-
Notifications
You must be signed in to change notification settings - Fork 2.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Docker task does not run under Network Service account #4449
Comments
Issue due to the fact that by default VSTSService runs as "network service" account instead of "System" and hence the problem. Changing it to run under "System" resolves the issue. |
I wonder if we should doc that. Reactivating for doc consideration |
@artisticcheese you need to configure your docker daemon to allow users from other groups. See the docker documentation for doing that. |
Correct, there is 2 ways to fix the problem and neither of those is documented on Docker task page and hence out of the box task will fail. |
Following line needs to be added to
|
@artisticcheese Yes that is the correct change. This is not specific to the task so it is not documented as part of it. It is general docker configuration. |
Don't do this. There is no group called "Network Service" and this will corrupt your daemon.json file:
|
@egorpavlikhin This is special group in Windows. If you don't have I assume you are running on unsupported version of Windows or it's some other edge case. As you can see from comments above this change works and confirmed by owners. |
@artisticcheese I am running current Windows 10 Pro build with Docker Desktop. The issue is likely that this doesn't work for Linux containers. I assume it tries to read the VMs groups, not Windows groups. |
Here is the likely answer for Linux containers in Docker Desktop: docker-archive/toolbox#636 (comment) |
Agent version and platform
Version of your agent? 2.112.o
Windows 2016
VSTS type and version
On-prem TFS 2017 RTM
## **What's not working?**
Running docker client does not work if it runs under Network Service account as service
Build logs
Diag logs
The text was updated successfully, but these errors were encountered: