IBM Security QRadar

 View Only
  • 1.  QRadar SDK 2 Unable to connect to Docker

    Posted Thu January 28, 2021 06:00 PM
    I just installed the QRadar SDK v2.0.2. I was able to successfully create a new app workspace with the qapp create command. But running the qapp build command gives me the following error: Unable to connect to Docker. Please check that Docker is running.

    Here is the full output
    $ qapp build
    
    Base image q1docker-release.canlab.ibm.com/gaf/qradar-app-base:2.0.4 is not in your Docker registry
    Loading base image from /Users/wagena/qradarappsdk/base_image/qradar-app-base-2.0.4.xz...
    Unable to connect to Docker. Please check that Docker is running.​

    I do have docker installed and running here is the output of docker ps

    $ docker ps
    
    CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES​


    This is on:
    Mac Catalina 10.15.7
    Docker v3.1.0.
    Python 3.8.1
    QRadar SDK v2.0.2

    I've tried restarting both Docker and Mac. I've also tried re-installing the SDK and didn't see any errors. Has anyone else encountered this problem?



    ------------------------------
    Wesley Agena
    ------------------------------


  • 2.  RE: QRadar SDK 2 Unable to connect to Docker

    Posted Fri January 29, 2021 03:29 AM
    Hi Wesley,

    Have you done this:
    On Linux, your user must be in a docker group so that the SDK can interact with Docker without requiring elevated privileges. More information on configuring Docker on Linux can be found 
    here.


    ------------------------------
    Jabez Daniel
    ------------------------------



  • 3.  RE: QRadar SDK 2 Unable to connect to Docker

    Posted Fri January 29, 2021 11:29 AM
    Hi Jabez,

    I'm running on Mac, I'm able to use docker as my user without sudo privilege. This is the same user the SDK is installed under. Any thoughts here? Any other details I can add that might help? Thank you for the help!

    ------------------------------
    Wesley Agena
    ------------------------------



  • 4.  RE: QRadar SDK 2 Unable to connect to Docker

    Posted Thu February 04, 2021 12:09 PM
    Hi Wesley,

    I've faced the same problem and managed to fix it by running an older version of docker desktop. This problem seems to occur on both Windows and Mac. Try running Docker Desktop 2.4.0 and do not update it.

    ------------------------------
    Hidde van der Meulen
    ------------------------------



  • 5.  RE: QRadar SDK 2 Unable to connect to Docker

    Posted Thu February 04, 2021 12:35 PM
    Edited by Michael Benson Thu February 04, 2021 12:36 PM
    The issue was introduced in Docker Desktop 3.1.0. See https://github.com/docker/for-mac/issues/5271

    The SDK hits the issue when you run qapp build or qapp run, and it attempts to load the app base image (held in an xz archive) into your local Docker registry.

    To work around the issue you can either:
    • install an older version of Docker Desktop, or
    • manually unpack the image archive, repackage it in an alternative format e.g. gzip, and then run docker load from the command line.
    The xz archive lives (assuming you installed the SDK in its default location) in directory qradarappsdk/base_image under your home directory.

    ------------------------------
    Michael Benson
    ------------------------------



  • 6.  RE: QRadar SDK 2 Unable to connect to Docker

    Posted Fri February 05, 2021 02:22 PM
    This solved the problem for me, thank you!

    ------------------------------
    Wesley Agena
    ------------------------------