Fabien Benetou's PIM | Tools / Docker

From personal use

rootless NVIDIA container fix : https://github.com/NVIDIA/nvidia-docker/issues/1155#issuecomment-884499204
tail logs : docker logs containername --tail 10
- works also with relative time e.g --since 5m but more demanding
changing policy for reboot : docker update --restart=unless-stopped CONTAINEDID
entrypoint from docker-compose takes precedence over Dockerfile
- see https://twitter.com/utopiah/status/1515701566854111246 with a struggle on a PhantomJS container
with x11, image dorowu/ubuntu-desktop-lxde-vnc
- https://github.com/fcwu/docker-ubuntu-vnc-desktop
curl --unix-socket /var/run/docker.sock http://localhost/containers/json | jq .[].Names
- using Docker Engine API https://docs.docker.com/engine/api/latest/ via HTTP
checking for updates via WatchTower docker run --rm -v /var/run/docker.sock:/var/run/docker.sock containrrr/watchtower --run-once -d --monitor-only
- see documentation for monitoring only https://containrrr.dev/watchtower/arguments/#without_updating_containers
podman as drop-in replacement
- including `podman play kube lamp.yaml` to possibly replace docker compose.
- tried with https://www.redhat.com/sysadmin/podman-play-kube-updates
--add-host adding host IP as named host https://phillbarber.blogspot.com/2015/02/connect-docker-to-service-on-parent-host.html
docker stats --no-stream to see resource usage and if need be add constraints
- see https://docs.docker.com/engine/reference/commandline/stats/
docker network where withing a same network container can communicate by container names e.g. ping peertube
- example of reverse proxying to expose ports https://stackoverflow.com/a/49165016/1442164
instead of docker rm $(docker ps -a -f name=peertube -q) consider docker-compose rm
using with jq to parse output fabien@fabien-CORSAIR-ONE-i160:~$ curl $(docker inspect upbeat_shannon | jq .[0].NetworkSettings.IPAddress -r) : <!DOCTYPE html>
moving a container with volume and docker-compose
- e.g. bringing PeerTube locally https://twitter.com/utopiah/status/1371520584996245505
  - rsync volume with docker-compose.yml and .env files, adjust them (e.g. disabling https and LetsEncrypt) then making /etc/hosts match
docker network prune to remove unused interfaces that might create conflicts
to list all containers, including ones not currently running docker container ls -a
- useful to restart a container running just temporarily e.g. Nextcloud local instance for pulling large video out of an iPhone
change the ports values in docker-compose.yml if docker-compose up fails because of a used port, typically 8080
docker stop instance_name: stop the instance
docker start instance_name: start the instance
docker rm instance_name: delete the instance
docker logs instance_name: get console output if the instance
docker inspect instance_name: get details of running instance including IP address
docker ps: list running instances
docker help : the MOST important command ;)

From SundayGeekBrunch2016InventingOnPrinciple3

made first own Docker file
- that can be directly built via PIMSREDemo-Dockerfile?action=source then run
difference between container and images
- an image, result of a build from a Dockerfile, is not running
exiting container if process in daemon mode
- depending on the target usage but if passed the -d parameter must make sure to run the target process in foreground
docker attach to access the terminal inside a running container
- if you need a shell instead exec -it containername /bin/bash
  - note that vi/vim might not be present, consider sed instead to edit configuration files
docker -p 80:80 for HTTPd port mapping

To explore

Gitpod for its capacity to provide instantaneous development environment from the browser
https://github.com/docker-slim/docker-slim
https://fleet.linuxserver.io for community maintained images
- webtop https://docs.linuxserver.io/images/docker-webtop
  - container with deskop available via a browser
per-page Sandboxed re-usable explorations, cf Principle
transform services as cards visualized in ?action=whiteboard e.g GraphReverseProxyNewShell and GraphByProvider
- https://gist.github.com/Utopiah/0c6114e8338ef64dbdc2012509f6d074
https://github.com/docker/docker-bench-security

Note

My notes on Tools gather what I know or want to know. Consequently they are not and will never be complete references. For this, official manuals and online communities provide much better answers.

Docker {Tools}

From personal use

From SundayGeekBrunch2016InventingOnPrinciple3

To explore

Note