Docker Engine 20.10.14 breaks with debian kernel linux-image-5.10.0-13-amd64 #43551
Description
Description
After apt update && apt upgrade on my Debian VMs docker containers could no longer communicate between each other when using an encrypted overlay network in swarm mode. A non encrypted overlay network works. After Downgrade Kernel to 5.10.0-11-amd64 everything works again.
I did not test with in between version Kernel 5.10.0-12-amd64.
Steps to reproduce the issue:
- Install 2x Debian 11.3 with Docker 20.10.14 with kernel linux-image-5.10.0-13-amd64
- Create Swarm
- Create encrypted overlay network
- Launch a dummy webserver container on node A
- Launch another container on node B which can do http request against webserver on node A
- Expect: I/O Request Timout
1b. Create NOT-encrypted overlay network
2c. Launch a dummy webserver container on node A
3d. Launch another container on node B which can do http request against webserver on node A
4e. Expect: B receive answer from A
Describe the results you received:
I/O Request Timout
Describe the results you expected:
Containers able to talk to each other
Additional information you deem important (e.g. issue happens only occasionally):
I did not test with in between version Kernel 5.10.0-12-amd64.
Output of docker version:
Client: Docker Engine - Community
Version: 20.10.14
API version: 1.41
Go version: go1.16.15
Git commit: a224086
Built: Thu Mar 24 01:48:21 2022
OS/Arch: linux/amd64
Context: default
Experimental: true
Server: Docker Engine - Community
Engine:
Version: 20.10.14
API version: 1.41 (minimum version 1.12)
Go version: go1.16.15
Git commit: 87a90dc
Built: Thu Mar 24 01:46:14 2022
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: 1.5.11
GitCommit: 3df54a852345ae127d1fa3092b95168e4a88e2f8
runc:
Version: 1.0.3
GitCommit: v1.0.3-0-gf46b6ba
docker-init:
Version: 0.19.0
GitCommit: de40ad0
Output of docker info:
Client:
Context: default
Debug Mode: false
Plugins:
app: Docker App (Docker Inc., v0.9.1-beta3)
buildx: Docker Buildx (Docker Inc., v0.8.1-docker)
scan: Docker Scan (Docker Inc., v0.17.0)
Server:
Containers: 45
Running: 44
Paused: 0
Stopped: 1
Images: 349
Server Version: 20.10.14
Storage Driver: overlay2
Backing Filesystem: extfs
Supports d_type: true
Native Overlay Diff: true
userxattr: false
Logging Driver: json-file
Cgroup Driver: systemd
Cgroup Version: 2
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
Swarm: active
NodeID: x0rht2cqbs5n45g106ah6jj3y
Is Manager: true
ClusterID: 129c31wk0v99pe97fx0fegehw
Managers: 3
Nodes: 3
Default Address Pool: 10.0.0.0/8
SubnetSize: 24
Data Path Port: 4789
Orchestration:
Task History Retention Limit: 5
Raft:
Snapshot Interval: 10000
Number of Old Snapshots to Retain: 0
Heartbeat Tick: 1
Election Tick: 10
Dispatcher:
Heartbeat Period: 5 seconds
CA Configuration:
Expiry Duration: 3 months
Force Rotate: 0
Autolock Managers: false
Root Rotation In Progress: false
Node Address: 45.9.60.19
Manager Addresses:
45.142.177.91:2377
45.9.60.124:2377
45.9.60.19:2377
Runtimes: io.containerd.runc.v2 io.containerd.runtime.v1.linux runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 3df54a852345ae127d1fa3092b95168e4a88e2f8
runc version: v1.0.3-0-gf46b6ba
init version: de40ad0
Security Options:
apparmor
seccomp
Profile: default
cgroupns
Kernel Version: 5.10.0-11-amd64
Operating System: Debian GNU/Linux 11 (bullseye)
OSType: linux
Architecture: x86_64
CPUs: 4
Total Memory: 15.63GiB
Name: marauder.intra6.de
ID: MVAU:BGKZ:NGFI:TSVO:UDB2:ZQB2:DHFM:TOPV:XQLI:2WWX:SGQ5:Z7T6
Docker Root Dir: /var/lib/docker
Debug Mode: false
Registry: https://index.docker.io/v1/
Labels:
provider=generic
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: false
Additional environment details (AWS, VirtualBox, physical, etc.):
netcup.de root-vServer kvm