig/docker`\r\n5. Start Docker: `systemctl start docker`\r\n6. Make sure docker is running: `docker version`\r\n7. Attempt to run nginx:\r\n\r\n    ```\r\n    docker run -it --rm nginx:latest\r\n    FATA[0000] Error response from daemon: Cannot start container 045a09969867331a534a486047efd81918bf51c52f60cc8f48ffa91b6900752d: [8] System error: Cannot set property DefaultDependencies, or unknown property.\r\n    ```\r\nDisabling selinux or setting to `permissive` allows it to work.\r\n\r\n\r\nActual Results:  the container fails to start\r\n\r\n\r\nExpected Results: containers starts\r\n\r\n\r\nAdditional info:"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/88507715","html_url":"https://github.com/docker/docker/issues/11868#issuecomment-88507715","issue_url":"https://api.github.com/repos/docker/docker/issues/11868","id":88507715,"user":{"login":"miminar","id":1478803,"avatar_url":"https://avatars.githubusercontent.com/u/1478803?v=3","gravatar_id":"","url":"https://api.github.com/users/miminar","html_url":"https://github.com/miminar","followers_url":"https://api.github.com/users/miminar/followers","following_url":"https://api.github.com/users/miminar/following{/other_user}","gists_url":"https://api.github.com/users/miminar/gists{/gist_id}","starred_url":"https://api.github.com/users/miminar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/miminar/subscriptions","organizations_url":"https://api.github.com/users/miminar/orgs","repos_url":"https://api.github.com/users/miminar/repos","events_url":"https://api.github.com/users/miminar/events{/privacy}","received_events_url":"https://api.github.com/users/miminar/received_events","type":"User","site_admin":false},"created_at":"2015-04-01T14:35:41Z","updated_at":"2015-04-01T14:35:41Z","body":"@mbentley I can confirm that #11946 fixes \r\n\r\n    open /proc/sys/net/ipv4/ip_local_port_range: no such file or directory\r\n\r\nissue on RHEL. Unfortunatelly [f4f9b8b](https://github.com/docker/docker/commit/f4f9b8b68103c133cce941993655be0ada53fac1) lacks that fix. I've just tried dynbinary from [20d4e6f](https://github.com/docker/docker/commit/20d4e6f29ef5c7b8bf2f55aa2bedb0130868cd2c) (docker 1.6.0-rc3) and the warning is gone. Could you please recheck?"}}