*** BEWARE *** Docker 29 and Portainer Failures

Anyone running portainer should avoid docker 29 updates on the host for now. Known problems. I had one linux host update to docker 29 and portainer could no longer connect to localhost because of api changes. It is possible to get around this problem but portainer team still says hold off until they get a fix out. If you are stuck with a server that has updated you can follow this method linked below to get around the localhost connection failure;

  1. systemctl edit docker.service
  2. Add this part above the line ### Lines below this comment will be discarded:

[Service]
Environment=DOCKER_MIN_API_VERSION=1.24

  1. Save and exit
  2. systemctl restart docker

https://www.reddit.com/r/portainer/comments/1oumupa/docker_29_is_currently_not_compatible_with/

Edit: If you do apply the workaround above, once Portainer patches the issue you will need to back out the above changes.

1 Like

@bnhf I know you do some work with portainer and docker so letting you know just in case this has any impact.

Yeah...had that happened when I apt updated. What a bizarre bug that is. Please update your tools with caution, folks. Even the most experienced programmer screws up from time to time

1 Like

Be aware that you bay be trading security for stability:

https://hothardware.com/news/runc-flaws-enables-hackers-to-exploit-docker-containers

Agree. It is always good practice to stay up to date with patching but now and then this can cause issues like this one. I'm a little surprised that the Portainer team did not already have this major release of docker 29 tested and patched in Portainer before the release of docker 29. This is why I have a test system that I more aggressively apply patching on.

2 Likes

This workaround should have no security issues as explained by the one of the docker maintainers ,thaJeztah, here:
https://www.reddit.com/r/docker/comments/1ounfw8/comment/nodwknz/

1 Like

Seems like every major release from Docker, Portainer has an issue. The issue was reported to Portainer folks in a RC version of Docker. There reply was to role back to an older version of Docker Beta as they do not support any Beta/RC releases and or will not look at it. Then once folks was starting to report in mass. Portainer folks said to not install the RC version even though 29.0 was released to the General public. You would think that since both of these products go together like Peanut Butter and Jelly that they would communicate better with each other. So frustrating!

1 Like

Portainer CE:sts is out as a fix for Docker 29, hopefully an lts version will be out in the near future.

Also, if you're using Watchtower, it was broken by Docker 29 as well. You can use this different image in your compose yaml to get it to work as well, Package watchtower · GitHub.

Thanks for the update @daldana7296. I did not know that watchtower was also hit on this issue.

1 Like

Portainer Release 2.33.5 LTS with docker 29 support out.

1 Like