LCOW: Docker Volumes don't support some fs operations that bind mounts support - CreateFile access denied about opengcs

[Iristyle]

Left the same comment on the Moby issue:

I should have paid closer attention to the "access denied" error that came back in my trace. Turns out this is permissions related and should hopefully be pretty straightforward to address (just need to find the least privilege to be granted, noting that NTFS junctions historically required admin privileges in Windows, and that changed a bit in Windows 10 - see https://blogs.windows.com/windowsdeveloper/2016/12/02/symlinks-windows-10/)

Create the volume

PS C:\WINDOWS\system32> docker volume create pg
pg

Find the volume location on disk

PS C:\WINDOWS\system32> docker volume inspect pg
[
    {
        "CreatedAt": "2019-09-13T16:38:28-07:00",
        "Driver": "local",
        "Labels": {},
        "Mountpoint": "C:\\ProgramData\\docker\\volumes\\pg\\_data",
        "Name": "pg",
        "Options": {},
        "Scope": "local"
    }
]

Get current permissions

PS C:\WINDOWS\system32> icacls C:\\ProgramData\\docker\\volumes\\pg\\_data
C:\\ProgramData\\docker\\volumes\\pg\\_data BUILTIN\Administrators:(I)(OI)(CI)(F)
                                            NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
                                            CI-LCOW-PROD-4\puppet:(I)(OI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

Grant Full permissions to the Windows users group

PS C:\WINDOWS\system32> icacls C:\\ProgramData\\docker\\volumes\\pg\\_data /grant Users:"(OI)(CI)F" /T
processed file: C:\\ProgramData\\docker\\volumes\\pg\\_data
Successfully processed 1 files; Failed processing 0 files

And read them back

PS C:\WINDOWS\system32> icacls C:\\ProgramData\\docker\\volumes\\pg\\_data
C:\\ProgramData\\docker\\volumes\\pg\\_data BUILTIN\Users:(OI)(CI)(F)
                                            BUILTIN\Administrators:(I)(OI)(CI)(F)
                                            NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
                                            CI-LCOW-PROD-4\puppet:(I)(OI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

Start Postgres with the named volume

PS C:\WINDOWS\system32> docker run --volume pg:/var/lib/postgresql/data postgres:9.6

Postgres output - success!

The files belonging to this database system will be owned by user "postgres".
This user must also own the server process.

The database cluster will be initialized with locale "en_US.utf8".
The default database encoding has accordingly been set to "UTF8".
The default text search configuration will be set to "english".

Data page checksums are disabled.

fixing permissions on existing directory /var/lib/postgresql/data ... ok
creating subdirectories ... ok
selecting default max_connections ... 100
selecting default shared_buffers ... 128MB
selecting default timezone ... Etc/UTC
selecting dynamic shared memory implementation ... posix
creating configuration files ... ok
running bootstrap script ... ok
performing post-bootstrap initialization ... ok
syncing data to disk ... ok

Success. You can now start the database server using:

<snip startup stuff/>

PostgreSQL init process complete; ready for start up.

LOG:  database system was shut down at 2019-09-13 23:40:07 UTC
LOG:  MultiXact member wraparound protections are now enabled
LOG:  database system is ready to accept connections
LOG:  autovacuum launcher started

[Snipx]

Wow @Iristyle you're a rockstar! Thanks so much for sharing your results. I was having the exact same problem and I would certainly give up before finding the way you came up with!