Help to get Coder in offline / airgap working (Docker) #15039

Y3NK · 2024-10-10T16:54:59Z

Y3NK
Oct 10, 2024

Hello everyone and thank you for your precious help :-)
I am trying to setup Coder in an airgap environment.
My idea was to get Coder in a docker, using the docker socket in volume to allow Coder to instantiates workspace in host (and not docker in docker)
Does that sounds like a good solution in your opinion ? or using K8s would be a better approach ?
(I am thinking of using volume to allow persistence in dockers).

I am really struggling with this setup. docker-compose.yml file below
I am able to see the web GUI using port 8081, but encounter issue when trying to setup template (the Docker example for instance).

So my 2 questions:
- Am I going in the right direction ? (Because the "Here's an example Dockerfile:" dockerfile in https://coder.com/docs/install/offline is quite different, should I rather look to this one ?)
- Would it be better to use K8s (minikube?) as backplane ?
Many thanks for your help

I tried to contact sales, but they open subscriptions at 100+ users, I would be glad if I can emboard 5, so no EE for me
:-)

Coder docker-compose.yml file (Coder + PG)

services:
  coder:
    image: ghcr.io/coder/coder:latest
    restart: unless-stopped
    ports:
      - "8081:8080"
      - "3000:3000"

    environment:
      - CODER_PG_CONNECTION_URL=postgresql://coder:Pg2024_Psw@db:5432/coder?sslmode=disable
      - CODER_DB_TYPE=postgres
      - CODER_ADMIN_PASSWORD=Coder_@dmin
      - CODER_HTTP_ADDRESS=0.0.0.0:8080

    volumes:
      - coder_data:/data
      - /home/devlan/coder/coder-setup/templates:/home/coder/templates  # New volume for templates
      - /var/run/docker.sock:/var/run/docker.sock  # Mount Docker socket


  db:
    image: postgres:latest
    restart: unless-stopped
    ports:
      - "5432:5432"
    environment:
      - POSTGRES_USER=coder
      - POSTGRES_PASSWORD=Pg2024_Psw
      - POSTGRES_DB=coder
    volumes:
      - db_data:/var/lib/postgresql/data

volumes:
  coder_data:
  db_data:

Answered by Y3NK

Nov 6, 2024

Removing the
apk del terraform && \

Allow the build to finish.
Then starting PG and all envs seems to be wroking fine.
But when I try to create a template, it ends up in a Black screen running forever.

Logs in docker show:
2024-11-06 09:55:29.033 [info] provisionerd-ab1c84dc35b1-1: unpacking template source archive session_id=9cd4daae-5de7-42e8-bac6-da6a50853ac1 size_bytes=11776
2024-11-06 09:55:29.085 [info] provisionerd-ab1c84dc35b1-1: clean stale Terraform plugins cache_path=/home/coder/.cache/coder/provisioner-1/tf
2024-11-06 09:55:29.898 [info] provisionerd-ab1c84dc35b1-1.runner: dry-run provision failure job_id=5730637d-39e1-40cc-b064-5ad4a135f7ef error="terraform plan: exit status 1"

View full answer

matifali · 2024-10-11T09:08:46Z

matifali
Oct 11, 2024
Maintainer

To run air-gapped. You need to create a custom coder image as described in https://coder.com/docs/install/offline, push it to some registry accessible in your air-gapped network, and use that in your docker-compose.

YOu can also use minikube if you wish so and use k8s as a control-plane. In this case, too you need to use the custom image pushed to a private registry accessible on your local network.

1 reply

Y3NK Oct 11, 2024
Author

Many thanks for your help Matifali.
I created a custom image based on the following dockerfile. the one example, only commenting this part:

# If you need to install a different version of Terraform, you can do so here.
# The below step is optional if you wish to keep the existing version.
# See https://github.com/coder/coder/blob/main/provisioner/terraform/install.go#L23-L24
# for supported Terraform versions.
# ARG TERRAFORM_VERSION=1.9.2
# RUN apk update && \
#     apk del terraform && \
#     curl -LOs https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip \
#     && unzip -o terraform_${TERRAFORM_VERSION}_linux_amd64.zip \
#     && mv terraform /opt/terraform \
#     && rm terraform_${TERRAFORM_VERSION}_linux_amd64.zip
# ENV PATH=/opt/terraform:${PATH}

I put the docker-compose for reference at the end too, but I encounter an issue (below):

Have you an idea about what may be wrongly done by myself ? Have you tried this process yourself ?
If I wanted to use K8s, I would use the same custom image and use the Helm chart to deploy it, right ?

Many thanks

goroutine 1 [running]:
github.com/coder/coder/v2/cli.traceError({0x97ede60?, 0xc000b02e70})
/home/runner/work/coder/coder/cli/root.go:1119 +0x71
github.com/coder/coder/v2/cli.cliHumanFormatError({0xc00082c580, 0x28e}, {0x97ede60, 0xc000b02e70}, 0x5f?)
/home/runner/work/coder/coder/cli/root.go:985 +0x1af
github.com/coder/coder/v2/cli.cliHumanFormatError({0xc00027eb40, 0x23d}, {0x97ede60, 0xc000b02e40}, 0x58?)
/home/runner/work/coder/coder/cli/root.go:985 +0x21f
github.com/coder/coder/v2/cli.cliHumanFormatError({0xc00035c5a0, 0x1de}, {0x97ede60, 0xc000b02e10}, 0x179?)
/home/runner/work/coder/coder/cli/root.go:985 +0x21f
github.com/coder/coder/v2/cli.cliHumanFormatError({0xc000168340, 0x186}, {0x97ede60, 0xc000b02de0}, 0x2b8d7a0?)
/home/runner/work/coder/coder/cli/root.go:985 +0x21f
github.com/coder/coder/v2/cli.cliHumanFormatError({0xc0001681a0, 0xd}, {0x97eb440, 0xc0007b2880}, 0x4833b5?)
/home/runner/work/coder/coder/cli/root.go:985 +0x21f
github.com/coder/coder/v2/cli.cliHumanFormatError({0x0, 0x0}, {0x97eb220, 0xc0006bd0c0}, 0xc00089fc60?)
/home/runner/work/coder/coder/cli/root.go:985 +0x21f
github.com/coder/coder/v2/cli.cliHumanFormatError({0x0, 0x0}, {0x97ea6a0, 0xc000b02cf0}, 0xc000b02cf0?)
/home/runner/work/coder/coder/cli/root.go:966 +0x155
github.com/coder/coder/v2/cli.(*PrettyErrorFormatter).Format(0xc00089fdb0, {0x97ea6a0?, 0xc000b02cf0?})
/home/runner/work/coder/coder/cli/root.go:927 +0x45
github.com/coder/coder/v2/cli.(*RootCmd).RunWithSubcommands(0xc0007b4480, {0xc00036a588, 0x30, 0x57})
/home/runner/work/coder/coder/cli/root.go:175 +0x348
main.main()
/home/runner/work/coder/coder/enterprise/cmd/coder/main.go:11 +0x38
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x18 pc=0x25f34d1]

goroutine 1 [running]:
github.com/coder/coder/v2/cli.traceError({0x97ede60?, 0xc000169740})
/home/runner/work/coder/coder/cli/root.go:1119 +0x71
github.com/coder/coder/v2/cli.cliHumanFormatError({0xc00081e580, 0x28e}, {0x97ede60, 0xc000169740}, 0x5f?)
/home/runner/work/coder/coder/cli/root.go:985 +0x1af
github.com/coder/coder/v2/cli.cliHumanFormatError({0xc00027e900, 0x23d}, {0x97ede60, 0xc000169710}, 0x58?)
/home/runner/work/coder/coder/cli/root.go:985 +0x21f
github.com/coder/coder/v2/cli.cliHumanFormatError({0xc00035c5a0, 0x1de}, {0x97ede60, 0xc0001696e0}, 0x179?)
/home/runner/work/coder/coder/cli/root.go:985 +0x21f
github.com/coder/coder/v2/cli.cliHumanFormatError({0xc00003a4e0, 0x186}, {0x97ede60, 0xc0001696b0}, 0x2b8d7a0?)
/home/runner/work/coder/coder/cli/root.go:985 +0x21f
github.com/coder/coder/v2/cli.cliHumanFormatError({0xc00003a340, 0xd}, {0x97eb440, 0xc000730080}, 0x4833b5?)
/home/runner/work/coder/coder/cli/root.go:985 +0x21f
github.com/coder/coder/v2/cli.cliHumanFormatError({0x0, 0x0}, {0x97eb220, 0xc0005ef140}, 0xc0008a9c60?)
/home/runner/work/coder/coder/cli/root.go:985 +0x21f
github.com/coder/coder/v2/cli.cliHumanFormatError({0x0, 0x0}, {0x97ea6a0, 0xc0001695c0}, 0xc0001695c0?)
/home/runner/work/coder/coder/cli/root.go:966 +0x155
github.com/coder/coder/v2/cli.(*PrettyErrorFormatter).Format(0xc0008a9db0, {0x97ea6a0?, 0xc0001695c0?})
/home/runner/work/coder/coder/cli/root.go:927 +0x45
github.com/coder/coder/v2/cli.(*RootCmd).RunWithSubcommands(0xc0007f02d0, {0xc00036a588, 0x30, 0x57})
/home/runner/work/coder/coder/cli/root.go:175 +0x348
main.main()
/home/runner/work/coder/coder/enterprise/cmd/coder/main.go:11 +0x38

Terminal will be reused by tasks, press any key to close it.

full dockerfile.yaml


FROM ghcr.io/coder/coder:latest

USER root

RUN apk add curl unzip

# Create directory for the Terraform CLI (and assets)
RUN mkdir -p /opt/terraform

# Terraform is already included in the official Coder image.
# See https://github.com/coder/coder/blob/main/scripts/Dockerfile.base#L15
# If you need to install a different version of Terraform, you can do so here.
# The below step is optional if you wish to keep the existing version.
# See https://github.com/coder/coder/blob/main/provisioner/terraform/install.go#L23-L24
# for supported Terraform versions.
# ARG TERRAFORM_VERSION=1.9.2
# RUN apk update && \
#     apk del terraform && \
#     curl -LOs https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip \
#     && unzip -o terraform_${TERRAFORM_VERSION}_linux_amd64.zip \
#     && mv terraform /opt/terraform \
#     && rm terraform_${TERRAFORM_VERSION}_linux_amd64.zip
# ENV PATH=/opt/terraform:${PATH}

# Additionally, a Terraform mirror needs to be configured
# to download the Terraform providers used in Coder templates.
# There are two options:

# Option 1) Use a filesystem mirror.
#  We can seed this at build-time or by mounting a volume to
#  /opt/terraform/plugins in the container.
#  https://developer.hashicorp.com/terraform/cli/config/config-file#filesystem_mirror
#  Be sure to add all the providers you use in your templates to /opt/terraform/plugins

RUN mkdir -p /home/coder/.terraform.d/plugins/registry.terraform.io
ADD filesystem-mirror-example.tfrc /home/coder/.terraformrc

# Optionally, we can "seed" the filesystem mirror with common providers.
# Comment out lines 40-49 if you plan on only using a volume or network mirror:
WORKDIR /home/coder/.terraform.d/plugins/registry.terraform.io
ARG CODER_PROVIDER_VERSION=1.0.1
RUN echo "Adding coder/coder v${CODER_PROVIDER_VERSION}" \
    && mkdir -p coder/coder && cd coder/coder \
    && curl -LOs https://github.com/coder/terraform-provider-coder/releases/download/v${CODER_PROVIDER_VERSION}/terraform-provider-coder_${CODER_PROVIDER_VERSION}_linux_amd64.zip
ARG DOCKER_PROVIDER_VERSION=3.0.2
RUN echo "Adding kreuzwerker/docker v${DOCKER_PROVIDER_VERSION}" \
    && mkdir -p kreuzwerker/docker && cd kreuzwerker/docker \
    && curl -LOs https://github.com/kreuzwerker/terraform-provider-docker/releases/download/v${DOCKER_PROVIDER_VERSION}/terraform-provider-docker_${DOCKER_PROVIDER_VERSION}_linux_amd64.zip
ARG KUBERNETES_PROVIDER_VERSION=2.23.0
RUN echo "Adding kubernetes/kubernetes v${KUBERNETES_PROVIDER_VERSION}" \
    && mkdir -p hashicorp/kubernetes && cd hashicorp/kubernetes \
    && curl -LOs https://releases.hashicorp.com/terraform-provider-kubernetes/${KUBERNETES_PROVIDER_VERSION}/terraform-provider-kubernetes_${KUBERNETES_PROVIDER_VERSION}_linux_amd64.zip
ARG AWS_PROVIDER_VERSION=5.19.0
RUN echo "Adding aws/aws v${AWS_PROVIDER_VERSION}" \
    && mkdir -p aws/aws && cd aws/aws \
    && curl -LOs https://releases.hashicorp.com/terraform-provider-aws/${AWS_PROVIDER_VERSION}/terraform-provider-aws_${AWS_PROVIDER_VERSION}_linux_amd64.zip

RUN chown -R coder:coder /home/coder/.terraform*
WORKDIR /home/coder

# Option 2) Use a network mirror.
#  https://developer.hashicorp.com/terraform/cli/config/config-file#network_mirror
#  Be sure uncomment line 60 and edit network-mirror-example.tfrc to
#  specify the HTTPS base URL of your mirror.

# ADD network-mirror-example.tfrc /home/coder/.terraformrc

USER coder

# Use the .terraformrc file to inform Terraform of the locally installed providers.
ENV TF_CLI_CONFIG_FILE=/home/coder/.terraformrc

docker-compose.yml

version: "3.9"
services:
  coder:
    # image: ghcr.io/coder/coder:latest
    image: devlan_coder:latest
    restart: unless-stopped
    ports:
      - "8081:8080"
      - "3000:3000"

    environment:
      - CODER_PG_CONNECTION_URL=postgresql://coder:Pg2024_Psw@db:5432/coder?sslmode=disable
      - CODER_DB_TYPE=postgres
      - CODER_ADMIN_PASSWORD=Coder_@dmin
      - CODER_HTTP_ADDRESS=0.0.0.0:8080
      - CODER_TELEMETRY_ENABLE= "false" # Disable telemetry
      - CODER_BLOCK_DIRECT= "true" # force SSH traffic through control plane's DERP proxy
      - CODER_DERP_SERVER_STUN_ADDRESSES= "disable" # Only use relayed connections
      - CODER_UPDATE_CHECK= "false" # Disable automatic update checks

    volumes:
      # - coder_data:/data
      # - /home/devlan/coder/coder-setup/templates:/home/coder/templates  # New volume for templates
      - /var/run/docker.sock:/var/run/docker.sock  # Mount Docker socket
      - ./plugins:/opt/terraform/plugins

  db:
    image: postgres:latest
    restart: unless-stopped
    ports:
      - "5432:5432"
    environment:
      - POSTGRES_USER=coder
      - POSTGRES_PASSWORD=Pg2024_Psw
      - POSTGRES_DB=coder
    volumes:
      - db_data:/var/lib/postgresql/data

volumes:
  coder_data:
  db_data:

Y3NK · 2024-10-12T17:53:31Z

Y3NK
Oct 12, 2024
Author

I think the main issue is around here:

/home/runner/work/coder/coder/enterprise/cmd/coder/main.go:11 +0x38
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x18 pc=0x25f34d1]

0 replies

Y3NK · 2024-10-14T12:46:31Z

Y3NK
Oct 14, 2024
Author

Hello @matifali , would you be able to give a try ?
I think something is mayber not right in /home/runner/work/coder/coder/cli/root.go

I tried to amend dockerfile from 2.14.2 to 2.16.0
For instance: FROM ghcr.io/coder/coder:v2.16.0
but still end up with this error.
On the dockerfile, the only amendment is to comment the row 19;
# apk del terraform && \
It seems to not exists and therefore failed. commenting that allow the dockerfile to build ok.
The docker-compose always end up in having coder looping in error:

Would you be kind enough to give a try from your side and tell me if you have the same issue ?

goroutine 1 [running]:
github.com/coder/coder/v2/cli.traceError({0x97ede60?, 0xc00052de18})
/home/runner/work/coder/coder/cli/root.go:1119 +0x71

the docker-compose.yml if you would just try to copy past:

version: "3.9"
services:
  coder:
    # image: ghcr.io/coder/coder:latest
    image: devlan_coder:2160
    restart: unless-stopped
    ports:
      - "8081:8088"
    #   - "3000:3000"

    environment:
      - CODER_PG_CONNECTION_URL=postgresql://coder:Pg2024_Psw@db:5432/coder?sslmode=disable
      - CODER_DB_TYPE=postgres
      - CODER_ADMIN_PASSWORD=Coder_@dmin
      - CODER_HTTP_ADDRESS=0.0.0.0:8088
      - CODER_TELEMETRY_ENABLE= "false" # Disable telemetry
      - CODER_BLOCK_DIRECT= "true" # force SSH traffic through control plane's DERP proxy
      - CODER_DERP_SERVER_STUN_ADDRESSES= "disable" # Only use relayed connections
      - CODER_UPDATE_CHECK= "false" # Disable automatic update checks

    # volumes:
      # - coder_data:/data
      # - /home/devlan/coder/coder-setup/templates:/home/coder/templates  # New volume for templates
      - /var/run/docker.sock:/var/run/docker.sock  # Mount Docker socket
      - ./plugins:/opt/terraform/plugins

  db:
    image: postgres:latest
    restart: unless-stopped
    ports:
      - "5432:5432"
    environment:
      - POSTGRES_USER=coder
      - POSTGRES_PASSWORD=Pg2024_Psw
      - POSTGRES_DB=coder
    # volumes:
    #   - db_data:/var/lib/postgresql/data

# volumes:
#   coder_data:
#   db_data:

Many thanks for your help; I tried that on 2 different computers and still face the issue. Thanks

0 replies

Y3NK · 2024-10-16T13:49:20Z

Y3NK
Oct 16, 2024
Author

Hello @matifali , by any chance have you been able to give a try to the docker build ? just to ensure that I am not going in the wrong direction.
If you don't have any issue when you run the docker just built, it means that the issue is on my side ;-)
Many thanks

12 replies

matifali Oct 28, 2024
Maintainer

Had been pretty occupied. I will give it a try this week.

Y3NK Nov 6, 2024
Author

Removing the
apk del terraform && \

Allow the build to finish.
Then starting PG and all envs seems to be wroking fine.
But when I try to create a template, it ends up in a Black screen running forever.

Logs in docker show:
2024-11-06 09:55:29.033 [info] provisionerd-ab1c84dc35b1-1: unpacking template source archive session_id=9cd4daae-5de7-42e8-bac6-da6a50853ac1 size_bytes=11776
2024-11-06 09:55:29.085 [info] provisionerd-ab1c84dc35b1-1: clean stale Terraform plugins cache_path=/home/coder/.cache/coder/provisioner-1/tf
2024-11-06 09:55:29.898 [info] provisionerd-ab1c84dc35b1-1.runner: dry-run provision failure job_id=5730637d-39e1-40cc-b064-5ad4a135f7ef error="terraform plan: exit status 1"
2024-11-06 09:55:29.905 [info] provisionerd-ab1c84dc35b1-1: recv done on Session session_id=9cd4daae-5de7-42e8-bac6-da6a50853ac1 error=EOF
2024-11-06 10:05:09.191 [info] dbpurge: purged old database entries duration=20.078522ms

Any clues on that ?
Thanks

Answer selected by matifali

matifali Nov 6, 2024
Maintainer

Could you set CODER_VERBOSE=true and TF_LOG=debug to get more verbose logs?

Y3NK Nov 6, 2024
Author

Many thanks for your help:

terraform environment variable: TF_LOG=debug
terraform environment variable: TF_CLI_CONFIG_FILE=/home/coder/.terraformrc
2024-11-06T11:13:34.515Z [INFO]  Terraform version: 1.9.8
2024-11-06T11:13:34.515Z [DEBUG] using github.com/hashicorp/go-tfe v1.58.0
2024-11-06T11:13:34.515Z [DEBUG] using github.com/hashicorp/hcl/v2 v2.20.0
2024-11-06T11:13:34.515Z [DEBUG] using github.com/hashicorp/terraform-svchost v0.1.1
2024-11-06T11:13:34.515Z [DEBUG] using github.com/zclconf/go-cty v1.14.4
2024-11-06T11:13:34.515Z [INFO]  Go runtime version: go1.22.7
2024-11-06T11:13:34.515Z [INFO]  CLI args: []string{"/opt/terraform/terraform", "init", "-no-color", "-input=false"}
2024-11-06T11:13:34.515Z [DEBUG] Attempting to open CLI config file: /home/coder/.terraformrc
2024-11-06T11:13:34.515Z [INFO]  Loading CLI configuration from /home/coder/.terraformrc
2024-11-06T11:13:34.516Z [DEBUG] Not reading CLI config directory because config location is overridden by environment variable
2024-11-06T11:13:34.516Z [DEBUG] checking for credentials in "/home/coder/.terraform.d/plugins"
2024-11-06T11:13:34.516Z [DEBUG] Explicit provider installation configuration is set
2024-11-06T11:13:34.517Z [INFO]  CLI command args: []string{"init", "-no-color", "-input=false"}
Initializing the backend...
2024-11-06T11:13:34.530Z [DEBUG] checking for provisioner in "."
2024-11-06T11:13:34.530Z [DEBUG] checking for provisioner in "/opt/terraform"
2024-11-06T11:13:34.531Z [DEBUG] checking for provisioner in "/home/coder/.terraform.d/plugins"
Initializing provider plugins...
- Finding latest version of coder/coder...
- Finding latest version of kreuzwerker/docker...
- Installing coder/coder v1.0.1...
- Installed coder/coder v1.0.1 (unauthenticated)
- Installing kreuzwerker/docker v3.0.2...
- Installed kreuzwerker/docker v3.0.2 (unauthenticated)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.
Warning: Incomplete lock file information for providers
Due to your customized provider installation methods, Terraform was forced to
calculate lock file checksums locally for the following providers:
  - coder/coder
  - kreuzwerker/docker
The current .terraform.lock.hcl file only includes checksums for linux_amd64,
so Terraform running on another platform will fail to install these
providers.
To calculate additional checksums for another platform, run:
  terraform providers lock -platform=linux_amd64
(where linux_amd64 is the platform to generate)
Terraform has been successfully initialized!
You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.
If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.
2024-11-06T11:13:34.955Z [INFO]  Terraform version: 1.9.8
2024-11-06T11:13:34.955Z [DEBUG] using github.com/hashicorp/go-tfe v1.58.0
2024-11-06T11:13:34.955Z [DEBUG] using github.com/hashicorp/hcl/v2 v2.20.0
2024-11-06T11:13:34.955Z [DEBUG] using github.com/hashicorp/terraform-svchost v0.1.1
2024-11-06T11:13:34.955Z [DEBUG] using github.com/zclconf/go-cty v1.14.4
2024-11-06T11:13:34.955Z [INFO]  Go runtime version: go1.22.7
2024-11-06T11:13:34.955Z [INFO]  CLI args: []string{"/opt/terraform/terraform", "plan", "-no-color", "-input=false", "-json", "-refresh=true", "-out=/home/coder/.cache/coder/provisioner-0/work/Session84584cb0-ff30-4239-b112-3b062b2d7860/terraform.tfplan", "-var", "docker_socket="}
2024-11-06T11:13:34.955Z [DEBUG] Attempting to open CLI config file: /home/coder/.terraformrc
2024-11-06T11:13:34.956Z [INFO]  Loading CLI configuration from /home/coder/.terraformrc
2024-11-06T11:13:34.956Z [DEBUG] Not reading CLI config directory because config location is overridden by environment variable
2024-11-06T11:13:34.956Z [DEBUG] checking for credentials in "/home/coder/.terraform.d/plugins"
2024-11-06T11:13:34.956Z [DEBUG] Explicit provider installation configuration is set
2024-11-06T11:13:34.957Z [INFO]  CLI command args: []string{"plan", "-no-color", "-input=false", "-json", "-refresh=true", "-out=/home/coder/.cache/coder/provisioner-0/work/Session84584cb0-ff30-4239-b112-3b062b2d7860/terraform.tfplan", "-var", "docker_socket="}
Terraform 1.9.8
2024-11-06T11:13:35.050Z [DEBUG] checking for provisioner in "."
2024-11-06T11:13:35.051Z [DEBUG] checking for provisioner in "/opt/terraform"
2024-11-06T11:13:35.051Z [DEBUG] checking for provisioner in "/home/coder/.terraform.d/plugins"
2024-11-06T11:13:35.051Z [INFO]  backend/local: starting Plan operation
2024-11-06T11:13:35.052Z [DEBUG] backend/local: Skipping interactive prompts for variables because input is disabled
2024-11-06T11:13:35.052Z [DEBUG] created provider logger: level=debug
2024-11-06T11:13:35.052Z [INFO]  provider: configuring client automatic mTLS
2024-11-06T11:13:35.065Z [DEBUG] provider: starting plugin: path=.terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1 args=[".terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1"]
2024-11-06T11:13:35.065Z [DEBUG] provider: plugin started: path=.terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1 pid=70
2024-11-06T11:13:35.065Z [DEBUG] provider: waiting for RPC address: plugin=.terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1
2024-11-06T11:13:35.076Z [INFO]  provider.terraform-provider-coder_v1.0.1: configuring server automatic mTLS: timestamp=2024-11-06T11:13:35.076Z
2024-11-06T11:13:35.092Z [DEBUG] provider: using plugin: version=5
2024-11-06T11:13:35.092Z [DEBUG] provider.terraform-provider-coder_v1.0.1: plugin address: address=/tmp/plugin2812510894 network=unix timestamp=2024-11-06T11:13:35.091Z
2024-11-06T11:13:35.108Z [DEBUG] provider.stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = error reading from server: EOF"
2024-11-06T11:13:35.109Z [INFO]  provider: plugin process exited: plugin=.terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1 id=70
2024-11-06T11:13:35.109Z [DEBUG] provider: plugin exited
2024-11-06T11:13:35.109Z [DEBUG] created provider logger: level=debug
2024-11-06T11:13:35.109Z [INFO]  provider: configuring client automatic mTLS
2024-11-06T11:13:35.114Z [DEBUG] provider: starting plugin: path=.terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2 args=[".terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2"]
2024-11-06T11:13:35.115Z [DEBUG] provider: plugin started: path=.terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2 pid=79
2024-11-06T11:13:35.115Z [DEBUG] provider: waiting for RPC address: plugin=.terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2
2024-11-06T11:13:35.126Z [INFO]  provider.terraform-provider-docker_v3.0.2: configuring server automatic mTLS: timestamp=2024-11-06T11:13:35.126Z
2024-11-06T11:13:35.146Z [DEBUG] provider.terraform-provider-docker_v3.0.2: plugin address: address=/tmp/plugin1983875259 network=unix timestamp=2024-11-06T11:13:35.146Z
2024-11-06T11:13:35.146Z [DEBUG] provider: using plugin: version=5
2024-11-06T11:13:35.175Z [DEBUG] provider.stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = error reading from server: EOF"
2024-11-06T11:13:35.176Z [INFO]  provider: plugin process exited: plugin=.terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2 id=79
2024-11-06T11:13:35.176Z [DEBUG] provider: plugin exited
2024-11-06T11:13:35.176Z [DEBUG] Building and walking validate graph
2024-11-06T11:13:35.177Z [DEBUG] ProviderTransformer: "coder_app.code-server" (*terraform.NodeValidatableResource) needs provider["registry.terraform.io/coder/coder"]
2024-11-06T11:13:35.177Z [DEBUG] ProviderTransformer: "docker_container.workspace" (*terraform.NodeValidatableResource) needs provider["registry.terraform.io/kreuzwerker/docker"]
2024-11-06T11:13:35.177Z [DEBUG] ProviderTransformer: "data.coder_workspace.me" (*terraform.NodeValidatableResource) needs provider["registry.terraform.io/coder/coder"]
2024-11-06T11:13:35.177Z [DEBUG] ProviderTransformer: "coder_agent.main" (*terraform.NodeValidatableResource) needs provider["registry.terraform.io/coder/coder"]
2024-11-06T11:13:35.177Z [DEBUG] ProviderTransformer: "docker_volume.home_volume" (*terraform.NodeValidatableResource) needs provider["registry.terraform.io/kreuzwerker/docker"]
2024-11-06T11:13:35.177Z [DEBUG] ProviderTransformer: "docker_image.main" (*terraform.NodeValidatableResource) needs provider["registry.terraform.io/kreuzwerker/docker"]
2024-11-06T11:13:35.177Z [DEBUG] ProviderTransformer: "data.coder_workspace_owner.me" (*terraform.NodeValidatableResource) needs provider["registry.terraform.io/coder/coder"]
2024-11-06T11:13:35.177Z [DEBUG] ProviderTransformer: "data.coder_provisioner.me" (*terraform.NodeValidatableResource) needs provider["registry.terraform.io/coder/coder"]
2024-11-06T11:13:35.177Z [DEBUG] ReferenceTransformer: "data.coder_workspace.me" references: []
2024-11-06T11:13:35.178Z [DEBUG] ReferenceTransformer: "local.username (expand)" references: [data.coder_workspace_owner.me]
2024-11-06T11:13:35.178Z [DEBUG] ReferenceTransformer: "coder_agent.main" references: [data.coder_workspace_owner.me data.coder_workspace_owner.me data.coder_workspace_owner.me data.coder_workspace_owner.me data.coder_workspace_owner.me data.coder_workspace_owner.me data.coder_provisioner.me]
2024-11-06T11:13:35.178Z [DEBUG] ReferenceTransformer: "docker_container.workspace" references: [data.coder_workspace.me data.coder_workspace_owner.me data.coder_workspace.me coder_agent.main docker_image.main coder_agent.main data.coder_workspace.me docker_volume.home_volume local.username (expand) data.coder_workspace_owner.me data.coder_workspace_owner.me data.coder_workspace.me data.coder_workspace.me]
2024-11-06T11:13:35.178Z [DEBUG] ReferenceTransformer: "docker_image.main" references: [data.coder_workspace.me local.username (expand)]
2024-11-06T11:13:35.178Z [DEBUG] ReferenceTransformer: "data.coder_workspace_owner.me" references: []
2024-11-06T11:13:35.178Z [DEBUG] ReferenceTransformer: "data.coder_provisioner.me" references: []
2024-11-06T11:13:35.178Z [DEBUG] ReferenceTransformer: "var.docker_socket" references: []
2024-11-06T11:13:35.178Z [DEBUG] ReferenceTransformer: "provider[\"registry.terraform.io/coder/coder\"]" references: []
2024-11-06T11:13:35.178Z [DEBUG] ReferenceTransformer: "provider[\"registry.terraform.io/kreuzwerker/docker\"]" references: [var.docker_socket var.docker_socket]
2024-11-06T11:13:35.178Z [DEBUG] ReferenceTransformer: "coder_app.code-server" references: [coder_agent.main local.username (expand)]
2024-11-06T11:13:35.178Z [DEBUG] ReferenceTransformer: "docker_volume.home_volume" references: [data.coder_workspace.me data.coder_workspace_owner.me data.coder_workspace_owner.me data.coder_workspace.me data.coder_workspace.me]
2024-11-06T11:13:35.179Z [DEBUG] Starting graph walk: walkValidate
2024-11-06T11:13:35.180Z [DEBUG] created provider logger: level=debug
2024-11-06T11:13:35.180Z [INFO]  provider: configuring client automatic mTLS
2024-11-06T11:13:35.188Z [DEBUG] provider: starting plugin: path=.terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1 args=[".terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1"]
2024-11-06T11:13:35.188Z [DEBUG] provider: plugin started: path=.terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1 pid=88
2024-11-06T11:13:35.188Z [DEBUG] provider: waiting for RPC address: plugin=.terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1
2024-11-06T11:13:35.193Z [INFO]  provider.terraform-provider-coder_v1.0.1: configuring server automatic mTLS: timestamp=2024-11-06T11:13:35.193Z
2024-11-06T11:13:35.206Z [DEBUG] provider.terraform-provider-coder_v1.0.1: plugin address: address=/tmp/plugin595704368 network=unix timestamp=2024-11-06T11:13:35.206Z
2024-11-06T11:13:35.206Z [DEBUG] provider: using plugin: version=5
2024-11-06T11:13:35.217Z [DEBUG] created provider logger: level=debug
2024-11-06T11:13:35.217Z [INFO]  provider: configuring client automatic mTLS
2024-11-06T11:13:35.224Z [DEBUG] provider: starting plugin: path=.terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2 args=[".terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2"]
2024-11-06T11:13:35.225Z [DEBUG] provider: plugin started: path=.terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2 pid=95
2024-11-06T11:13:35.225Z [DEBUG] provider: waiting for RPC address: plugin=.terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2
2024-11-06T11:13:35.236Z [INFO]  provider.terraform-provider-docker_v3.0.2: configuring server automatic mTLS: timestamp=2024-11-06T11:13:35.236Z
2024-11-06T11:13:35.257Z [DEBUG] provider: using plugin: version=5
2024-11-06T11:13:35.257Z [DEBUG] provider.terraform-provider-docker_v3.0.2: plugin address: address=/tmp/plugin1022619817 network=unix timestamp=2024-11-06T11:13:35.257Z
2024-11-06T11:13:35.289Z [DEBUG] provider.stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = error reading from server: EOF"
2024-11-06T11:13:35.290Z [INFO]  provider: plugin process exited: plugin=.terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1 id=88
2024-11-06T11:13:35.291Z [DEBUG] provider: plugin exited
2024-11-06T11:13:35.292Z [DEBUG] provider.stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = error reading from server: EOF"
2024-11-06T11:13:35.293Z [INFO]  provider: plugin process exited: plugin=.terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2 id=95
2024-11-06T11:13:35.293Z [DEBUG] provider: plugin exited
2024-11-06T11:13:35.293Z [INFO]  backend/local: plan calling Plan
2024-11-06T11:13:35.293Z [DEBUG] Building and walking plan graph for NormalMode
2024-11-06T11:13:35.294Z [DEBUG] ProviderTransformer: "coder_app.code-server (expand)" (*terraform.nodeExpandPlannableResource) needs provider["registry.terraform.io/coder/coder"]
2024-11-06T11:13:35.294Z [DEBUG] ProviderTransformer: "docker_image.main (expand)" (*terraform.nodeExpandPlannableResource) needs provider["registry.terraform.io/kreuzwerker/docker"]
2024-11-06T11:13:35.294Z [DEBUG] ProviderTransformer: "docker_container.workspace (expand)" (*terraform.nodeExpandPlannableResource) needs provider["registry.terraform.io/kreuzwerker/docker"]
2024-11-06T11:13:35.294Z [DEBUG] ProviderTransformer: "data.coder_provisioner.me (expand)" (*terraform.nodeExpandPlannableResource) needs provider["registry.terraform.io/coder/coder"]
2024-11-06T11:13:35.294Z [DEBUG] ProviderTransformer: "data.coder_workspace.me (expand)" (*terraform.nodeExpandPlannableResource) needs provider["registry.terraform.io/coder/coder"]
2024-11-06T11:13:35.294Z [DEBUG] ProviderTransformer: "coder_agent.main (expand)" (*terraform.nodeExpandPlannableResource) needs provider["registry.terraform.io/coder/coder"]
2024-11-06T11:13:35.294Z [DEBUG] ProviderTransformer: "docker_volume.home_volume (expand)" (*terraform.nodeExpandPlannableResource) needs provider["registry.terraform.io/kreuzwerker/docker"]
2024-11-06T11:13:35.294Z [DEBUG] ProviderTransformer: "data.coder_workspace_owner.me (expand)" (*terraform.nodeExpandPlannableResource) needs provider["registry.terraform.io/coder/coder"]
2024-11-06T11:13:35.294Z [DEBUG] ReferenceTransformer: "local.username (expand)" references: [data.coder_workspace_owner.me (expand)]
2024-11-06T11:13:35.295Z [DEBUG] ReferenceTransformer: "coder_agent.main (expand)" references: [data.coder_workspace_owner.me (expand) data.coder_workspace_owner.me (expand) data.coder_workspace_owner.me (expand) data.coder_workspace_owner.me (expand) data.coder_workspace_owner.me (expand) data.coder_workspace_owner.me (expand) data.coder_provisioner.me (expand)]
2024-11-06T11:13:35.295Z [DEBUG] ReferenceTransformer: "docker_volume.home_volume (expand)" references: [data.coder_workspace.me (expand) data.coder_workspace_owner.me (expand) data.coder_workspace_owner.me (expand) data.coder_workspace.me (expand) data.coder_workspace.me (expand)]
2024-11-06T11:13:35.295Z [DEBUG] ReferenceTransformer: "data.coder_workspace_owner.me (expand)" references: []
2024-11-06T11:13:35.295Z [DEBUG] ReferenceTransformer: "data.coder_provisioner.me (expand)" references: []
2024-11-06T11:13:35.295Z [DEBUG] ReferenceTransformer: "data.coder_workspace.me (expand)" references: []
2024-11-06T11:13:35.295Z [DEBUG] ReferenceTransformer: "var.docker_socket" references: []
2024-11-06T11:13:35.295Z [DEBUG] ReferenceTransformer: "provider[\"registry.terraform.io/coder/coder\"]" references: []
2024-11-06T11:13:35.295Z [DEBUG] ReferenceTransformer: "provider[\"registry.terraform.io/kreuzwerker/docker\"]" references: [var.docker_socket var.docker_socket]
2024-11-06T11:13:35.295Z [DEBUG] ReferenceTransformer: "coder_app.code-server (expand)" references: [local.username (expand) coder_agent.main (expand)]
2024-11-06T11:13:35.295Z [DEBUG] ReferenceTransformer: "docker_image.main (expand)" references: [data.coder_workspace.me (expand) local.username (expand)]
2024-11-06T11:13:35.295Z [DEBUG] ReferenceTransformer: "docker_container.workspace (expand)" references: [data.coder_workspace.me (expand) coder_agent.main (expand) docker_image.main (expand) coder_agent.main (expand) data.coder_workspace.me (expand) data.coder_workspace_owner.me (expand) data.coder_workspace.me (expand) docker_volume.home_volume (expand) local.username (expand) data.coder_workspace_owner.me (expand) data.coder_workspace_owner.me (expand) data.coder_workspace.me (expand) data.coder_workspace.me (expand)]
2024-11-06T11:13:35.296Z [DEBUG] Starting graph walk: walkPlan
2024-11-06T11:13:35.297Z [DEBUG] created provider logger: level=debug
2024-11-06T11:13:35.297Z [INFO]  provider: configuring client automatic mTLS
2024-11-06T11:13:35.307Z [DEBUG] provider: starting plugin: path=.terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1 args=[".terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1"]
2024-11-06T11:13:35.308Z [DEBUG] provider: plugin started: path=.terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1 pid=106
2024-11-06T11:13:35.308Z [DEBUG] provider: waiting for RPC address: plugin=.terraform/providers/registry.terraform.io/coder/coder/1.0.1/linux_amd64/terraform-provider-coder_v1.0.1
2024-11-06T11:13:35.312Z [INFO]  provider.terraform-provider-coder_v1.0.1: configuring server automatic mTLS: timestamp=2024-11-06T11:13:35.312Z
2024-11-06T11:13:35.325Z [DEBUG] provider: using plugin: version=5
2024-11-06T11:13:35.326Z [DEBUG] provider.terraform-provider-coder_v1.0.1: plugin address: address=/tmp/plugin2392817574 network=unix timestamp=2024-11-06T11:13:35.325Z
2024-11-06T11:13:35.337Z [DEBUG] created provider logger: level=debug
2024-11-06T11:13:35.337Z [INFO]  provider: configuring client automatic mTLS
2024-11-06T11:13:35.342Z [WARN]  ValidateProviderConfig from "provider[\"registry.terraform.io/coder/coder\"]" changed the config value, but that value is unused
2024-11-06T11:13:35.343Z [DEBUG] provider: starting plugin: path=.terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2 args=[".terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2"]
2024-11-06T11:13:35.344Z [DEBUG] provider: plugin started: path=.terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2 pid=116
2024-11-06T11:13:35.344Z [DEBUG] provider: waiting for RPC address: plugin=.terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2
2024-11-06T11:13:35.355Z [INFO]  provider.terraform-provider-docker_v3.0.2: configuring server automatic mTLS: timestamp=2024-11-06T11:13:35.355Z
2024-11-06T11:13:35.377Z [DEBUG] provider: using plugin: version=5
2024-11-06T11:13:35.377Z [DEBUG] provider.terraform-provider-docker_v3.0.2: plugin address: address=/tmp/plugin1037570784 network=unix timestamp=2024-11-06T11:13:35.377Z
2024-11-06T11:13:35.397Z [DEBUG] Resource instance state not found for node "data.coder_provisioner.me", instance data.coder_provisioner.me
2024-11-06T11:13:35.397Z [DEBUG] ReferenceTransformer: "data.coder_provisioner.me" references: []
2024-11-06T11:13:35.398Z [DEBUG] Resource instance state not found for node "data.coder_workspace.me", instance data.coder_workspace.me
2024-11-06T11:13:35.398Z [DEBUG] ReferenceTransformer: "data.coder_workspace.me" references: []
2024-11-06T11:13:35.398Z [DEBUG] Resource instance state not found for node "data.coder_workspace_owner.me", instance data.coder_workspace_owner.me
2024-11-06T11:13:35.398Z [DEBUG] ReferenceTransformer: "data.coder_workspace_owner.me" references: []
data.coder_provisioner.me: Refreshing...
data.coder_workspace.me: Refreshing...
data.coder_workspace_owner.me: Refreshing...
2024-11-06T11:13:35.403Z [DEBUG] Resource instance state not found for node "coder_agent.main", instance coder_agent.main
data.coder_workspace_owner.me: Refresh complete after 0s [id=b2102ee6-55d3-4f84-980a-310b195ca5e3]
data.coder_provisioner.me: Refresh complete after 0s [id=9a1bd825-2f03-43ee-a0e5-ff81422427a3]
data.coder_workspace.me: Refresh complete after 0s [id=0c12c635-ec7d-4be7-9c10-b8e3185e6cc8]
2024-11-06T11:13:35.405Z [DEBUG] ReferenceTransformer: "coder_agent.main" references: []
2024-11-06T11:13:35.405Z [DEBUG] refresh: coder_agent.main: no state, so not refreshing
2024-11-06T11:13:35.417Z [WARN]  ValidateProviderConfig from "provider[\"registry.terraform.io/kreuzwerker/docker\"]" changed the config value, but that value is unused
2024-11-06T11:13:35.419Z [ERROR] provider.terraform-provider-docker_v3.0.2: Response contains error diagnostic: @module=sdk.proto diagnostic_severity=ERROR diagnostic_summary="Error pinging Docker server: Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get \"http://%2Fvar%2Frun%2Fdocker.sock/_ping\": dial unix /var/run/docker.sock: connect: permission denied" tf_req_id=22567d73-e216-88f1-43ed-de8a7a78286a tf_rpc=Configure @caller=github.com/hashicorp/terraform-plugin-go@v0.14.3/tfprotov5/internal/diag/diagnostics.go:55 diagnostic_detail="" tf_proto_version=5.3 tf_provider_addr=provider timestamp=2024-11-06T11:13:35.418Z
2024-11-06T11:13:35.420Z [ERROR] vertex "provider[\"registry.terraform.io/kreuzwerker/docker\"]" error: Error pinging Docker server: Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get "http://%2Fvar%2Frun%2Fdocker.sock/_ping": dial unix /var/run/docker.sock: connect: permission denied
2024-11-06T11:13:35.424Z [WARN]  Provider "registry.terraform.io/coder/coder" produced an invalid plan for coder_agent.main, but we are tolerating it because it is using the legacy plugin SDK.
    The following problems may be the cause of any confusing errors from downstream operations:
      - .login_before_ready: planned value cty.True for a non-computed attribute
      - .connection_timeout: planned value cty.NumberIntVal(120) for a non-computed attribute
      - .shutdown_script_timeout: planned value cty.NumberIntVal(300) for a non-computed attribute
      - .startup_script_timeout: planned value cty.NumberIntVal(300) for a non-computed attribute
      - .auth: planned value cty.StringVal("token") for a non-computed attribute
      - .display_apps: attribute representing nested block must not be unknown itself; set nested attribute values to unknown instead
2024-11-06T11:13:35.425Z [DEBUG] Resource instance state not found for node "coder_app.code-server", instance coder_app.code-server
2024-11-06T11:13:35.425Z [DEBUG] ReferenceTransformer: "coder_app.code-server" references: []
2024-11-06T11:13:35.426Z [DEBUG] refresh: coder_app.code-server: no state, so not refreshing
2024-11-06T11:13:35.428Z [WARN]  Provider "registry.terraform.io/coder/coder" produced an invalid plan for coder_app.code-server, but we are tolerating it because it is using the legacy plugin SDK.
    The following problems may be the cause of any confusing errors from downstream operations:
      - .external: planned value cty.False for a non-computed attribute
2024-11-06T11:13:35.430Z [DEBUG] provider.stdio: received EOF, stopp
2024-11-06T11:13:35.431Z [WARN]  Planning encountered errors, so plan is not applyable
2024-11-06T11:13:35.431Z [INFO]  backend/local: plan operation completed
2024-11-06T11:13:35.432Z [INFO]  backend/local: writing plan output to: /home/coder/.cache/coder/provisioner-0/work/Session84584cb0-ff30-4239-b112-3b062b2d7860/terraform.tfplan
coder_agent.main: Plan to create
coder_app.code-server: Plan to create
Plan: 2 to add, 0 to change, 0 to destroy.
Error: Error pinging Docker server: Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get "http://%2Fvar%2Frun%2Fdocker.sock/_ping": dial unix /var/run/docker.sock: connect: permission denied
on main.tf line 22, in provider "docker":
  22: provider "docker" {
2024-11-06T11:13:35.440Z [DEBUG] provider.stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = error reading from server: EOF"
2024-11-06T11:13:35.441Z [INFO]  provider: plugin process exited: plugin=.terraform/providers/registry.terraform.io/kreuzwerker/docker/3.0.2/linux_amd64/terraform-provider-docker_v3.0.2 id=116
2024-11-06T11:13:35.442Z [DEBUG] provider: plugin exited

matifali Nov 6, 2024
Maintainer

It looks like Coder is unable to access the docker socket.

Error: Error pinging Docker server: Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get "http://%2Fvar%2Frun%2Fdocker.sock/_ping": dial unix /var/run/docker.sock: connect: permission denied
on main.tf line 22, in provider "docker":
  22: provider "docker" {

You need to find the docker group id and add add_group to your coder service. You can get it by running, getent group docker and then modify your compose.yaml file like,

services:
  coder:
    image: devlan_coder:2160
    group_add: 998 # output of getent group docker
...
# rest of the file

Y3NK Nov 8, 2024
Author

Thanks a lot! That helps!
I am still unable to get the docker template working, but I think it's due to the "retrieval" of coder ?

In: 'main.tf':

curl -fsSL https://code-server.dev/install.sh | sh -s -- --method=standalone --prefix=/tmp/code-server
I should replace that by either:

providing an accessible path (and messy, because install.sh will bring bin install)
only use custom local docker images with docker being already setup

Isn't it ?

many thanks

Y3NK · 2024-11-08T14:30:32Z

Y3NK
Nov 8, 2024
Author

Should port 13337 from the coder docker on host should be open as well ?
-p 13337:13337

code-server is not able to start
02 - Bad Gateway
Failed to proxy request to application: dial context: connect tcp [xxxIPV6]:13337: connection was refused

in logs:


2024-11-08 14:27:39.797 [debu]  apphealth: error checking app health  id=6a89533a-ab5a-4ef1-93dd-80a8002505db  slug=code-server  now_unhealthy=true  error="Get \"http://localhost:13337/healthz\": dial tcp [::1]:13337: connect: connection refused"
2024-11-08 14:27:41.197 [debu]  net.tailnet.net.wgengine: wg: [v2] [sP5c/] - Received handshake initiation
2024-11-08 14:27:41.198 [debu]  net.tailnet.net.wgengine: wg: [v2] [sP5c/] - Sending handshake response
2024-11-08 14:27:41.198 [debu]  net.tailnet.net.wgengine: wg: [v2] [sP5c/] - ConsumeMessageInitiation: handshake replay @ 2024-11-08 14:27:41.184549376 +0000 UTC
2024-11-08 14:27:41.198 [debu]  net.tailnet.net.wgengine: wg: [v2] Received invalid initiation message from b0fe5cfe250003f413af2a482acb6437b7e24c7d58d76fe96380c3897bbfc776
2024-11-08 14:27:41.200 [debu]  net.tailnet.net.netstack: netstack: could not connect to local server at 127.0.0.1:13337 (or [::1]:13337)%!(EXTRA *net.OpError=dial tcp [::1]:13337: connect: connection refused)
2024-11-08 14:27:41.770 [debu]  batch updating metadata
2024-11-08 14:27:41.777 [debu]  batch update metadata complete
2024-11-08 14:27:44.770 [debu]  batch updating metadata
2024-11-08 14:27:44.776 [debu]  batch update metadata complete
2024-11-08 14:27:44.797 [debu]  apphealth: error checking app health  id=6a89533a-ab5a-4ef1-93dd-80a8002505db  slug=code-server  now_unhealthy=true  error="Get \"http://localhost:13337/healthz\": dial tcp [::1]:13337: connect: connection refused"
2024-11-08 14:27:46.770 [debu]  batch updating metadata
2024-11-08 14:27:46.776 [debu]  batch update metadata complete

11 replies

matifali Nov 21, 2024
Maintainer

Could you try setting up an external auth instead?
It would spare you and your developers from copying the key to your GitHub/GitLab accounts.

I am including @johnstcn to help you further with why git over ssh is not working.

johnstcn Nov 21, 2024
Collaborator

The coder gitssh command is not meant to be run interactively. It hooks into git natively and should get run automatically when you run git push.

See here for more information:

Y3NK Nov 21, 2024
Author

The coder gitssh command is not meant to be run interactively. It hooks into git natively and should get run automatically when you run git push.

See here for more information:

https://coder.com/docs/admin/security/secrets#ssh-keys

https://git-scm.com/book/en/v2/Git-Internals-Environment-Variables#_miscellaneous

Thank you, but still, I need to either I use user/psw with
git clone http://myGitLab:88/test/project.git
--> works, but need to fill user/psw

or git clone myUser@myGitLab:222/test/project.git
which ask for password, but not working

Not normal, isn't ?

johnstcn Nov 22, 2024
Collaborator

Can you provide the output of ssh -T -v git@myGitlab:222? That might give us more information.

Y3NK Nov 22, 2024
Author

Can you provide the output of ssh -T -v git@myGitlab:222? That might give us more information.

Thank you for your reply:
About my gitlab docker: /gitlab "/assets/wrapper" 9 days ago Up 9 days (healthy) 0.0.0.0:28->22/tcp, [::]:28->22/tcp, 0.0.0.0:88->80/tcp, [::]:88->80/tcp, 0.0.0.0:444->443/tcp, [::]:444->443/tcp gitlab

80 is exposed as 88 in host
22 is exposed as 28 in host

so from my Coder generated instance I can do:

git clone http://myHost:88/x/project1.git
Cloning into 'project1'...
WARN: Coder was unable to handle this git request. The default git behavior will be used instead.
  | No matching external auth provider found in Coder for the url "http://myHost:88".
  | External auth provider not found.
error: unable to read askpass response from '/tmp/coder.i8bRlb/coder'
Username for 'http://myHost:88': myUser
WARN: Coder was unable to handle this git request. The default git behavior will be used instead.
  | No matching external auth provider found in Coder for the url "http://myHost:88".
  | External auth provider not found.
error: unable to read askpass response from '/tmp/coder.i8bRlb/coder'
Password for 'http://myUser@myHost:88': 
remote: Enumerating objects: 3, done.
remote: Total 3 (delta 0), reused 0 (delta 0), pack-reused 3 (from 1)
Receiving objects: 100% (3/3), done.

--> works well

If I am not mistaken, using host:portNumber should not work, we must use -p, isn't ?

[root@Use-Case-Y test2]# ssh -T -p 28 -v myHost
OpenSSH_8.7p1, OpenSSL 3.2.2 4 Jun 2024
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Reading configuration data /etc/ssh/ssh_config.d/50-redhat.conf
debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config
debug1: configuration requests final Match pass
debug1: re-parsing configuration
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Reading configuration data /etc/ssh/ssh_config.d/50-redhat.conf
debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config
debug1: Connecting to chgvasmlad01 [xx.xx.xx.xx] port 28.
debug1: Connection established.
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_rsa-cert type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: identity file /root/.ssh/id_dsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa type -1
debug1: identity file /root/.ssh/id_ecdsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa_sk type -1
debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /root/.ssh/id_ed25519 type -1
debug1: identity file /root/.ssh/id_ed25519-cert type -1
debug1: identity file /root/.ssh/id_ed25519_sk type -1
debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /root/.ssh/id_xmss type -1
debug1: identity file /root/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.7
kex_exchange_identification: Connection closed by remote host
Connection closed by xx.xx.xx.xx port 28

Same with -p 28 git@myHost or -p 28 myUser@myHost

This comment has been minimized.

Sign in to view

Help to get Coder in offline / airgap working (Docker) #15039

Uh oh!

Y3NK Oct 10, 2024

Replies: 6 comments · 24 replies

Uh oh!

matifali Oct 11, 2024 Maintainer

Uh oh!

Y3NK Oct 11, 2024 Author

Uh oh!

Y3NK Oct 12, 2024 Author

Uh oh!

Uh oh!

Y3NK Oct 14, 2024 Author

Uh oh!

Y3NK Oct 16, 2024 Author

Uh oh!

matifali Oct 28, 2024 Maintainer

Uh oh!

Uh oh!

Y3NK Nov 6, 2024 Author

Uh oh!

matifali Nov 6, 2024 Maintainer

Uh oh!

Y3NK Nov 6, 2024 Author

Uh oh!

Uh oh!

matifali Nov 6, 2024 Maintainer

Uh oh!

Y3NK Nov 8, 2024 Author

This comment has been minimized.

Uh oh!

Y3NK Nov 8, 2024 Author

Uh oh!

matifali Nov 21, 2024 Maintainer

Uh oh!

johnstcn Nov 21, 2024 Collaborator

Uh oh!

Y3NK Nov 21, 2024 Author

Uh oh!

johnstcn Nov 22, 2024 Collaborator

Uh oh!

Y3NK Nov 22, 2024 Author

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Y3NK
Oct 10, 2024

Replies: 6 comments 24 replies

matifali
Oct 11, 2024
Maintainer

Y3NK Oct 11, 2024
Author

Y3NK
Oct 12, 2024
Author

Y3NK
Oct 14, 2024
Author

Y3NK
Oct 16, 2024
Author

matifali Oct 28, 2024
Maintainer

Y3NK Nov 6, 2024
Author

matifali Nov 6, 2024
Maintainer

Y3NK Nov 6, 2024
Author

matifali Nov 6, 2024
Maintainer

Y3NK Nov 8, 2024
Author

Y3NK
Nov 8, 2024
Author

matifali Nov 21, 2024
Maintainer

johnstcn Nov 21, 2024
Collaborator

Y3NK Nov 21, 2024
Author

johnstcn Nov 22, 2024
Collaborator

Y3NK Nov 22, 2024
Author