Docker packetbeat:6.0.1Operation not permitted

Elastic Stack Beats
1

Trying to run the packetbeat 6.0.1 container and getting an "Operation not permitted" error.

docker run docker.elastic.co/beats/packetbeat:6.0.1 setup --template -E output.logstash.enabled=false -E 'output.elasticsearch.hosts=["localhost:9200"]'
/usr/local/bin/docker-entrypoint: line 13: /usr/share/packetbeat/packetbeat: Operation not permitted

docker run docker.elastic.co/beats/packetbeat:6.0.1
/usr/local/bin/docker-entrypoint: line 8: /usr/share/packetbeat/packetbeat: Operation not permitted

2

Hi, I think you are missing the extra network capabilities required to run the container, see here.

3

OK, thanks. I'll give that a try...FYI I copy/pasted from here so if that is the fix then might need to update the documentation there too:

https://www.elastic.co/guide/en/beats/packetbeat/6.0/packetbeat-template.html
https://www.elastic.co/guide/en/beats/packetbeat/6.0/load-kibana-dashboards.html

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.