Docker on Synology with permissions errors

On several Synology systems I have Netdata running in a Docker and am getting permission errors on some plugins. An older rev was having the same issue however I recently updated to 1.45 with the same issue. On both systems, on a relatively frequent basis I see what is below in the logs. Thus far, everything appears functional however since it’s happening on multiple systems I figured it was worth bringing up to see if it’s something I missed.

time=2024-03-30T14:58:39.342+00:00 comm=apps.plugin source=collector level=error errno="13, Permission denied" tid=475 thread=apps.plugin msg="Cannot process /host/proc/11791/io (command 'synoscgi')"
time=2024-03-30T14:58:55.341+00:00 comm=apps.plugin source=collector level=error errno="13, Permission denied" tid=475 thread=apps.plugin msg="Cannot process /host/proc/11969/io (command 'sleep')"
time=2024-03-30T14:58:39.342+00:00 comm=apps.plugin source=collector level=error errno="13, Permission denied" tid=475 thread=apps.plugin msg="Cannot process /host/proc/11793/io (command 'entrypoint.sh')"
time=2024-03-30T14:58:39.342+00:00 comm=apps.plugin source=collector level=error errno="13, Permission denied" tid=475 thread=apps.plugin msg="Cannot process /host/proc/11794/io (command 'jq')"
time=2024-03-30T14:58:39.343+00:00 comm=apps.plugin source=collector level=error errno="13, Permission denied" tid=475 thread=apps.plugin msg="Cannot process /host/proc/11795/io (command 'synoscgi')"
time=2024-03-30T14:58:40.342+00:00 comm=apps.plugin source=collector level=error errno="13, Permission denied" tid=475 thread=apps.plugin msg="Cannot process /host/proc/11805/io (command 'sleep')"
time=2024-03-30T14:58:50.342+00:00 comm=apps.plugin source=collector level=error errno="13, Permission denied" tid=475 thread=apps.plugin msg="Cannot process /host/proc/11909/io (command 'synoscgi')"
time=2024-03-30T14:59:10.342+00:00 comm=apps.plugin source=collector level=error errno="13, Permission denied" tid=475 thread=apps.plugin msg="Cannot process /host/proc/12189/io (command 'synoscgi')"
time=2024-03-30T14:59:00.345+00:00 comm=apps.plugin source=collector level=error errno="13, Permission denied" tid=475 thread=apps.plugin msg="Cannot process /host/proc/12071/io (command 'synoscgi')"
time=2024-03-30T14:59:10.342+00:00 comm=apps.plugin source=collector level=error errno="13, Permission denied" tid=475 thread=apps.plugin msg="Cannot process /host/proc/12211/io (command 'sleep')"

The docker compose file for this is:

version: ‘3.3’
services:
netdata:
container_name: netdata
hostname: bobomatic
ports:
- ‘19999:19999’
volumes:
- ‘/proc:/host/proc:ro’
- ‘/sys:/host/sys:ro’
- ‘/var/run/docker.sock:/var/run/docker.sock:ro’
- ‘/volume1/docker/netdata/config:/etc/netdata’
- ‘/volume1/docker/netdata/data:/var/lib/netdata’
- ‘/volume1/docker/netdata/cache:/var/cache/netdata’
environment:
- PUID=1024
- PGID=100
restart: always
image: netdata/netdata

Hi, @lfstudios10. So what is the problem? it is expected to have permissions issues if you don’t provide enough permissions for Netdata docker container.

The Netdata container requires different privileges and mounts to provide functionality similar to that provided by Netdata installed on the host.

Interesting. I thought what I had done was enough but it looks like I need to do more. Thanks for pointing me in there correct direction.