Trouble Installing Docker Agent on Cisco C9300

I’ve been working with Stefano on this issue. I haven’t been able to install the latest Docker agent to 17.x IOS. After issuing the install command I would get no error and then issuing the “show app-hosting list” command I would get “No App found.” I tried this in a few different versions of 17.x without success. I downgraded to IOS 16.12.8 and I am now able to get the agent installed but I receive the “% Error: Error while changing app state: No module named OpenSSL”. I did a pull of agent 11.1.3 since it is closer to the date of the IOS that I am using but I received the same error.

1 Like

Hey Mitch,

Can you run “openssl version” on the CLI and let us know what you get?

That command doesn’t work on IOS

Hello Badgerfi,

My name is Will and I have the agent running on c9300, version 17.3.5.
I set this up with assist from Panos so there may be nothing I can add, he is the expert. I have been asked by Stevie to jump in here and see if there is anything I could share of value.

Would you be able to post the results of the following command making sure to remove or mark out the NB_SECRET_KEY

NOTE: Its been a long time since we installed ours so I am just looking for a reference point.

Will - UCR

1 Like

Will, What version are you running for the IOX and netbeez docker agent?

IOx service (CAF) 1.11.0.5
Libvirtd 1.3.4
Dockerd 18.03.0

Is that it

1 Like

Which command?

I still have a gut feeling this is license-related. I have elevated the switch to DNA Advantage via right to use. The switch is showing that it is using the DNA Advantage license.

1 Like

Yes Advantage is required.
Here is our license usage

show license usage
License Authorization:
Status: Not Applicable

network-advantage (C9300-48 Network Advantage):
Description: C9300-48 Network Advantage
Count: 1
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: C9300-48 Network Advantage
Enforcement type: NOT ENFORCED
License type: Perpetual

dna-advantage (C9300-48 DNA Advantage):
Description: C9300-48 DNA Advantage
Count: 1
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9300-48 DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription

I apologize this command please:
sh app-hosting detail

1 Like

Here is my output. I know it is in EVAL mode but it should still work.

The app-hosting detail doesn’t show anything because I can’t get anything to install.

DIA-MitchDesk9300U#show license usage
License Authorization:
Status: EVAL MODE
Evaluation Period Remaining: 84 days, 21 hours, 55 minutes, 40 seconds

(C9300-48 Network Advantage):
Description:
Count: 1
Version: 1.0
Status: EVAL MODE
Export status: NOT RESTRICTED

(C9300-48 DNA Advantage):
Description:
Count: 1
Version: 1.0
Status: EVAL MODE
Export status: NOT RESTRICTED

DIA-MitchDesk9300U#show app
DIA-MitchDesk9300U#show app-hosting detail
No App found

1 Like

Are you using a Cisco USB thumb drive?

1 Like

I can confirm that @badgerfi is using a Cisco USB Thumb Drive.

@William_Southwick would you be able to share your config removing any sensitive information? Just to check that we are not missing anything.

@gmoney what IOS-XE version are you using? Saw similar issues with 17.09.04a too.

Thanks all

I’ve tried both. The Cisco 120 and a regular thumb drive.

1 Like

I don’t mind jumping on a quick zoom call. This type of troubleshooting is easier live.

Switch Ports Model SW Version SW Image Mode
1 65 C9300-48UXM 17.09.04a CAT9K_IOSXE BUNDLE

1 Like

Thank you @gmoney … I can facilitate that with @badgerfi !

Many thanks to @badgerfi who, with help from @gmoney, was able to find the issue.

In the end, the netbeez docker app was not running due to software verification, which if enabled, it won’t allow AppHosting to run third party applications (non Cisco).

You can verify if your switch has software verification enabled with the command:

show app-hosting infra

If enabled, you can disable this setting by entering at privileged EXEC the following:

app-hosting verification disable

Updated the documentation page: https://netbeez.zendesk.com/hc/en-us/articles/360028594831-Cisco-Catalyst-NetBeez-App-Hosting-with-Docker-IOS-XE-16-12-17-x

Thanks fellas! Again, I REALLY apologize for all of the missed meetings, etc.

1 Like