Internal hosting with VMWare VM - Docker container restarts every 30 minutes

Problem

OneList containers restart every 30 minutes on a VMWare VM. This issue is observed on VMWare Tool v11.0.1. The issue is fixed in VMware Tools 11.0.6.

Solution

Upgrade VMware Tools to version 11.0.6.

Disabled control flow guard on security settings.

Disable VMware appinfo.

  1. Open Command Prompt in Administrator mode.

  2. cd “c:\Program Files\VMware\VMware Tools”.

  3. VMwareToolboxCmd.exe config set app info disabled true

https://forums.docker.com/t/the-running-container-failed-after-a-few-minutes-solved/91195/8

https://kb.vmware.com/s/article/78550

https://forums.docker.com/t/the-running-container-failed-after-a-few-minutes-solved/91195

https://stackoverflow.com/questions/50126279/cant-start-docker-on-windows

 

Problem

Cannot create or launch Docker containers when Symantec Endpoint Protection (SEP) is installed.

Solution

To work around this issue, you will need to upgrade to SEP 14 RU1, or newer, and add the following paths as Windows File Exceptions to the Exceptions Policy at the SEPM.

Prefix Variable

File and Path (Exclude child processes)

%[SYSTEM]%

lsass.exe

%[SYSTEM]%

svchost.exe

%[SYSTEM]%

cexecsvc.exe

%[SYSTEM]%

oobe\windeploy.exe

Ensure that you Choose "Application Control" (for the type of scan that excludes the file) and select also "Exclude child processes". The new Exceptions Policy should then be deployed to the affected clients.

Note: if you were experiencing a Docker installation failure before putting these exceptions into place, you may need to uninstall the failed package before retrying.

For situations where you will be adding Windows Features to a live container, or installing a service, additional exceptions may be needed. The following example shows the exceptions to both run an MSI install and run the DNS service (Not all of these are necessary for all situations):

Prefix Variable

File and Path (Exclude child processes)

%[WINDOWS]%

servicing\trustedinstaller.exe

%[SYSTEM]%

msiexec.exe

%[SYSTEM]%

dns.exe

https://knowledge.broadcom.com/external/article?legacyId=tech246815