Docker services fail to start on JSA appliances that were originally installed at version 7.2.8 or earlier, then upgraded to 7.5.0 Update Pack 2 Interim Fix 2. This service issue prevents applications from starting as the original Red Hat Enterprise (RHEL) install for JSA /STRM 7.2.8 or earlier sets XFS to ftype=0. When JSA is upgraded to 7.5.0 Update Pack 2 Interim Fix 2, the Docker service expects ftype=1, preventing services from starting as expected.

Docker fails to start.  

/var/log/qradar.log shows the following entries:

Hostname dockerd[9053]: Error starting daemon: error initializing graphdriver: overlay2: the backing xfs filesystem is formatted without d_type support, which leads to incorrect behavior. Reformat the filesystem with ftype=1 to enable d_type support. Backing filesystems without d_type support is not supported. 
Hostname systemd[1]: docker.service: main process exited, code=exited, status=1/FAILURE
Hostname systemd[1]: Failed to start Docker Application Container Engine.

If you have already applied the Interim Fix and are already seeing this problem, please open a case with JTAC for a solution.

If you need to apply IF02 for the fixes it contains, please do the following check if it is safe to apply:

1. Use SSH to log into the Console.

2. Type the following command: 

xfs_info /store | grep ftype

Example output

naming=version 2 bsize=4096 ascii-ci=0 ftype=0

If the output displays ftype=1, you can continue with applying 7.5.0 Update Pack 2 Interim Fix 2.

If the output displays ftype=0, do NOT apply 7.5.0 Update Pack 2 Interim Fix 2.  Open a case with JTAC for more information.

•  8/17/22 creation date

• 10/06/23 modified for changed resolution information