[GH-ISSUE #375] Docker-compose deployment error when running container: PermissionError: [Errno 13] Permission denied: #250

Closed
opened 2026-02-25 20:35:16 +03:00 by kerem · 7 comments
Owner

Originally created by @jzt308 on GitHub (Jul 11, 2021).
Original GitHub issue: https://github.com/benbusby/whoogle-search/issues/375

Hi all,
this morning i noticed that my private whoogle deployment stopped. I didn't change anything and am running the latest version (see compose file). I tried to run it on a different server (Debian stable with latest docker and docker-compose installed) where no previous images where deployed but no joy. Same error. I tried disabling the tmpfs section in my compose file but this makes no difference.
Before posting I searched for this issue but had no luck finding it so I'm hoping you can help.

OS: Distributor ID: Debian
Description: Debian GNU/Linux 10 (buster)
Release: 10
Codename: buster
Docker-compose: docker-compose version 1.29.2, build 5becea4c
Docker: Server: Docker Engine - Community
Engine: Version: 20.10.7

Error:
today at 11:18 Jul 11 09:18:13.777 [notice] Tor 0.3.5.15 running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1d, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd 1.3.8.
today at 11:18 Jul 11 09:18:13.777 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning
today at 11:18 Jul 11 09:18:13.777 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc".
today at 11:18 Jul 11 09:18:13.777 [notice] Read configuration file "/etc/tor/torrc".
today at 11:18 Jul 11 09:18:13.789 [warn] Error setting groups to gid 102: "Operation not permitted".
today at 11:18 Jul 11 09:18:13.789 [warn] If you set the "User" option, you must start Tor as root.
today at 11:18 Jul 11 09:18:13.789 [warn] Failed to parse/validate config: Problem with User value. See logs for details.
today at 11:18 Jul 11 09:18:13.789 [err] Reading config failed--see warnings above.
today at 11:18 Traceback (most recent call last):
today at 11:18 File "/usr/local/lib/python3.8/runpy.py", line 185, in _run_module_as_main
today at 11:18 mod_name, mod_spec, code = _get_module_details(mod_name, _Error)
today at 11:18 File "/usr/local/lib/python3.8/runpy.py", line 144, in _get_module_details
today at 11:18 return _get_module_details(pkg_main_name, error)
today at 11:18 File "/usr/local/lib/python3.8/runpy.py", line 111, in _get_module_details
today at 11:18 import(pkg_name)
today at 11:18 File "/whoogle/app/init.py", line 84, in
today at 11:18 os.makedirs(app.config['SESSION_FILE_DIR'])
today at 11:18 File "/usr/local/lib/python3.8/os.py", line 223, in makedirs
today at 11:18 mkdir(name, mode)
today at 11:18 PermissionError: [Errno 13] Permission denied: '/config/session'

Docker-compose:
version: '3.8'

services:
whoogle-search:
image: benbusby/whoogle-search
container_name: whoogle-search
restart: unless-stopped

security_opt:
  - no-new-privileges
cap_drop:
  - ALL
read_only: true

ports:
  - 5000:5000

tmpfs:
  - /config/:size=10M,uid=102,gid=102,mode=1700
  - /var/lib/tor/:size=10M,uid=102,gid=102,mode=1700
  - /run/tor/:size=1M,uid=102,gid=102,mode=1700
Originally created by @jzt308 on GitHub (Jul 11, 2021). Original GitHub issue: https://github.com/benbusby/whoogle-search/issues/375 Hi all, this morning i noticed that my private whoogle deployment stopped. I didn't change anything and am running the latest version (see compose file). I tried to run it on a different server (Debian stable with latest docker and docker-compose installed) where no previous images where deployed but no joy. Same error. I tried disabling the tmpfs section in my compose file but this makes no difference. Before posting I searched for this issue but had no luck finding it so I'm hoping you can help. OS: Distributor ID: Debian Description: Debian GNU/Linux 10 (buster) Release: 10 Codename: buster Docker-compose: docker-compose version 1.29.2, build 5becea4c Docker: Server: Docker Engine - Community Engine: Version: 20.10.7 Error: today at 11:18 Jul 11 09:18:13.777 [notice] Tor 0.3.5.15 running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1d, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd 1.3.8. today at 11:18 Jul 11 09:18:13.777 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning today at 11:18 Jul 11 09:18:13.777 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". today at 11:18 Jul 11 09:18:13.777 [notice] Read configuration file "/etc/tor/torrc". today at 11:18 Jul 11 09:18:13.789 [warn] Error setting groups to gid 102: "Operation not permitted". today at 11:18 Jul 11 09:18:13.789 [warn] If you set the "User" option, you must start Tor as root. today at 11:18 Jul 11 09:18:13.789 [warn] Failed to parse/validate config: Problem with User value. See logs for details. today at 11:18 Jul 11 09:18:13.789 [err] Reading config failed--see warnings above. today at 11:18 Traceback (most recent call last): today at 11:18 File "/usr/local/lib/python3.8/runpy.py", line 185, in _run_module_as_main today at 11:18 mod_name, mod_spec, code = _get_module_details(mod_name, _Error) today at 11:18 File "/usr/local/lib/python3.8/runpy.py", line 144, in _get_module_details today at 11:18 return _get_module_details(pkg_main_name, error) today at 11:18 File "/usr/local/lib/python3.8/runpy.py", line 111, in _get_module_details today at 11:18 __import__(pkg_name) today at 11:18 File "/whoogle/app/__init__.py", line 84, in <module> today at 11:18 os.makedirs(app.config['SESSION_FILE_DIR']) today at 11:18 File "/usr/local/lib/python3.8/os.py", line 223, in makedirs today at 11:18 mkdir(name, mode) today at 11:18 PermissionError: [Errno 13] Permission denied: '/config/session' Docker-compose: version: '3.8' services: whoogle-search: image: benbusby/whoogle-search container_name: whoogle-search restart: unless-stopped security_opt: - no-new-privileges cap_drop: - ALL read_only: true ports: - 5000:5000 tmpfs: - /config/:size=10M,uid=102,gid=102,mode=1700 - /var/lib/tor/:size=10M,uid=102,gid=102,mode=1700 - /run/tor/:size=1M,uid=102,gid=102,mode=1700
kerem closed this issue 2026-02-25 20:35:16 +03:00
Author
Owner

@bruvv commented on GitHub (Jul 11, 2021):

make sure the PGUD and PUID have the correct write permission for /config/

<!-- gh-comment-id:877775195 --> @bruvv commented on GitHub (Jul 11, 2021): make sure the PGUD and PUID have the correct write permission for `/config/`
Author
Owner

@jzt308 commented on GitHub (Jul 11, 2021):

Maybe I don't understand. I am not specifying a PUID or PGID in the docker-compose and am running the process under root. There are no volume mappings so where do I need to specify them? (Strange thing is it was working and I didn't change a thing).

<!-- gh-comment-id:877789180 --> @jzt308 commented on GitHub (Jul 11, 2021): Maybe I don't understand. I am not specifying a PUID or PGID in the docker-compose and am running the process under root. There are no volume mappings so where do I need to specify them? (Strange thing is it was working and I didn't change a thing).
Author
Owner

@asitemade4u commented on GitHub (Jan 25, 2022):

I have the exact same issue. Shall I create user with userid = 102 on the host machine?

<!-- gh-comment-id:1021630763 --> @asitemade4u commented on GitHub (Jan 25, 2022): I have the exact same issue. Shall I create user with userid = 102 on the host machine?
Author
Owner

@Painkiller16 commented on GitHub (Jan 26, 2022):

I also have same issue on debian 10 with portainer template, how can repair issue??

<!-- gh-comment-id:1022631023 --> @Painkiller16 commented on GitHub (Jan 26, 2022): I also have same issue on debian 10 with portainer template, how can repair issue??
Author
Owner

@Albonycal commented on GitHub (Jan 27, 2022):

  • If you are using docker-compose this release will break your instance
    unless you update your docker-compose.yml with the latest changes:

github.com/benbusby/whoogle-search@1af4566991/docker-compose.yml (L14)

github.com/benbusby/whoogle-search@1af4566991/docker-compose.yml (L19-L22)

On Thu, Jan 27, 2022 at 3:14 AM Painkiller16 @.***>
wrote:

I also have same issue on debian 10 with portainer template, how can
repair issue??


Reply to this email directly, view it on GitHub
https://github.com/benbusby/whoogle-search/issues/375#issuecomment-1022631023,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AP7TNJ3AI65OWBSD32H6Q6DUYBTNTANCNFSM5AFDRTAQ
.
You are receiving this because you are subscribed to this thread.Message
ID: @.***>

<!-- gh-comment-id:1022828149 --> @Albonycal commented on GitHub (Jan 27, 2022): - If you are using docker-compose this release will break your instance unless you update your docker-compose.yml with the latest changes: - https://github.com/benbusby/whoogle-search/blob/1af4566991f5248fd0d3576ca4fbcc0a84293004/docker-compose.yml#L14 - https://github.com/benbusby/whoogle-search/blob/1af4566991f5248fd0d3576ca4fbcc0a84293004/docker-compose.yml#L19-L22 On Thu, Jan 27, 2022 at 3:14 AM Painkiller16 ***@***.***> wrote: > I also have same issue on debian 10 with portainer template, how can > repair issue?? > > — > Reply to this email directly, view it on GitHub > <https://github.com/benbusby/whoogle-search/issues/375#issuecomment-1022631023>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AP7TNJ3AI65OWBSD32H6Q6DUYBTNTANCNFSM5AFDRTAQ> > . > You are receiving this because you are subscribed to this thread.Message > ID: ***@***.***> >
Author
Owner

@asitemade4u commented on GitHub (Jan 27, 2022):

It worked, Thanks!

On 1/26/22 16:44, Painkiller16 wrote:

I also have same issue on debian 10 with portainer template, how can
repair issue??


Reply to this email directly, view it on GitHub
https://github.com/benbusby/whoogle-search/issues/375#issuecomment-1022631023,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ACXN4CRDR46AETNNPCXXEY3UYBTNNANCNFSM5AFDRTAQ.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

You are receiving this because you commented.Message ID:
@.***>

<!-- gh-comment-id:1023734370 --> @asitemade4u commented on GitHub (Jan 27, 2022): It worked, Thanks! On 1/26/22 16:44, Painkiller16 wrote: > > I also have same issue on debian 10 with portainer template, how can > repair issue?? > > — > Reply to this email directly, view it on GitHub > <https://github.com/benbusby/whoogle-search/issues/375#issuecomment-1022631023>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/ACXN4CRDR46AETNNPCXXEY3UYBTNNANCNFSM5AFDRTAQ>. > Triage notifications on the go with GitHub Mobile for iOS > <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> > or Android > <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. > > You are receiving this because you commented.Message ID: > ***@***.***> >
Author
Owner

@Albonycal commented on GitHub (Jan 28, 2022):

😀

On Fri, Jan 28, 2022 at 4:55 AM Stephen S. @.***> wrote:

It worked, Thanks!

On 1/26/22 16:44, Painkiller16 wrote:

I also have same issue on debian 10 with portainer template, how can
repair issue??


Reply to this email directly, view it on GitHub
<
https://github.com/benbusby/whoogle-search/issues/375#issuecomment-1022631023>,

or unsubscribe
<
https://github.com/notifications/unsubscribe-auth/ACXN4CRDR46AETNNPCXXEY3UYBTNNANCNFSM5AFDRTAQ
.
Triage notifications on the go with GitHub Mobile for iOS
<
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675>

or Android
<
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

You are receiving this because you commented.Message ID:
@.***>


Reply to this email directly, view it on GitHub
https://github.com/benbusby/whoogle-search/issues/375#issuecomment-1023734370,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AP7TNJZEPZAXZXYYLASXIA3UYHIAPANCNFSM5AFDRTAQ
.
You are receiving this because you commented.Message ID:
@.***>

<!-- gh-comment-id:1023854919 --> @Albonycal commented on GitHub (Jan 28, 2022): 😀 On Fri, Jan 28, 2022 at 4:55 AM Stephen S. ***@***.***> wrote: > It worked, Thanks! > > On 1/26/22 16:44, Painkiller16 wrote: > > > > I also have same issue on debian 10 with portainer template, how can > > repair issue?? > > > > — > > Reply to this email directly, view it on GitHub > > < > https://github.com/benbusby/whoogle-search/issues/375#issuecomment-1022631023>, > > > or unsubscribe > > < > https://github.com/notifications/unsubscribe-auth/ACXN4CRDR46AETNNPCXXEY3UYBTNNANCNFSM5AFDRTAQ > >. > > Triage notifications on the go with GitHub Mobile for iOS > > < > https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> > > > or Android > > < > https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. > > > > > You are receiving this because you commented.Message ID: > > ***@***.***> > > > > — > Reply to this email directly, view it on GitHub > <https://github.com/benbusby/whoogle-search/issues/375#issuecomment-1023734370>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AP7TNJZEPZAXZXYYLASXIA3UYHIAPANCNFSM5AFDRTAQ> > . > You are receiving this because you commented.Message ID: > ***@***.***> >
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/whoogle-search#250
No description provided.