无法构建 docker 映像，"must be a root user"

Question

我正在通过在容器中安装应用程序(应该是用于安装的根用户(来创建docker映像。

# cat Dockerfile 
FROM ubuntu:16.04
COPY $pwd/intel_virtual_gateway_console64_1_9_0.tar /root/
COPY $pwd/login.exp /root/
WORKDIR /root/
RUN tar -xvf intel_virtual_gateway_console64_1_9_0.tar 
RUN apt-get update && apt-get install -y expect 
                      expect-dev 
                      libxml2-utils
RUN whoami
RUN expect login.exp

docker图像构建过程：

root@labadmin-VirtualBox:~/RAGHU/krishna# docker build -t release:4.0 .
Sending build context to Docker daemon  633.5MB
Step 1/8 : FROM ubuntu:16.04
 ---> 6a2f32de169d
Step 2/8 : COPY $pwd/intel_virtual_gateway_console64_1_9_0.tar /root/
 ---> Using cache
 ---> 36e9ea407082
Step 3/8 : COPY $pwd/login.exp /root/
 ---> Using cache
 ---> 0fad538973d4
Step 4/8 : WORKDIR /root/
 ---> Using cache
 ---> f5d7f36bc37f
Step 5/8 : RUN tar -xvf intel_virtual_gateway_console64_1_9_0.tar
 ---> Using cache
 ---> 6cab428f1bc2
Step 6/8 : RUN apt-get update && apt-get install -y expect                       expect-dev                       libxml2-utils
 ---> Using cache
 ---> 5bb1ee67332f

确认容器作为root用户运行：

Step 7/8 : RUN whoami
 ---> Running in 112b87d77a08
root
 ---> 0c7eb38cc06b
Removing intermediate container 112b87d77a08
Step 8/8 : RUN expect login.exp
 ---> Running in 5f186baf2f8d
spawn ./virtualgatewayconsole_package/virtual_gateway_console_intel64
Install Error
--------------------------------------------------------------------------------
To install the application, you must be a root user.
--------------------------------------------------------------------------------
Type any key to exit: ^C

无法确定应用程序安装为何即使以root用户的方式运行。

运行。

编辑：添加login.exp脚本：此脚本是如此基础，以至于完成我的功能。

#cat login.exp 
#!/usr/bin/expect -f
if 0 {
     *************************READ THIS BEFORE START*********************
     User password must consist of at least 3 of the following categories: 
     uppercase, lowercase, numeric, and non-alphanumeric. In case of violation
     of this rule the Installation will fail!
     ********************************************************************
     }
set passwd "ISHAAN@p2017"
set username "raghu"
spawn ./virtualgatewayconsole_package/virtual_gateway_console_intel64
expect "Press Enter key to continue or q to quit:" 
send "n" 
expect "Press ENTER for more, or q when done"  
send "q" 
sleep 5
#expect "conditions of this license agreement?"
expect "*(accept/decline): "  
send "acceptn" 
#Product installation
expect "*Please type a selection [1]:" 
send "n" 
expect "*Please type a selection (Press Enter to next):" 
send "n" 
sleep 2
#Configure TLS settings
expect "*Enter TLS keystore password (only numbers, letters and !@#$%^*()_+{}|.:?=-):"
send $passwd
send "n"
expect "*Retype TLS keystore password:"
send $passwd
send "n"
sleep 2
expect "Please type a selection (Press Enter to next):"
send "n"
#Configure host
expect "Please type a selection (Press Enter to next):"
send "n"
expect "Please type a selection (Press Enter to next):"
send "n"
#Configure user for logging on the management console
expect "Please type a selection (Press Enter to next):"
send "n"
sleep 2
expect "Enter user password (only numbers, letters, spaces and !@#$%^*()_+{}|.:?=-):"
send $passwd
send "n"
expect "Retype user password:"
send $passwd
send "n"
expect "Please type a selection (Press Enter to next):"
send "n"
sleep 2
#Configure PostgreSQL service
expect "Please type a selection (Press Enter to next):"
send "n"
expect "Enter PostgreSQL user password (only numbers, letters and !@#$%^*()_+{}|.:?=-):"
send $passwd
send "n"
expect "Retype PostgreSQL user password:"
send $passwd
send "n"
expect "Please type a selection (Press Enter to next):" 
send "n"
sleep 60
#Create Keystore
expect "What is your first and last name?"
send $username
send "n"
expect "What is the name of your organizational unit?"
send "radisys"
send "n"
expect "What is the name of your organization?"
send "radisys"
send "n"
sleep 2
expect "What is the name of your City or Locality?"
send "banglore"
send "n"
expect "What is the name of your State or Province?"
send "karnataka"
send "n"
expect "What is the two-letter country code for this unit?"
send "IND"
send "n"
sleep 2
expect "Is CN=raghu, OU=radisys, O=radisys, L=banglore, ST=karnataka, C=IND correct?"
send "yes"
send "n"
sleep 2
expect "Please type a selection [q]:"
send "q"
expect eof

Answer 1

root的容器版本和主机上知道的根本不一定是同一件事。最大的区别是Docker从根用户中删除了各种功能，以防止他们从容器中脱颖而出，因此用户无法访问物理硬件设备，在该设备上可以将硬盘直接安装在容器中或调整CGroup内部。设置以逃脱命名空间。

从您正在运行的文件的名称中，看起来您正在尝试安装一个需要访问硬件的KVM。我认为这不是该应用程序设计的容器的最佳用例，该容器是在此应用程序设计时与硬件进行隔离的隔离，并以硬件特定的配置和访问为关键要求。

。

虽然docker build不允许使用硬件访问，但您可以使用docker run --privileged手动执行安装，然后再执行docker commit以将容器保存到图像中。通常，这是您要构建图像的最后方式，但是在这种情况下，这可能是唯一的方法，假设它是可能的。