Permission denied in Orthanc container

12 views
Skip to first unread message

Alan Chamberlain

unread,
Jul 25, 2024, 4:46:08 AMJul 25
to OpenREM
Hi

I am running the docker install of openrem under Fedora CoreOS. When I export a RSDR file via DICOM export to the OpenREM system I can see that the patient comes through in the logs, but it does not appear in the database. 

openrem-orthanc-1 | W0725 08:14:50.002212       LUA-EVENTS LuaContext.cpp:94] Lua says: Starting OnStoredInstance
openrem-orthanc-1 | W0725 08:14:50.062842       LUA-EVENTS LuaContext.cpp:94] Lua says: Is it a physics test?
openrem-orthanc-1 | E0725 08:14:50.063030       LUA-EVENTS OrthancException.cpp:61] Cannot execute a Lua command: [strin
g "line"]:290: /imports/2e81e5ea-6bc9602b-3cea8338-26cc97bc-cb62d7b9.dcm: Permission denied
openrem-orthanc-1 | E0725 08:14:50.063100       LUA-EVENTS LuaScripting.cpp:841] Error while processing Lua events: Cann
ot execute a Lua command
openrem-orthanc-1 | W0725 08:15:50.443180       LUA-EVENTS LuaContext.cpp:94] Lua says: This study is now stable, writin
g its instances on the disk: 4060c4ae-3c4dec42-2a89361a-697dacf5-27313b81
openrem-orthanc-1 | W0725 08:15:50.480126       LUA-EVENTS LuaContext.cpp:94] Lua says: PatientName is: RSDR TEST^^^Mr^
openrem-orthanc-1 | W0725 08:15:50.480180       LUA-EVENTS LuaContext.cpp:94] Lua says: PatientID is: 0123456789


I see there is a permission denied error on the /import folder. I don't know if this is causing the problem. I've tried to change the permissions of the folder by opening a bash shell in the container
docker exec -it orthanc /bin/bash
and do
chmod 777 imports
but it won't allow me to change the folder.
Any assistance will be greatly appreciated.

Regards
Alan

Alan Chamberlain

unread,
Jul 25, 2024, 5:01:10 AMJul 25
to OpenREM
Just to update it is SELinux causing the problem. On disabling it RSDR imported correctly.

Alan Chamberlain

unread,
Jul 25, 2024, 9:37:27 AMJul 25
to OpenREM
I think the line:
     - imports_volume:/imports

also needs a :z, i.e. the section volumes in orthanc_1 in docker-compose.yml should read:
   volumes:
# For SELinux (RedHat, Fedora etc), add :z to the end of next line
     - imports_volume:/imports/:z
     - ./orthanc:/etc/share/orthanc/scripts/:z


I'm not able to test this at the moment, but if someone can confirm I'm on the right track I'll make a plan and get to it.
Regards
Alan

Ed McDonagh

unread,
Jul 25, 2024, 11:51:31 AMJul 25
to OpenREM
That would make sense to me Alan. I'm not able to test this, so if you or someone else can and let me know that would be great. Then we can update the docs and the docker-compose.yml file. 

In fact, looking at what the z flag does again, I'm wondering if all the shared volumes don't need that flag? As it is, the config file suggests that it is needed for all the volumes that are not shared - is it all the wrong way around?! 

Should each mention of the media, static and imports volumes have a z?

--
You received this message because you are subscribed to the Google Groups "OpenREM" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openrem+u...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/openrem/4f91a589-a8ca-4bfd-9246-bb747079fcefn%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages