Skip to content

Is Lando compatible with "Enhanced Container Isolation" ? #3829

Description

@silverham

Hi team,

My work updated their docker desktop settings with Enhanced Container Isolation enabled by default, but then i got an error. I wonder is this settings should left enabled but configured a specific way or disabled?

Lando version: v3.26.0
OS: Windows 11 Version 23H2 OS Build 22631.6060
lando run in WSL.

Error if enabled (lando start)

[+] Running 3/4
 ✔ Network landoproxyhyperion5000gandalfedition_edge           Created                                                                                                            0.1s
 ✔ Volume "landoproxyhyperion5000gandalfedition_proxy_config"  Created                                                                                                            0.0s
 ✔ Volume "landoproxyhyperion5000gandalfedition_home_proxy"    Created                                                                                                            0.0s
 ⠧ Container landoproxyhyperion5000gandalfedition_proxy_1      Creating                                                                                                           7.6s
Error response from daemon: enhanced container isolation: Docker socket mount denied for container with image "traefik:2.11.31"; image is not in the allowed list. If you wish to allow it, add the image name to the Docker socket image list in the Docker Desktop admin-settings.
ERROR ==> UNKNOWN ERROR

I got the lando project to work (druapl10 blank project) to work after running lando destroy then lando start

$ lando start
Let's get this party started! Starting app drupal-ey-test...
[+] Running 1/1
 ✔ Container landoproxyhyperion5000gandalfedition_proxy_1  Started                                                                                                                1.1s
[+] Running 0/0
 ⠋ Container drupaleytest_appserver_1  Starting                                                                                                                                   0.0s
 ⠋ Container drupaleytest_database_1   Starting                                                                                                                                   0.0s
Error response from daemon: unknown or invalid runtime name: sysbox-runc
ERROR ==>

Metadata

Metadata

Assignees

No one assigned

    Labels

    documentationDocumentation needs an update

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions