Updating Container with Portainer fails on DSM 7.2

[Micky]

Hi!

Since updating my DS to DSM 7.2, I cannot update any containers on that machine with Portainer. Portainer is running on a second DS, inside docker.
OTH, using Portainer to update any containers on the second NAS, works as usual. However, the second DS is still running DSM 7.1.

So, am I not able to use Portainer anymore for this task with DSM 7.2 or is there a solution I did not found so far?

 

[Rusty]

So, am I not able to use Portainer anymore for this task with DSM 7.2 or is there a solution I did not found so far?

I recently migrated my main Portainer onto a new RS with 7.2 and connected other hosts via agent to it. It all works well, so I wouldn't say this is a 7.2 issue. I also have a mix of DSM 7.2, 7.1.1 and one 6.2.4, all work fine.

I cannot update any containers on that machine with Portainer

What is happening exactly when you try and update? Anything in the logs?

 

[Micky]

Thanks Rusty for your reply!

I guess I found the cause, later in the evening yesterday already: My firewall blocks the access to the docker registry. I guess Portainer or Dockerhub changed something in their configuration.

Before, I additionally tried to download the container image (from within Portainer) solely without recreating the container and got a more readable error message. Don't have the message by hand at the moment. It was sthg. with a dockerhub URL that cannot be reached and the request timed out.

I'm not sure, however when disabling all firewall rules the access works. I don't know why Portainer on the second NAS does not have any problems though while recreating containers without shutting down the firewall beforehand.

So, it must be any combination of NAS, Portainer, firewall, proxy. I will do further tests and report back this weekend.

Thanks for reading!

 

[Micky]

Root of this issue found

For unknown reason, the docker package on the first, failing DS, uses the second LAN port to access internet, which means to download container images for dockerhub.

After adding the IP-address of LAN2 to firewall rules, Portainer is now able to download images or recreate containers.

Still wondering why this issue is not present on second DS, that too has got two LAN ports and only the first IP-address has open ports in firewall.
Must have some relationship between the ContainerManager of first NAS with DSM 7.2 and old docker package on second NAS, still running DSM 7.1

Solved!