Why am I encountering the error when attempting to run Splunk in Docker for Windows?

[swasheck]

When trying to run Splunk in Windows via LCOW, I get errors.

docker pull --platform linux splunk/splunk:latest

and running with

docker run --name splunk --hostname splunk -p 8000:8000 -d -e "SPLUNK_START_ARGS=--accept-license" -e "SPLUNK_USER=splunk" splunk/splunk:latest

I get the following error output in the logs:

Copying '/opt/splunk/etc/openldap/ldap.conf.default' to '/opt/splunk/etc/openldap/ldap.conf'.

An unforeseen error occurred:

        Exception: <type 'exceptions.OSError'>, Value: [Errno 1] Operation not permitted: '/opt/splunk/etc/openldap/ldap.conf'

Traceback (most recent call last):
  File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli.py", line 1143, in main
    parseAndRun(argsList)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli.py", line 998, in parseAndRun
    retVal = cList.getCmd(command, subCmd).call(argList, fromCLI = True)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli.py", line 280, in call
    return self.func(args, fromCLI)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/control_api.py", line 30, in wrapperFunc
    return func(dictCopy, fromCLI)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/_internal.py", line 128, in firstTimeRun
    comm.copyItem(migration.PATH_LDAP_CONF_DEF, migration.PATH_LDAP_CONF)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli_common.py", line 1008, in copyItem
    shutil.copy(src, dst)
  File "/opt/splunk/lib/python2.7/shutil.py", line 120, in copy
    copymode(src, dst)
  File "/opt/splunk/lib/python2.7/shutil.py", line 91, in copymode
    os.chmod(dst, mode)
OSError: [Errno 1] Operation not permitted: '/opt/splunk/etc/openldap/ldap.conf'


Please file a case online at http://www.splunk.com/page/submit_issue


This appears to be your first time running this version of Splunk.

Running Docker using Linux containers works as expected, but I need to run using Windows containers for other applications.

[p_gurav]

Check if the user you are using to install the splunk has right permissions on the folders

/opt/splunk/etc/openldap/ldap.conf.default

Which user you are using? and can you list the directory permissions on the splunk installation directory (from base)?

[swasheck]

This occurs when running as both root and splunk users. I'm pulling from Docker, which I believe is using this Dockerfile. Are you asking me to pull the Dockerfile and omit the Splunk installation section, run with -ti and check the permissions on that directory?