Dockerized Kibana外部化日志

Question

I have been trying to externalize kibana logs which is running in a docker container with no luck. My docker compose is as follows:

  kibana:
  image: kibana:latest
  container_name: kib
  ports:
    - "5601:5601"
  links:
    - elasticsearch
  volumes:
    - /var/log:/var/log

And Kibana.yml - logging.dest=/var/log/kibana.log

However when I run it I am getting an error as follows in the container:

events.js:85
      throw er; // Unhandled 'error' event
            ^
Error: EACCES, open '/var/log/kibana.log'
    at Error (native)

It looks like a permissions issue (I am running it on Ubuntu FYI). I set the permissions on the folder on the host to 7777. Any ideas? Thanks

Answer 1

The kibana process is run as kibana user (defined in the Dockerfile) by the ENTRYPOINT "/docker-entrypoint.sh" script .

As seen in this similar issue

The dockerfile creates a user named sinopia and runs everything as that.
In general this is good practice, however, when accessing the host file system docker uses the same uid on the host as is used on the container . Root in container has root access on host, and user sinopia with id 1000 in container is mapped to user 1000 on host.

If you create a user on the host with id 1000 you can then grant this user permissions to the host directory as desired.

Check the id of the user sinatra created by the Dockerfile, and see if you can grant access to that same id on your host.

If you chmod +777 , try again the docker-compose up . (that is done for other docker images like libreboard )

The OP sharman explains in the comments why the chmod 777 wasn't effective:

Yes I had the user created (so that I could run docker without sudo) and was UID 1000 GID 1000.
However my volume mapping was incorrect - I have mapped the volume to a non existent folder on kibana and config file was point to this one.