Fix For Container Start Failures: Update Windows Container base OS images

Question

Symptoms
When trying to start a container you receive the following error:
docker: Error response from daemon: container e77f1816c775eb705d547b90da62656e089438a65c3f0633a998508c93a47037 encountered an error during Start failed in Win32: winapi error #3221227274 (0xc000070a)

When trying to start a container "docker run" will hang for several minutes.

Resolution
The container OS image (base image) needs to be updated.  In order to complete that update, you will need to update to version 1.12.0 of Docker, and pull the latest version of the base OS images from Docker Hub.

Run these PowerShell commands to update Docker:

>Stop-Service Docker
>Remove-Item "C:\Program Files\Docker\docker.exe"
>Remove-Item "C:\Program Files\Docker\dockerd.exe"

>Invoke-WebRequest "https://get.docker.com/builds/Windows/x86_64/docker-1.12.0.zip" -OutFile "$env:TEMP\docker-1.12.0.zip" -UseBasicParsing
>Expand-Archive -Path "$env:TEMP\docker-1.12.0.zip" -DestinationPath $env:ProgramFiles

>& $env:ProgramFiles\docker\dockerd.exe --register-service
Start-Service docker

We have recently pushed the base OS images into Docker Hub, which means getting these will now be very simple.

The pull the latest version of the base OS images, use these commands:

docker pull microsoft/windowsservercore
docker pull microsoft/nanoserver

We are also currently working on updating all of the images on Docker Hub that are based on windows base images. We will update this post when this is done.

To check if you have the correct versions of the base OS images, these are their Image IDs:

REPOSITORY                           IMAGE ID           
microsoft/windowsservercore    02cb7f65d61b       
microsoft/nanoserver                3a703c6e97a2       

Regards,
Ender

Answer 1

Hi,

I updated as your instructions, but failed to docker run. 

PS C:\WINDOWS\system32> docker images
REPOSITORY                    TAG                 IMAGE ID            CREATED             SIZE
microsoft/windowsservercore   latest              02cb7f65d61b        7 weeks ago         7.764 GB

PS C:\WINDOWS\system32> docker run -it 02cb7f65d61b cmd
C:\Program Files\Docker\docker.exe: Error response from daemon: container 0e757c53d253624a8ffb5a3daf529924c5ce05cdf2537209fc4afb1921b04647 encountered an error during CreateContainer failed in Win32: The system cannot find the path speci
fied. (0x3) extra info: {"SystemType":"Container","Name":"0e757c53d253624a8ffb5a3daf529924c5ce05cdf2537209fc4afb1921b04647","Owner":"docker","IsDummy":false,"VolumePath":"\\\\?\\Volume{18ca1bef-5af8-11e6-bf89-001018cc4e9d}","IgnoreFlushe
sDuringBoot":true,"LayerFolderPath":"C:\\ProgramData\\docker\\windowsfilter\\0e757c53d253624a8ffb5a3daf529924c5ce05cdf2537209fc4afb1921b04647","Layers":[{"ID":"19276871-a645-5e8b-8b90-84a2a936c4bb","Path":"C:\\ProgramData\\docker\\window
sfilter\\cadc7cea503030b7b1a5c56086d84b3c8f354d214d01afebc67d5e550e83df70"}],"HostName":"0e757c53d253","MappedDirectories":[],"SandboxPath":"","HvPartition":false,"EndpointList":["e74a2fba-e884-46a1-885a-f33bfe4094cb"],"HvRuntime":null,"
Servicing":false}.

Here are my environments:

PS C:\WINDOWS\system32> docker version
Client:
 Version:      1.12.0
 API version:  1.24
 Go version:   go1.6.3
 Git commit:   8eab29e
 Built:        Thu Jul 28 23:54:00 2016
 OS/Arch:      windows/amd64

Server:
 Version:      1.12.0
 API version:  1.24
 Go version:   go1.6.3
 Git commit:   8eab29e
 Built:        Thu Jul 28 23:54:00 2016
 OS/Arch:      windows/amd64

PS C:\WINDOWS\system32> docker info
Containers: 4
 Running: 0
 Paused: 0
 Stopped: 4
Images: 1
Server Version: 1.12.0
Storage Driver: windowsfilter
 Windows:
Logging Driver: json-file
Plugins:
 Volume: local
 Network: nat transparent null overlay
Swarm: inactive
Security Options:
Kernel Version: 10.0 14300 (14300.1045.amd64fre.rs1_release_svc.160705-1059)
Operating System: Windows Server 2016 Datacenter Technical Preview 5
OSType: windows
Architecture: x86_64
CPUs: 8
Total Memory: 15.96 GiB
Name: dmshtest
ID: QG2N:PR4W:M3TT:7RC3:JZHA:FRC7:ZMHL:MNMT:2Q72:J2RG:HXYB:MT6U
Docker Root Dir: C:\ProgramData\docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
Insecure Registries:
 127.0.0.0/8

Thanks for your help.

Answer 2

Hi,

I've done it like mentioned above but get the exact same error-message.

I get the message while going through the tutorial of MS: https://msdn.microsoft.com/en-us/virtualization/windowscontainers/quick_start/quick_start_windows_server?f=255&MSPPError=-2147217396

#4:

User docker run to deploy the IIS container.

docker run -d -p 80:80 microsoft/iis:windowsservercore ping -t localhost

Thanks!

Answer 3

I've updated as described, showing I'm running Docker 1.12.0, but get the certificate error when trying to pull nanoserverimage:

[192.168.88.169]: PS C:\Program Files\docker> .\docker pull microsoft/nanoserver
Using default tag: latest
latest: Pulling from microsoft/nanoserver
cf62dbf6d334: Pulling fs layer
cf62dbf6d334: Verifying Checksum
cf62dbf6d334: Download complete
.\docker : failed to register layer: re-exec error: exit status 1: output: ProcessBaseLayer 
C:\ProgramData\docker\windowsfilter\718562dd73323be591a91120e08a9be963603f6b7a397d361cf3adc9b23c9efb: A required certificate is not within its 
validity period when verifying against the current system clock or the timestamp in the signed file.
    + CategoryInfo          : NotSpecified: (failed to regis...he signed file.:String) [], RemoteException
    + FullyQualifiedErrorId : NativeCommandError
 

"docker info" as follows:

[192.168.88.169]: PS C:\Program Files\docker> .\docker info
Containers: 1
 Running: 0
 Paused: 0
 Stopped: 1
Images: 1
Server Version: 1.12.0
Storage Driver: windowsfilter
 Windows: 
Logging Driver: json-file
Plugins:
 Volume: local
 Network: overlay nat null
Swarm: inactive
Security Options:
Kernel Version: 10.0 14300 (14300.1010.amd64fre.rs1_release_svc.160415-2143)
Operating System: Windows Server 2016 Standard Technical Preview 5
OSType: windows
Architecture: x86_64
CPUs: 1
Total Memory: 1024 MiB
Name: minwinpc
ID: RIWX:4K7F:45NN:ITHR:2C2Z:REI3:RIED:VFHA:2GHL:QIU6:5QOC:LCCM
Docker Root Dir: C:\ProgramData\docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
Insecure Registries:
 127.0.0.0/8

---

Twitter: @techdiction Blog: http://www.techdiction.com