Skip to main content

5 posts tagged with "docker"

View All Tags

Set docker proxy

· 2 min read
  1. create/edit user docker configuration:
sudo vim /etc/docker/daemon.json
  1. set up proxy
{
  "proxies": {
    "http-proxy": "http://proxy.example.com:80",
    "https-proxy": "https://proxy.example.com:443",
    "no-proxy": "*.test.example.com,.example.org"
  }
}
  • This is a full example of the allowed configuration options on Linux:
{
	"allow-nondistributable-artifacts": [],
	"api-cors-header": "",
	"authorization-plugins": [],
	"bip": "",
	"bridge": "",
	"cgroup-parent": "",
	"containerd": "/run/containerd/containerd.sock",
	"containerd-namespace": "docker",
	"containerd-plugin-namespace": "docker-plugins",
	"data-root": "",
	"debug": true,
	"default-address-pools": [{
			"base": "172.30.0.0/16",
			"size": 24
		},
		{
			"base": "172.31.0.0/16",
			"size": 24
		}
	],
	"default-cgroupns-mode": "private",
	"default-gateway": "",
	"default-gateway-v6": "",
	"default-network-opts": {},
	"default-runtime": "runc",
	"default-shm-size": "64M",
	"default-ulimits": {
		"nofile": {
			"Hard": 64000,
			"Name": "nofile",
			"Soft": 64000
		}
	},
	"dns": [],
	"dns-opts": [],
	"dns-search": [],
	"exec-opts": [],
	"exec-root": "",
	"experimental": false,
	"features": {},
	"fixed-cidr": "",
	"fixed-cidr-v6": "",
	"group": "",
	"hosts": [],
	"proxies": {
		"http-proxy": "http://proxy.example.com:80",
		"https-proxy": "https://proxy.example.com:443",
		"no-proxy": "*.test.example.com,.example.org",
	},
	"icc": false,
	"init": false,
	"init-path": "/usr/libexec/docker-init",
	"insecure-registries": [],
	"ip": "0.0.0.0",
	"ip-forward": false,
	"ip-masq": false,
	"iptables": false,
	"ip6tables": false,
	"ipv6": false,
	"labels": [],
	"live-restore": true,
	"log-driver": "json-file",
	"log-level": "",
	"log-opts": {
		"cache-disabled": "false",
		"cache-max-file": "5",
		"cache-max-size": "20m",
		"cache-compress": "true",
		"env": "os,customer",
		"labels": "somelabel",
		"max-file": "5",
		"max-size": "10m"
	},
	"max-concurrent-downloads": 3,
	"max-concurrent-uploads": 5,
	"max-download-attempts": 5,
	"mtu": 0,
	"no-new-privileges": false,
	"node-generic-resources": [
		"NVIDIA-GPU=UUID1",
		"NVIDIA-GPU=UUID2"
	],
	"oom-score-adjust": 0,
	"pidfile": "",
	"raw-logs": false,
	"registry-mirrors": [],
	"runtimes": {
		"cc-runtime": {
			"path": "/usr/bin/cc-runtime"
		},
		"custom": {
			"path": "/usr/local/bin/my-runc-replacement",
			"runtimeArgs": [
				"--debug"
			]
		}
	},
	"seccomp-profile": "",
	"selinux-enabled": false,
	"shutdown-timeout": 15,
	"storage-driver": "",
	"storage-opts": [],
	"swarm-default-advertise-addr": "",
	"tls": true,
	"tlscacert": "",
	"tlscert": "",
	"tlskey": "",
	"tlsverify": true,
	"userland-proxy": false,
	"userland-proxy-path": "/usr/libexec/docker-proxy",
	"userns-remap": ""
}

generate coredump for docker container

· One min read
  • use --cap-add=SYS_PTRACE flag when running the container
docker run --cap-add=SYS_PTRACE ...
  • add it to a docker-compose file
version: '3'
services:
  your-service:
    image: your-image
    cap_add:
      - SYS_PTRACE

Docker: Enable Non-Root User Access

· One min read

Enable Non-Root User Access​

  1. Enter the command below to create the docker group on the system.
sudo groupadd -f docker
  1. Type the following usermod command to add the active user to the docker group.
sudo usermod -aG docker $USER
  1. Apply the group changes to the current terminal session by typing:
newgrp docker
  1. Check if the docker group is in the list of user groups.
groups

docker modify config for running container

· One min read

here is mounted directory​

  1. stop docker
$ systemctl stop docker
  1. modify container's config
$ cd /var/lib/docker/container/$containerID/

$ vim config.v2.json

# modify MountPoints

$ vim hsotconfig.json

# modify Binds
  1. start docker
$ systemctl start docker
  1. start container
$ docker start $containerID