Hi all, having some challenges getting Rancher Desktop working properly on macOS 12.6 on an M1 Pro. Weirdly, it worked just fine yesterday but after an update last night it’s crashing on:

client-key-data: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUxrdFVIanh3NGhOWGluVW9WRVpmbTU0UjlrUXVnVW5DZUxCS1V5eTV4L0xvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFSmZCYU1nbEgwYmRJQ3NROWNoRUlPeDhzSXVlaTNWOVpVM3RZd2RhOXNUaGFuQWRpM0xjVQpoS2JrMVA0aVJuVVJxaTJjQ2dpK3lQaTBhU3FCYkFCRWtRPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=

2022-09-27T16:17:12.691Z: Error starting lima: Error: unable to verify the first certificate
    at TLSSocket.onConnectSecure (node:_tls_wrap:1530:34)
    at TLSSocket.emit (node:events:390:28)
    at TLSSocket._finishInit (node:_tls_wrap:944:8)
    at TLSWrap.ssl.onhandshakedone (node:_tls_wrap:725:12) {
  code: 'UNABLE_TO_VERIFY_LEAF_SIGNATURE'
}

I've installed rancher desktop (Moby, not nerdctl) on a windows 11 machine. however, still have docker desktop AND podman desktop installed. I can't seem to run docker in a WSL box (notably, my WSL distro is called Ubuntu-22.04, not "Ubuntu"). Rancher > Preferences > WSL shows

Ubuntu-22.04: Error: File /c/users/<user>/.kube/config exists and is not a symlink

and is grayed out. • Additionally, I can't run docker in the wsl prompt.

$ docker ps
  Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?

• is there something i need to 'clear' or 'reset' first? Am I supposed to uninstall docker desktop / podman desktop?

Hi , I have a issue which is I make deployment to rancher, code base is laravel. my application run for 6 hrs or 5 hrs and its stop working on rancher. when i redeploy application its start working again what should be the error. i have one pod running against application. Please help Thanks

hey team, any idea why my PS doesn't recognise docker commands after installing rancher desktop? it runs ok using wsl but PS isn't recongising...

Sahi

Hi all, the windows install docs mention a "Rancher Desktop Privileged Service", but when I installed version 1.5.1, using an elevated, admin session, I did not see any reference to this feature. Nor can I find it in any menus or services. Google has only 4 hits for "Rancher Desktop Privileged Service". What am I missing? How is this enabled?

On another note, how can I configure the networks for docker0 and flannel.1 / cni0 ?

I'm using Rancher Desktop 1.5.1 and have seen odd environment variable precedence for compose. My compose file looks like this:

services:
 busybox:
   container_name: busybox
   image: busybox
   env_file: .env-compose
   environment:
     ZA: "in compose"
   profiles:
     - test
   command: ['sh', '-c', 'set']

I have .env and .env-compose files as shown below, and set local environment variables ZA=OS and ZB=OS

; .env file
ZA=.env file
ZB=.env file
ZC=.env file

.env-compose

ZA=.env-compose file
ZB=.env-compose file
ZC=.env-compose file
ZD=.env-compose file

Hi I’m trying to run rancher desktop on m1 mac but it keeps giving me certificate related error.

Error: unable to verify the first certificate


2022-10-03T14:15:55.365Z: Error starting lima: Error: unable to verify the first certificate
    at TLSSocket.onConnectSecure (node:_tls_wrap:1530:34)
    at TLSSocket.emit (node:events:390:28)
    at TLSSocket._finishInit (node:_tls_wrap:944:8)
    at TLSWrap.ssl.onhandshakedone (node:_tls_wrap:725:12) {
  code: 'UNABLE_TO_VERIFY_LEAF_SIGNATURE'
}

On M1 Mac, to start an existing container, I always have to call start twice. The first time I get an error, and the second time always succeeds. This is for any container. Here is the output from starting

swaggergen

and

plantuml

> docker start swaggergen
FATA[0000] failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error running hook #0: error running hook: exit status 1, stdout: , stderr: time="2022-10-03T14:35:34Z" level=fatal msg="failed to call cni.Setup: plugin type=\"bridge\" failed (add): failed to allocate for range 0: 10.4.0.223 has been allocated to default-5bc005115dca3ab9857e16c6c3dbf3f219269ea65628c7b974f0d98f1c7b5755, duplicate allocation is not allowed"
Failed to write to log, write /var/lib/nerdctl/dbb19c5e/containers/default/5bc005115dca3ab9857e16c6c3dbf3f219269ea65628c7b974f0d98f1c7b5755/oci-hook.createRuntime.log: file already closed: unknown
> docker start swaggergen
swaggergen

> docker start plantuml
FATA[0000] failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error running hook #0: error running hook: exit status 1, stdout: , stderr: time="2022-10-03T14:39:17Z" level=fatal msg="failed to call cni.Setup: plugin type=\"bridge\" failed (add): failed to allocate for range 0: 10.4.0.43 has been allocated to default-92f1c588f142c0f2457ad20b4aef575227a8c3ee85d9d53f1aef2f31ba158826, duplicate allocation is not allowed"
Failed to write to log, write /var/lib/nerdctl/dbb19c5e/containers/default/92f1c588f142c0f2457ad20b4aef575227a8c3ee85d9d53f1aef2f31ba158826/oci-hook.createRuntime.log: file already closed: unknown
> docker start plantuml
plantuml

Hi all, I am running Rancher Desktop 1.5.1 on MacBook M1. I'm able to pull an image from my private repository using nerdctl:

nerdctl -n <http://k8s.io|k8s.io> pull <http://artifactory.mycompany.com/images/hello-app:v0.0.1|artifactory.mycompany.com/images/hello-app:v0.0.1>

Then, I can create a pod (the pod is up and running, but it uses the pulled image):

kubectl run hello-app --image=<http://artifactory.mycompany.com/images/hello-app:v0.0.1|artifactory.mycompany.com/images/hello-app:v0.0.1>

But this is not the desired behavior. I want to be able to create the kubernetes resources using the private registry, without downloading the image first. So, I deleted the previously downloaded image, then I tried to recreate the pod:

nerdctl -n <http://k8s.io|k8s.io> rmi <http://artifactory.mycompany.com/images/hello-app:v0.0.1|artifactory.mycompany.com/images/hello-app:v0.0.1>
kubectl run hello-app --image=<http://artifactory.mycompany.com/images/hello-app:v0.0.1|artifactory.mycompany.com/images/hello-app:v0.0.1>

Now, the pod's status is ErrImagePull:

Failed to pull image "<http://artifactory.mycompany.com/images/hello-app:v0.0.1|artifactory.mycompany.com/images/hello-app:v0.0.1>": rpc error: code = Unknown desc = failed to pull and unpack image "<http://artifactory.mycompany.com/images/hello-app:v0.0.1|artifactory.mycompany.com/images/hello-app:v0.0.1>": failed to resolve reference "<http://artifactory.mycompany.com/images/hello-app:v0.0.1|artifactory.mycompany.com/images/hello-app:v0.0.1>": pulling from host <http://artifactory.mycompany.com|artifactory.mycompany.com> failed with status code [manifests v0.0.1]: 403 Forbidden

I observed the forbidden message, but I ran

nerdctl login <http://artifactory.mycompany.com|artifactory.mycompany.com>

Again, if I download the image using nerdctl, the pod is up and running. I have to mention that I tried to add the private registry using ~/Library/Application Support/rancher-desktop/lima/\_config/override.yaml file, but no success: it seems that the registry is not recognized by containerd - nothing is added in the /etc/containerd/config.toml file, even if the registries.yaml file is in the /etc/rancher/k3s directory. My override.yaml file:

provision:
  - mode: system
    script: |
      #!/bin/sh
      set -eux
      mkdir -p /etc/rancher/k3s/
      cat <<'EOF' > /etc/rancher/k3s/registries.yaml
      mirrors:
        <http://docker.io|docker.io>:
          endpoint:
            - "<https://artifactory.mycompany>"
      configs:
        "<http://artifactory.mycompany.com|artifactory.mycompany.com>":
          auth:
            username: .......
            password: .......
      EOF

If I run ``rdctl shell -- cat /etc/rancher/k3s/registries.yaml``, I see the desired file provisioned by the override.yaml.

did you try and add an imagepullsecret resource?

Anyone know when the next version of Rancher Desktop will be released? Will this version support air gapped environments? Thanks

volume mounts query - dont understand why a file shows up as directory inside the container. thoughts?

$ cat /tmp/local-gbs-user/init.sql 
IF DB_ID('backend_sim') IS NULL
CREATE DATABASE backend_sim;
GO
$ docker run --rm -t
i --name sqlinit -v /tmp/local-gbs-user/init.sql:/sql/init.sql --entrypoint bash australia-southeast1-docker.pkg.dev/gb-plat-dev-gar-v1/apps-docker-repo/mcr.microsoft.com/mssql-tools:latest-1205
bob@778f2f0b5ba0:/$ cat /sql/init.sql
cat: /sql/init.sql: Is a directory

Ignore. I cannot delete it.

we are plagued with the problem of networking and rancher desktop not being able either to download kes images at start or not being able to pull images. We have an enterprise proxy and this could be the problem and also VPN and this could also be another source of problem (than I red in this channel that there is also the MTU topic) also the DNS could be another factor. Can someone helm us and all the rancher desktop community run a set of tests to identify the problem and hopefully find a solution?

Hello, I am new to rancher and was just trying the “hello world” examples shown here on a MacOS: https://docs.rancherdesktop.io/how-to-guides/hello-world-example But when I run the command

kubectl run hello-world --image=nginx-helloworld:latest --image-pull-policy=Never --port=80

I get endless errors like

W1006 11:29:07.716916  55764 transport.go:243] Unable to cancel request for *exec.roundTripper

Am I missing something here?

Hi, I just started using Rancher Desktop, and it is running fine except that the connection seems intermittent. I am getting

I1006 17:33:58.679057   79241 versioner.go:56] Remote kubernetes server unreachable
Unable to connect to the server: net/http: TLS handshake timeout

a lot, and if I restart Rancher it works again but then soon afterwards gets that error again. Anyone knows why?

Since we have a long weekend coming up (Canadian Thanksgiving on Monday), I will not update the auto-update config until Tuesday. If you want to try out the new release earlier, then you'll have to install it manually.

Hello Everyone

I've had some success with this by doing a factory reset in troubleshooting tab in rancher desktop

RD 1.6.0 Diagnostics

The file ~/.docker/cli-plugins/docker-buildx should be a symlink to ~/.rd/bin/docker-buildx, but points to /opt/rancher-desktop/resources/resources/linux/bin/docker-buildx.

So - am I supposed to fix this, of was the upgrade of RD from one version to another supposed to have made this change for me?

Hi All

The below IP address is timing out when pinged for RD v1.5.1 and v1.6.0:

RD 1.6.0 Diagnostics

The ~/.rd/bin directory has not been added to the PATH, so command-line utilities are not configured in your bash shell.

Err - yes they are (3rd in the path list - ignore the duplicates 😉 )...

$ echo $PATH
/home/mdsh/.local/bin:/home/mdsh/bin:/home/mdsh/.rd/bin:/home/mdsh/.local/bin:/home/mdsh/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin:/snap/bin

and

$ tail -n 4 ~/.bashrc 

### MANAGED BY RANCHER DESKTOP START (DO NOT EDIT)
export PATH="/home/mdsh/.rd/bin:$PATH"
### MANAGED BY RANCHER DESKTOP END (DO NOT EDIT)

Hi Team I am getting this error in Rancher startup in Windows 10 any help is appreciated Error: wsl.exe exited with code 4294967295 for the command below

wsl.exe --import rancher-desktop C:\Users\Anurag.Raghavan\AppData\Local\rancher-desktop\distro C:\Users\Anurag.Raghavan\AppData\Local\Programs\Rancher Desktop\resources\resources\win32\distro-0.26.tar --version 2

👋 Bonjour à tous !

Hello, I wanted to know if it was possible to install kubespray distribution with multinode controlplane with rancher desktop, and if yes is there documentation about this installation. Thank you for your responses 🙂

Can anyone explain at what level qemu gets pulled in? Is that w/lima? or rancher desktop specifically? There's a patch that's hopefully landing soon and I'd like to follow it into rancher desktop if possible (https://gitlab.com/qemu-project/qemu/-/issues/1222#note_1124149212)