Example to Run Kratos Using Docker Doesn't Work

Preflight checklist

• I could not find a solution in the existing issues, docs, nor discussions.
• I agree to follow this project's Code of Conduct.
• I have read and am following this repository's Contribution Guidelines.
• This issue affects my Ory Network project.
• I have joined the Ory Community Slack.
• I am signed up to the Ory Security Patch Newsletter.

Describe the bug

I tried branches master, v0.8, and v0.11, but none seemed to work.

Reproducing the bug

Follow the steps in the docs, and see that the container does not launch

Relevant log output

➜  kratos git:(v0.8) docker run -it -e DSN="memory" \
  --mount type=bind,source="$(pwd)"/contrib/quickstart/kratos/email-password,target=/home/ory \
  oryd/kratos:v0.8.0 serve --config /home/ory/kratos.yml

The configuration contains values or keys which are invalid:
The configuration contains values or keys which are invalid:
identity: map[default_schema_id:default schemas:[map[id:default url:file:///etc/config/kratos/identity.schema.json]]]
          ^-- validation failed

The configuration contains values or keys which are invalid:
identity.default_schema_url: <nil>
                             ^-- one or more required properties are missing

The configuration contains values or keys which are invalid:
identity.schemas.0: map[id:default url:file:///etc/config/kratos/identity.schema.json]
                    ^-- not failed

The configuration contains values or keys which are invalid:
identity: map[default_schema_id:default schemas:[map[id:default url:file:///etc/config/kratos/identity.schema.json]]]
          ^-- additionalProperties "default_schema_id" not allowed

The configuration contains values or keys which are invalid:
selfservice: map[allowed_return_urls:[http://127.0.0.1:4455] default_browser_return_url:http://127.0.0.1:4455/ flows:map[error:map[ui_url:http://127.0.0.1:4455/error] login:map[lifespan:10m ui_url:http://127.0.0.1:4455/login] logout:map[after:map[default_browser_return_url:http://127.0.0.1:4455/login]] recovery:map[enabled:true lifespan:1h ui_url:http://127.0.0.1:4455/recovery] registration:map[after:map[password:map[hooks:[map[hook:session]]]] lifespan:10m ui_url:http://127.0.0.1:4455/registration] settings:map[lifespan:1h privileged_session_max_age:15m required_aal:highest_available ui_url:http://127.0.0.1:4455/settings] verification:map[after:map[default_browser_return_url:http://127.0.0.1:4455/] enabled:true lifespan:1h ui_url:http://127.0.0.1:4455/verification]] methods:map[link:map[config:map[lifespan:1h] enabled:true] lookup_secret:map[enabled:false] oidc:map[enabled:false] password:map[config:map[haveibeenpwned_enabled:true haveibeenpwned_host:api.pwnedpasswords.com ignore_network_errors:true max_breaches:0] enabled:true] profile:map[enabled:true] totp:map[enabled:false] webauthn:map[enabled:false]]]
             ^-- additionalProperties "allowed_return_urls" not allowed

FATA[2023-03-06T23:04:22Z] Unable to instantiate configuration.          audience=application error=map[message:I[#] S[#] validation failed
  I[#/identity] S[#/properties/identity] validation failed
    I[#/identity] S[#/properties/identity/required] missing properties: "default_schema_url"
    I[#/identity/schemas/0] S[#/properties/identity/properties/schemas/items/not] not failed
    I[#/identity] S[#/properties/identity/additionalProperties] additionalProperties "default_schema_id" not allowed
  I[#/selfservice] S[#/properties/selfservice/additionalProperties] additionalProperties "allowed_return_urls" not allowed] service_name=Ory Kratos service_version=v0.8.0-alpha.2.pre.6
➜ 

➜  kratos git:(v0.11) docker run -it -e DSN="memory" \
  --mount type=bind,source="$(pwd)"/contrib/quickstart/kratos/email-password,target=/home/ory \
  oryd/kratos:v0.11.0 serve --config /home/ory/kratos.yml
ERRO[2023-03-06T23:05:33Z] Unable to instantiate configuration.          audience=application error=map[message:open /etc/config/kratos/identity.schema.json: no such file or directory stack_trace:
github.com/ory/kratos/driver/config.(*Config).validateIdentitySchemas
        /project/driver/config/config.go:440
github.com/ory/kratos/driver/config.New
        /project/driver/config/config.go:373
github.com/ory/kratos/driver.NewWithoutInit
        /project/driver/factory.go:41
github.com/ory/kratos/driver.New
        /project/driver/factory.go:18
github.com/ory/kratos/cmd/serve.NewServeCmd.func1
        /project/cmd/serve/root.go:26
github.com/spf13/cobra.(*Command).execute
        /go/pkg/mod/github.com/spf13/cobra@v1.6.1/command.go:916
github.com/spf13/cobra.(*Command).ExecuteC
        /go/pkg/mod/github.com/spf13/cobra@v1.6.1/command.go:1044
github.com/spf13/cobra.(*Command).Execute
        /go/pkg/mod/github.com/spf13/cobra@v1.6.1/command.go:968
github.com/ory/kratos/cmd.Execute
        /project/cmd/root.go:61
main.main
        /project/main.go:21
runtime.main
        /usr/local/go/src/runtime/proc.go:250
runtime.goexit
        /usr/local/go/src/runtime/asm_amd64.s:1594] service_name=Ory Kratos service_version=v0.11.0
Error: open /etc/config/kratos/identity.schema.json: no such file or directory
Usage:
  kratos serve [flags]

Flags:
  -c, --config strings   Path to one or more .json, .yaml, .yml, .toml config files. Values are loaded in the order provided, meaning that the last config file overwrites values from the previous config file.
      --dev              Disables critical security features to make development easier
  -h, --help             help for serve
      --sqa-opt-out      Disable anonymized telemetry reports - for more information please visit https://www.ory.sh/docs/ecosystem/sqa
      --watch-courier    Run the message courier as a background task, to simplify single-instance setup

open /etc/config/kratos/identity.schema.json: no such file or directory
➜ 

Relevant configuration

No response

Version

v0.11

On which operating system are you observing this issue?

Linux

In which environment are you deploying?

Docker

Additional Context

No response

Start with the Docker commands and the quickstart path shown in the issue, then compare the documented example with the v0.8 and v0.11 configuration behavior. Verify how the mounted configuration references /etc/config/kratos/identity.schema.json and reproduce the failure. Done means the documented Docker example launches successfully with the documented steps.