# Netdata agent running in docker container: cannot read directory '/host/sys/fs/cgroup'

**URL:** <https://community.netdata.cloud/t/netdata-agent-running-in-docker-container-cannot-read-directory-host-sys-fs-cgroup/5308>\
**Category:** Help\
**Tags:** configuration, agent\
**Created:** [April 2, 2024, 7:59am UTC](https://community.netdata.cloud/t/netdata-agent-running-in-docker-container-cannot-read-directory-host-sys-fs-cgroup/5308 "2024-04-02T07:59:42Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ledj](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.netdata.cloud/ledj/32/3582_2.png) [@ledj](https://community.netdata.cloud/u/ledj)\
**Post date:** [April 2, 2024, 7:59am UTC](https://community.netdata.cloud/t/netdata-agent-running-in-docker-container-cannot-read-directory-host-sys-fs-cgroup/5308/1 "2024-04-02T07:59:42Z")

</div>

In docker logs -f netdata I continously get:

```auto
time=2024-04-02T09:39:27.433+02:00 comm=netdata source=collector level=error errno="13, Permission denied" tid=3852710 thread=P[cgroups] msg="CGROUP: cannot read directory '/host/sys/fs/cgroup'"

```

Tried with and without proxy, but still get Permission denied.

Running with this docker-compose.yml:

```auto
version: '3'

services:

  netdata:
    image: netdata/netdata:stable
    container_name: netdata
    hostname: fqdn # set to fqdn of host
    deploy:
      resources:
        limits:
          cpus: '1.0'
          memory: 1G
    pid: host
    restart: unless-stopped
    network_mode: host
    cap_add:
      - SYS_PTRACE
      - SYS_ADMIN
    security_opt:
      - apparmor:unconfined
    environment:
      - DOCKER_HOST=proxy:2375
    volumes:
      - netdataconfig:/etc/netdata
      - netdatalib:/var/lib/netdata
      - netdatacache:/var/cache/netdata
      - /etc/passwd:/host/etc/passwd:ro
      - /etc/group:/host/etc/group:ro
      - /etc/localtime:/etc/localtime:ro
      - /proc:/host/proc:ro
      - /sys:/host/sys:ro
      - /etc/os-release:/host/etc/os-release:ro
      - /var/log:/host/var/log:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /run/dbus:/run/dbus:ro
    extra_hosts:
      - "fqdn:10.10.10.10"

  proxy:
    container_name: netdata-proxy
    image: tecnativa/docker-socket-proxy
    network_mode: host
    environment:
      - CONTAINERS=1
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro

volumes:
  netdataconfig:
  netdatalib:
  netdatacache:

```