containers

Docker

→ Default ip addresses

Set default docker address:

{
  "log-driver": "journald",
  "bip": "172.26.0.1/16",
  "default-address-pools": [
          {
                  "base": "172.254.0.0/16",
                  "size": 24
          }
  ]
}

→ Show ip of all running containers

docker inspect $(docker ps -q ) --format='{{ printf "%-50s" .Name}} {{range .NetworkSettings.Networks}}{{.IPAddress}} {{end}}'

→ check security

• Use grype

→ Multiarch build

docker buildx create --name multiarch --driver docker-container --use

→ show docker events

docker system events

→ Run cron jobs with docker

• just install cron in the dockerfile

→ cgroup version, for limiting resourcea

• docker

→ docker rootless

• installation

• compose support

• network config

• Rootless root inside

• tutorial including gpu

• ansible role

  Docker with rootless mode uses slirp4netns as the default network stack if slirp4netns v0.4.0 or later is installed. If slirp4netns is not installed, Docker falls back to VPNKit. Installing slirp4netns may improve the network throughput.

Note that systemd terminates the processes after user logout. So to persist containers either:

• UserStopDelaySec=infinity
• more details on how to -> works
• start a tmux process to keep a user session

for GPU:

• edit /etc/nvidia-container-runtime/config.toml
• set no-cgroups = true

→ Disable service compose

use profile