Docker level=error msg="Error listening to socket: listen ip4:icmp 0.0.0.0: socket: operation not permitted"

[veer123prathap]

Docker level=error msg="Error listening to socket: listen ip4:icmp 0.0.0.0: socket: operation not permitted"

[StianOvrevage]

Hi!

It should have been fixed with the update they did to the container 4 years ago. Are you using the latest image version? Try using a tagged Docker image, for example:

docker pull prom/blackbox-exporter:v0.18.0

[veer123prathap]

we are using v0.16.0
Do we need root access for container where black box exporter running

[StianOvrevage]

Try v0.18.0 then.

If that does not work then you may need to use root / privileged access, yes.

[veer123prathap]

FROM quay.io/prometheus/busybox:latest
COPY blackbox.yml /etc/blackbox_exporter/config.yml
USER root
EXPOSE 9115
ENTRYPOINT [ "/bin/blackbox_exporter" ]
CMD [ "-config.file=/etc/blackbox_exporter/config.yml" ]

[veer123prathap]

this is our docker file still we are facing same issue

[StianOvrevage]

I don't have experience with Openshift and how it deals with permissions. You may have more luck creating an issue or asking in an Openshift community, or directly in the prometheus repos.

[veer123prathap]

We need to apply this config at target serve side
distribution may configure net.ipv4.ping_group_range by default in /etc/sysctl.conf or similar. If not you can set net.ipv4.ping_group_range = 0 2147483647 to allow any user the ability to use ping.
do we need to run this config at container side where black running
Alternatively the capability can be set by executing setcap cap_net_raw+ep blackbox_exporter
is that right
is something wrong please correct me