如何解决“无法用IPC_LOCK启动保险库。禁用IPC_LOCK”和“使用raft存储时必须设置群集地址”的错误？
如何解决“无法用IPC_LOCK启动保险库。禁用IPC_LOCK”和“使用raft存储时必须设置群集地址”的错误？
提问于 2021-07-26 08:40:11
我使用下面的堆栈文件以码头群模式部署保险库服务。
堆栈文件：
version: '3.8'
services:
faume-vault:
image: vault:1.6.0
environment:
TZ: UTC
VAULT_ADDR: 'http://0.0.0.0:8200'
VAULT_LOCAL_CONFIG: |-
{
"disable_cache": true,
"disable_mlock": true,
"ui": true,
"backend": {
"raft": {
"node_id": "vault",
"path": "/vault"
}
},
"default_lease_ttl": "168h",
"max_lease_ttl": "720h",
"seal": {
"awskms": {
"access_key": "xxxxxxxxxxxxxxxxxxxxxxx"
"secret_key": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
"kms_key_id": "xxxxxxxxxxxxxxxxxxxxxxx"
}
},
"listener": {
"tcp": {
"address": "0.0.0.0:8200",
"cluster_address": "0.0.0.0:8201",
"tls_disable": true
}
},
"cluster_addr": "http://vault.faume.local:8201",
"api_addr": "http://vault.faume.local:8200"
}
command: server
volumes:
- 'faume-vault:/vault'
ports:
- '8200:8200'
networks:
faume:
aliases:
- vault.faume.local
deploy:
mode: replicated
replicas: 1
restart_policy:
condition: on-failure
placement:
constraints:
- node.role==manager
volumes:
faume-vault:
networks:
faume:部署堆栈文件时，创建服务时不会出现错误，但服务不会运行。
服务日志如下：
faume-vault_faume-vault.1.xztddsvjaa2c@DevOps-Dhanushka | Couldn't start vault with IPC_LOCK. Disabling IPC_LOCK, please use --privileged or --cap-add IPC_LOCK
faume-vault_faume-vault.1.xkh8abjlzyel@DevOps-Dhanushka | Couldn't start vault with IPC_LOCK. Disabling IPC_LOCK, please use --privileged or --cap-add IPC_LOCK
faume-vault_faume-vault.1.xkh8abjlzyel@DevOps-Dhanushka | 2021-07-26T08:20:15.705Z [INFO] proxy environment: http_proxy= https_proxy= no_proxy=
faume-vault_faume-vault.1.xztddsvjaa2c@DevOps-Dhanushka | 2021-07-26T08:20:31.553Z [INFO] proxy environment: http_proxy= https_proxy= no_proxy=
faume-vault_faume-vault.1.xkh8abjlzyel@DevOps-Dhanushka | Cluster address must be set when using raft storage
faume-vault_faume-vault.1.xztddsvjaa2c@DevOps-Dhanushka | Cluster address must be set when using raft storage
faume-vault_faume-vault.1.5g7wzqm7fn0f@DevOps-Dhanushka | Couldn't start vault with IPC_LOCK. Disabling IPC_LOCK, please use --privileged or --cap-add IPC_LOCK
faume-vault_faume-vault.1.5g7wzqm7fn0f@DevOps-Dhanushka | 2021-07-26T08:20:23.070Z [INFO] proxy environment: http_proxy= https_proxy= no_proxy=
faume-vault_faume-vault.1.5g7wzqm7fn0f@DevOps-Dhanushka | Cluster address must be set when using raft storage
faume-vault_faume-vault.1.kf0k9eoou749@DevOps-Dhanushka | Couldn't start vault with IPC_LOCK. Disabling IPC_LOCK, please use --privileged or --cap-add IPC_LOCK
faume-vault_faume-vault.1.kf0k9eoou749@DevOps-Dhanushka | Cluster address must be set when using raft storage
faume-vault_faume-vault.1.kf0k9eoou749@DevOps-Dhanushka | 2021-07-26T08:20:39.894Z [INFO] proxy environment: http_proxy= https_proxy= no_proxy=似乎错误是"mlock“。但是我已经成功地配置了"mlock“变量。你能给我一些建议吗？
回答 1
Stack Overflow用户
回答已采纳
发布于 2021-07-26 08:51:54
您需要以特权模式运行您的faume-vault容器。
只需添加privileged: true选项即可。
这是支持的码头群只有在最近的版本(请参阅停靠者的特权模式组合成一群)，请确保您正在运行的最新版本。
请确保您理解与运行特权荚有关的安全关切。
页面原文内容由Stack Overflow提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：
https://stackoverflow.com/questions/68526826
复制相关文章
相似问题
腾讯云开发者
Copyright © 2013 - 2026 Tencent Cloud. All Rights Reserved. 腾讯云 版权所有
深圳市腾讯计算机系统有限公司 ICP备案/许可证号：粤B2-20090059 
粤公网安备44030502008569号
腾讯云计算（北京）有限责任公司 京ICP证150476号 | 京ICP备11018762号