Dockge with Podman rootless

[kingmath]

⚠️ Please verify that this bug has NOT been raised before.

• I checked and didn't find similar issue

🛡️ Security Policy

• I agree to have read this project Security Policy

📝 Describe your problem

I can't deploy anything with Dockge and Podman.
I use podman rootless. The problem is, that the permission is denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock. How can I fix it to use dockge rootless with podman? I don't use docker :)

I use podman version 5.3.2 with Alpine Linux 3.21.3.

📝 Error Message(s) or Log

localhost:/opt/dockge$ podman-compose up

[dockge] | 2025-02-19T20:10:15Z [SERVER] INFO: Welcome to dockge!
[dockge] | 2025-02-19T20:10:15Z [SERVER] INFO: NODE_ENV: production
[dockge] | 2025-02-19T20:10:15Z [SERVER] INFO: Server Type: HTTP
[dockge] | 2025-02-19T20:10:15Z [SERVER] INFO: Data Dir: ./data/
[dockge] | 2025-02-19T20:10:15Z [DB] INFO: Database Type: sqlite
[dockge] | 2025-02-19T20:10:15Z [SERVER] INFO: Connected to the database
[dockge] | 2025-02-19T20:10:15Z [SERVER] INFO: Listening on 5001
[dockge] | 2025-02-19T20:10:15Z [AUTH] INFO: Origin is not set, IP: ::ffff:10.89.0.7
[dockge] | 2025-02-19T20:10:15Z [SERVER] INFO: Socket connected (direct)
[dockge] | 2025-02-19T20:10:15Z [AGENT] WARN: You are not logged in.
[dockge] | 2025-02-19T20:10:15Z [SERVER] INFO: Socket disconnected!
[dockge] | 2025-02-19T20:10:15Z [AUTH] INFO: Origin is not set, IP: ::ffff:10.89.0.7
[dockge] | 2025-02-19T20:10:15Z [SERVER] INFO: Socket connected (direct)
[dockge] | 2025-02-19T20:10:15Z [AUTH] INFO: Login by token. IP=10.89.0.7
[dockge] | 2025-02-19T20:10:15Z [AUTH] INFO: Username from JWT: dockpod
[dockge] | 2025-02-19T20:10:15Z [AUTH] INFO: Successfully logged in user dockpod. IP=10.89.0.7
[dockge] | Trace: Error: Process exited with code 1
[dockge] | at ChildProcess.done (/app/node_modules/.pnpm/promisify-child-process@4.1.2/node_modules/promisify-child-process/index.cjs:70:19)
[dockge] | at ChildProcess.emit (node:events:514:28)
[dockge] | at ChildProcess.emit (node:domain:489:12)
[dockge] | at maybeClose (node:internal/child_process:1091:16)
[dockge] | at ChildProcess._handle.onexit (node:internal/child_process:302:5) {
[dockge] | code: 1,
[dockge] | signal: null,
[dockge] | stdout: '',
[dockge] | stderr: 'permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get "http://%2Fvar%2Frun%2Fdocker.sock/v1.24/containers/json?all=1&filters=%7B%22label%22%3A%7B%22com.docker.compose.config-hash%22%3Atrue%2C%22com.docker.compose.project%22%3Atrue%7D%7D": dial unix /var/run/docker.sock: connect: permission denied\n'
[dockge] | }
[dockge] | at process.unexpectedErrorHandler (/app/backend/dockge-server.ts:89:21)
[dockge] | at process.emit (node:events:514:28)
[dockge] | at process.emit (/pnpm/global/5/.pnpm/tsx@4.6.2/node_modules/tsx/dist/suppress-warnings.cjs:1:472)
[dockge] | at emit (node:internal/process/promises:149:20)
[dockge] | at processPromiseRejections (node:internal/process/promises:283:27)
[dockge] | at process.processTicksAndRejections (node:internal/process/task_queues:96:32)
[dockge] | If you keep encountering errors, please report to https://github.com/louislam/dockge
[dockge] | 2025-02-19T20:10:15Z [GETSERVICESTATUSLIST] ERROR: Error: Process exited with code 14
[dockge] | at ChildProcess.done (/app/node_modules/.pnpm/promisify-child-process@4.1.2/node_modules/promisify-child-process/index.cjs:70:19)
[dockge] | at ChildProcess.emit (node:events:514:28)
[dockge] | at ChildProcess.emit (node:domain:489:12)
[dockge] | at maybeClose (node:internal/child_process:1091:16)
[dockge] | at ChildProcess._handle.onexit (node:internal/child_process:302:5) {
[dockge] | code: 14,
[dockge] | signal: null,
[dockge] | stdout: '',
[dockge] | stderr: 'no configuration file provided: not found\n'
[dockge] | }
[dockge] | Trace: Error: Process exited with code 1
[dockge] | at ChildProcess.done (/app/node_modules/.pnpm/promisify-child-process@4.1.2/node_modules/promisify-child-process/index.cjs:70:19)
[dockge] | at ChildProcess.emit (node:events:514:28)
[dockge] | at ChildProcess.emit (node:domain:489:12)
[dockge] | at maybeClose (node:internal/child_process:1091:16)
[dockge] | at ChildProcess._handle.onexit (node:internal/child_process:302:5) {
[dockge] | code: 1,
[dockge] | signal: null,
[dockge] | stdout: '',
[dockge] | stderr: 'permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get "http://%2Fvar%2Frun%2Fdocker.sock/v1.24/containers/json?all=1&filters=%7B%22label%22%3A%7B%22com.docker.compose.config-hash%22%3Atrue%2C%22com.docker.compose.project%22%3Atrue%7D%7D": dial unix /var/run/docker.sock: connect: permission denied\n'
[dockge] | }
[dockge] | at process.unexpectedErrorHandler (/app/backend/dockge-server.ts:89:21)
[dockge] | at process.emit (node:events:514:28)
[dockge] | at process.emit (/pnpm/global/5/.pnpm/tsx@4.6.2/node_modules/tsx/dist/suppress-warnings.cjs:1:472)
[dockge] | at emit (node:internal/process/promises:149:20)
[dockge] | at processPromiseRejections (node:internal/process/promises:283:27)
[dockge] | at process.processTicksAndRejections (node:internal/process/task_queues:96:32)
[dockge] | If you keep encountering errors, please report to https://github.com/louislam/dockge
[dockge] | 2025-02-19T20:10:20Z [GETSERVICESTATUSLIST] ERROR: Error: spawn docker ENOENT
[dockge] | at __node_internal_captureLargerStackTrace (node:internal/errors:496:5)
[dockge] | at __node_internal_errnoException (node:internal/errors:623:12)
[dockge] | at ChildProcess._handle.onexit (node:internal/child_process:283:19)
[dockge] | at onErrorNT (node:internal/child_process:476:16)
[dockge] | at process.processTicksAndRejections (node:internal/process/task_queues:82:21) {
[dockge] | errno: -2,
[dockge] | code: 'ENOENT',
[dockge] | syscall: 'spawn docker',
[dockge] | path: 'docker',
[dockge] | spawnargs: [ 'compose', 'ps', '--format', 'json' ]
[dockge] | }
[dockge] | 2025-02-19T20:10:25Z [GETSERVICESTATUSLIST] ERROR: Error: spawn docker ENOENT
[dockge] | at __node_internal_captureLargerStackTrace (node:internal/errors:496:5)
[dockge] | at __node_internal_errnoException (node:internal/errors:623:12)
[dockge] | at ChildProcess._handle.onexit (node:internal/child_process:283:19)
[dockge] | at onErrorNT (node:internal/child_process:476:16)
[dockge] | at process.processTicksAndRejections (node:internal/process/task_queues:82:21) {
[dockge] | errno: -2,
[dockge] | code: 'ENOENT',
[dockge] | syscall: 'spawn docker',
[dockge] | path: 'docker',
[dockge] | spawnargs: [ 'compose', 'ps', '--format', 'json' ]
[dockge] | }
[dockge] | Trace: Error: Process exited with code 1
[dockge] | at ChildProcess.done (/app/node_modules/.pnpm/promisify-child-process@4.1.2/node_modules/promisify-child-process/index.cjs:70:19)
[dockge] | at ChildProcess.emit (node:events:514:28)
[dockge] | at ChildProcess.emit (node:domain:489:12)
[dockge] | at maybeClose (node:internal/child_process:1091:16)
[dockge] | at ChildProcess._handle.onexit (node:internal/child_process:302:5) {
[dockge] | code: 1,
[dockge] | signal: null,
[dockge] | stdout: '',
[dockge] | stderr: 'permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get "http://%2Fvar%2Frun%2Fdocker.sock/v1.24/containers/json?all=1&filters=%7B%22label%22%3A%7B%22com.docker.compose.config-hash%22%3Atrue%2C%22com.docker.compose.project%22%3Atrue%7D%7D": dial unix /var/run/docker.sock: connect: permission denied\n'
[dockge] | }
[dockge] | at process.unexpectedErrorHandler (/app/backend/dockge-server.ts:89:21)
[dockge] | at process.emit (node:events:514:28)
[dockge] | at process.emit (/pnpm/global/5/.pnpm/tsx@4.6.2/node_modules/tsx/dist/suppress-warnings.cjs:1:472)
[dockge] | at emit (node:internal/process/promises:149:20)
[dockge] | at processPromiseRejections (node:internal/process/promises:283:27)
[dockge] | at process.processTicksAndRejections (node:internal/process/task_queues:96:32)
[dockge] | If you keep encountering errors, please report to https://github.com/louislam/dockge
[dockge] | 2025-02-19T20:10:30Z [GETSERVICESTATUSLIST] ERROR: Error: Process exited with code 1
[dockge] | at ChildProcess.done (/app/node_modules/.pnpm/promisify-child-process@4.1.2/node_modules/promisify-child-process/index.cjs:70:19)
[dockge] | at ChildProcess.emit (node:events:514:28)
[dockge] | at ChildProcess.emit (node:domain:489:12)
[dockge] | at maybeClose (node:internal/child_process:1091:16)
[dockge] | at ChildProcess._handle.onexit (node:internal/child_process:302:5) {
[dockge] | code: 1,
[dockge] | signal: null,
[dockge] | stdout: '',
[dockge] | stderr: 'permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get "http://%2Fvar%2Frun%2Fdocker.sock/v1.24/containers/json?filters=%7B%22label%22%3A%7B%22com.docker.compose.config-hash%22%3Atrue%2C%22com.docker.compose.oneoff%3DFalse%22%3Atrue%2C%22com.docker.compose.project%3Dnginy_test02%22%3Atrue%7D%7D": dial unix /var/run/docker.sock: connect: permission denied\n'
[dockge] | }
^C[dockge] | 2025-02-19T20:10:33Z [SERVER] INFO: Shutdown requested
[dockge] | 2025-02-19T20:10:33Z [SERVER] INFO: Called signal: SIGINT
[dockge] | 2025-02-19T20:10:33Z [DB] INFO: Closing the database
[dockge] | 2025-02-19T20:10:33Z [SERVER] INFO: Socket disconnected!
[dockge] | 2025-02-19T20:10:35Z [DB] INFO: Database closed
[dockge] | 2025-02-19T20:10:35Z [SERVER] INFO: Graceful shutdown successful!

🐻 Dockge Version

1.4.2

💻 Operating System and Arch

Alpine Linux 3.21.3

🌐 Browser

Firefox

🐋 Docker Version

Podman 5.3.2

🟩 NodeJS Version

No response

[cybersorcerer]

Any news on this? I get the same error but my podman machine is rootful. I am running on MacOS with podman client version 5.5, podman engine version 5.5 and podman desktop 1.19.1. Docker compatibility mode is enabled.

[cybersorcerer]

Did some research and managed to fix this problem. I changed the compose.yaml and added the following lines:
security_opt: - "label=disable"

[shadowzym]

Here's my solution(●'◡'●). Firstly systemctl --user enable --now podman.socket , then run with -v /run/user/1000/podman/podman.sock:/var/run/docker.sock , while 1000 is user_id.

[Koli0842]

Don't suppose that workaround is applicable for multiple distrinct rootless users, huh? I run a bunch of rootless containers, all with their respective users. I am looking for a tool that lets me view the status of all my computers, and do my most common maintenance tasks, as in pull, restart, and prune old images. Probably this tool is not it then

[shadowzym]

what about dockhand

[karoltheguy]

what about dockhand

Yup seems it's possible with dockhand.
Just need to run a Hawser agent for each user which will report to dockhand

Finsys/dockhand#327