Skip to main content

5 posts tagged with "docker"

View All Tags

· 2 min read
  1. create/edit user docker configuration:
sudo vim /etc/docker/daemon.json
  1. set up proxy 
{
  "proxies": {
    "http-proxy": "http://proxy.example.com:80",
    "https-proxy": "https://proxy.example.com:443",
    "no-proxy": "*.test.example.com,.example.org"
  }
}
  • This is a full example of the allowed configuration options on Linux:
{
    "allow-nondistributable-artifacts": [],
    "api-cors-header": "",
    "authorization-plugins": [],
    "bip": "",
    "bridge": "",
    "cgroup-parent": "",
    "containerd": "/run/containerd/containerd.sock",
    "containerd-namespace": "docker",
    "containerd-plugin-namespace": "docker-plugins",
    "data-root": "",
    "debug": true,
    "default-address-pools": [{
            "base": "172.30.0.0/16",
            "size": 24
        },
        {
            "base": "172.31.0.0/16",
            "size": 24
        }
    ],
    "default-cgroupns-mode": "private",
    "default-gateway": "",
    "default-gateway-v6": "",
    "default-network-opts": {},
    "default-runtime": "runc",
    "default-shm-size": "64M",
    "default-ulimits": {
        "nofile": {
            "Hard": 64000,
            "Name": "nofile",
            "Soft": 64000
        }
    },
    "dns": [],
    "dns-opts": [],
    "dns-search": [],
    "exec-opts": [],
    "exec-root": "",
    "experimental": false,
    "features": {},
    "fixed-cidr": "",
    "fixed-cidr-v6": "",
    "group": "",
    "hosts": [],
    "proxies": {
        "http-proxy": "http://proxy.example.com:80",
        "https-proxy": "https://proxy.example.com:443",
        "no-proxy": "*.test.example.com,.example.org",
    },
    "icc": false,
    "init": false,
    "init-path": "/usr/libexec/docker-init",
    "insecure-registries": [],
    "ip": "0.0.0.0",
    "ip-forward": false,
    "ip-masq": false,
    "iptables": false,
    "ip6tables": false,
    "ipv6": false,
    "labels": [],
    "live-restore": true,
    "log-driver": "json-file",
    "log-level": "",
    "log-opts": {
        "cache-disabled": "false",
        "cache-max-file": "5",
        "cache-max-size": "20m",
        "cache-compress": "true",
        "env": "os,customer",
        "labels": "somelabel",
        "max-file": "5",
        "max-size": "10m"
    },
    "max-concurrent-downloads": 3,
    "max-concurrent-uploads": 5,
    "max-download-attempts": 5,
    "mtu": 0,
    "no-new-privileges": false,
    "node-generic-resources": [
        "NVIDIA-GPU=UUID1",
        "NVIDIA-GPU=UUID2"
    ],
    "oom-score-adjust": 0,
    "pidfile": "",
    "raw-logs": false,
    "registry-mirrors": [],
    "runtimes": {
        "cc-runtime": {
            "path": "/usr/bin/cc-runtime"
        },
        "custom": {
            "path": "/usr/local/bin/my-runc-replacement",
            "runtimeArgs": [
                "--debug"
            ]
        }
    },
    "seccomp-profile": "",
    "selinux-enabled": false,
    "shutdown-timeout": 15,
    "storage-driver": "",
    "storage-opts": [],
    "swarm-default-advertise-addr": "",
    "tls": true,
    "tlscacert": "",
    "tlscert": "",
    "tlskey": "",
    "tlsverify": true,
    "userland-proxy": false,
    "userland-proxy-path": "/usr/libexec/docker-proxy",
    "userns-remap": ""
}

· One min read
  • use --cap-add=SYS_PTRACE flag when running the container
docker run --cap-add=SYS_PTRACE ...
  • add it to a docker-compose file 
version: '3'
services:
  your-service:
    image: your-image
    cap_add:
      - SYS_PTRACE

· One min read

Enable Non-Root User Access​

  1. Enter the command below to create the docker group on the system.
sudo groupadd -f docker
  1. Type the following usermod command to add the active user to the docker group.
sudo usermod -aG docker $USER
  1. Apply the group changes to the current terminal session by typing:
newgrp docker
  1. Check if the docker group is in the list of user groups.
groups

· One min read

here is mounted directory​

  1. stop docker
$ systemctl stop docker
  1. modify container's config
$ cd /var/lib/docker/container/$containerID/

$ vim config.v2.json

# modify MountPoints

$ vim hsotconfig.json

# modify Binds
  1. start docker
$ systemctl start docker
  1. start container
$ docker start $containerID