Docker Setup Guide

Preparation

Official Installation Page

Portainer Installation

Installation

• Standard installation

  $ sudo apt-get install ca-certificates curl gnupg lsb-release -y
  $ curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
  $ echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
  $ sudo apt-get update
  $ sudo apt-get install docker-ce docker-ce-cli containerd.io
  $ sudo usermod -aG docker $USER
  

• MacOS Installation with Homebrew:

  $ brew install --cask docker
  

  
  

Network

Default Bridge

1. check available networks:

   $ docker network ls
   NETWORK ID     NAME      DRIVER    SCOPE
   5077a7b25ae6   bridge    bridge    local
   7e25f334b07f   host      host      local
   475e50be0fe0   none      null      local
   

2. start two containers:

   $ docker run -dit --name busybox1 busybox /bin/sh
   $ docker run -dit -p 80:80 --name busybox2 busybox /bin/sh
   $ docker ps
   CONTAINER ID   IMAGE     COMMAND     CREATED          STATUS          PORTS     NAMES
   9e6464e82c4c   busybox   "/bin/sh"   5 seconds ago    Up 5 seconds              busybox2
   7fea14032748   busybox   "/bin/sh"   26 seconds ago   Up 26 seconds             busybox1 
   

3. Verify the containers are attached to the bridge network

   $ docker network inspect bridge
   

User-Defined Bridge

1. Create and remove network

   $ docker network create mynetwork1
   $ docker network ls
   $ docker network remove mynetwork1
   

2. Run container:

   $ docker run -itd --rm --network mynetwork1 --name busybox3 busybox 
   $ docker run -itd --rm --network mynetwork1 --name busybox4 busybox 
   $ docker ps
   $ docker network inspect mynetwork1
   

Host

$ docker run -itd --rm --network host --name busybox5 nginx
// ports exposed, no network isolation

MACVLAN

1. Create macvlan

   $ docker network create -d macvlan --subnet 192.168.0.0/24 --gateway 192.168.0.1 -o parent=enp0s3 --name mynetwork2 
   

2. Enable promiscous mode:

   $ sudo ip link set enp0s3 promisc on
   // also enable promiscous mode in virtualbox
   

3. Run container on this network

   $ docker run -itd --rm --network mynetwork2 --ip 192.168.0.123 --name busybox6 busybox 
   $ docker run -itd --rm --network mynetwork2 --ip 192.168.0.124 --name busybox6 nginx 
   $ docker  exec -it busybox6 sh
   /# ping 192.168.0.1  
   

4. Remove the network

   $ docker network remove mynetwork2
   

5. Alternative:

    $ docker network create -d macvlan --subnet 192.168.20.0/24 --gateway 192.168.20.1 -o parent=enp0s3.20 --name mynetwork2    
   

IPVLAN

1. Share Mac Address with host, with different IP addresses

   $ docker network create -d ipvlan --subnet 192.168.0.0/24 --gateway 192.168.0.1 -o parent=enp0s3 --name mynetwork3 
   

2. Use the host as a router

   docker network create -d ipvlan --subnet 192.168.94.0/24 -o parent=enp0s3 -o ipvlan_mode=l3 --subnet 192.168.95.0/24 --name mynetwork4 
   

3. Assign IP to container

   $ docker run -itd --rm --network mynetwork4 --ip 192.168.94.7 --busybox7 busybox
   $ docker run -itd --rm --network mynetwork4 --ip 192.168.94.8 --busybox8 busybox
   

4. Inspect network

   docker network inspect mynetwork4
   

5. Establish static route in router

Overlay Network

• Standalone overlay network

  $ docker network create -d overlay --name my-overlay-network
  

• Attachable overlay network

  $ docker network create -d overlay --attachable --name my-attachable-overlay
  

None network

$ docker run -itd --rm --network none --name busybox9 busybox

Connect and disconnect network

• Connect network to a container

  $ docker network connect network1 busybox1
  

• Disconnect network from a container

  $ docker network disconnect mynetwork1 busybox1
  

Remove network

$ docker network ls
$ docker network remove mynetwork2

Remove all unused networks

$ docker network prune

Portainer

Build and Deploy Container

1. Create persistent volum:

   $ docker volume create portainer_data
   

2. Deploy container:

   $ docker run -d -p 8000:8000 -p 9000:9000 --name=portainer --restart=always -v /var/run/docker.sock:/var/run/docker.sock -v portainer_data:/data portainer/portainer
   

3. URL:

   http://localhost:9000

Update

1. Remove old version:

   $ docker ps -a | portainer
   $ docker stop 0eab
   $ docker rm 0eab
   

2. Install new version:

   $ docker pull portainer/portainer-ce:latest
   $ docker run -d -p 8000:8000 -p 9443:9443 --name=portainer --restart=always -v /var/run/docker.sock:/var/run/docker.sock -v portainer_data:/data portainer/portainer-ce
   

3. URL:

   http://localhost:9443

Postgresql

• Start a docker Postgresql server

  $ docker run --name some-postgres -p 5432:5432 -e POSTGRES_USER=backend_stuff -e POSTGRES_PASSWORD=secret_password -d postgres
  

• Hide password

  $ docker run --name some-postgres -e POSTGRES_PASSWORD_FILE=/run/secrets/postgres-passwd -d postgres
  

Imajician

Avid learner with diverse interests in coding, data science, machine learning, openCV, web development, cyber security, radio signal processing, electrical engineering, and reinforcement learning.