Docker

Windows 10 Home

# powershell
dism.exe /online /enable-feature /featurename:Microsoft-Windows-Subsystem-Linux /all /norestart
dism.exe /online /enable-feature /featurename:VirtualMachinePlatform /all /norestart
wsl --set-default-version 2

# powershell
docker pull hello-world
docker run -it --rm --name hello hello-world:latest

# gitbash
winpty docker pull hello-world
winpty docker run -it --rm --name hello hello-world:latest

Networking

iptables -t nat -S
apt install -y iputils

docker run --rm --detach \
--publish 1983:80 \
--name nginx \
nginx:1.19.2

docker run --rm --detach \
--publish 1983:80 \
--network ckn.b01 \
--ip 10.20.13.20 \
--name nginx \
nginx:1.19.2

cat <<EOF >> /etc/docker/daemon.json
{
    "bip"            : "10.20.13.1/24",
    "fixed-cidr"     : "10.20.13.0/24",
    "default-gateway": "10.19.83.1",
    "mtu"            : 1500,
    "dns"            : [
        "10.19.83.5",
        "10.19.83.1",
        "10.19.83.14"
    ],
    "debug": true
}
EOF

Bridge

docker network create \
--driver bridge \
--gateway  10.20.13.1 \
--subnet   10.20.13.0/24 \
--ip-range 10.20.13.16/28 \
--opt com.docker.network.driver.mtu=1500 \
--opt com.docker.network.bridge.enable_icc=true \
--opt com.docker.network.bridge.default_bridge=false \
--opt com.docker.network.bridge.enable_ip_masquerade=true \
--opt com.docker.network.bridge.host_binding_ipv4=0.0.0.0 \
--opt com.docker.network.bridge.name=ckn.b01 ckn.b01

docker network create --subnet 10.20.13.32/28 --gateway=10.20.13.33 ckn.b02
docker network create --subnet 10.20.13.48/28 --gateway=10.20.13.49 ckn.b03
docker network create --subnet 10.20.13.64/28 --gateway=10.20.13.65 ckn.b04
docker network create --subnet 10.20.13.80/28 --gateway=10.20.13.81 ckn.b05

---

MAC VLAN

Bridge mode

docker network create \
--driver macvlan \
--gateway  10.19.83.1 \
--subnet   10.19.83.0/24 \
--ip-range 10.19.83.240/28 \
--opt parent=wlan0 ckn.v01

802.1q trunk bridge mode

docker network create \
--driver macvlan \
--gateway  10.19.83.1 \
--subnet   10.19.83.0/24 \
--ip-range 10.19.83.240/28 \
--opt parent=wlan0.01 ckn.v01

docker network inspect ckn.v01
docker network connect ckn.v01 nginx

docker exec -it nginx ls -lah /sys/class/net/
docker exec -it nginx cat /etc/resolv.conf
docker inspect nginx|grep "IPAddress"
docker exec -it nginx cat /etc/hosts

curl -v http://10.19.83.240:1983
curl -v http://localhost:1983
curl -v http://10.19.83.240

docker network disconnect bridge nginx
docker network disconnect ckn.v01 nginx

---

IP VLAN

docker network create -d ipvlan \
--subnet=10.19.83.0/24 \
--subnet=10.20.13.0/24 \
--gateway=10.19.83.254 \
--gateway=10.20.13.254 \
--opt ipvlan_mode=l2 ckn.i01

Troubleshoot

docker run --rm --net=host busybox nslookup google.com docker run --rm --net=host alpine cat /etc/resolv.conf docker run --rm --net=host alpine nslookup google.com docker run --rm --net=host alpine ping google.com docker run --rm --net=host alpine cat /etc/hosts docker run --rm --net=host alpine ifconfig docker run --rm --net=host alpine ip addr docker run --rm --net=host alpine route

docker run --rm busybox nslookup google.com docker run --rm alpine cat /etc/resolv.conf docker run --rm alpine nslookup google.com docker run --rm alpine ping google.com docker run --rm alpine cat /etc/hosts docker run --rm alpine ifconfig docker run --rm alpine ip addr docker run --rm alpine route

export DOCKER_OPTS="--dns 8.8.8.8 --dns 8.8.4.4 --iptables=false --ip-forward=false"
firewall-cmd --permanent --zone=trusted --change-interface=docker0
firewall-cmd --reload
systemctl restart docker

systemctl stop docker rm -fr /var/lib/docker rm -fr /etc/docker pkill docker

iptables -t nat -F ifconfig docker0 down brctl delbr docker0 systemctl start docker

vim /etc/selinux/config shutdown -r now setenforce 0 sestatus

Knowledge

docker network ls
docker network prune
docker network rm ckn.b00 ckn.b01

docker inspect nginx|grep "IPAddress"
docker network inspect bridge|grep "Gateway"

docker run --rm -dit --network \
none --name alpine alpine:latest ash;\
docker exec -it alpine ip link show

docker network create --driver bridge \
--opt com.docker.network.bridge.name=ckn.b00 ckn.b00

docker network connect ckn.b00 nginx
docker exec -it nginx cat /etc/hosts
docker inspect nginx|grep "IPAddress"
docker exec -it nginx cat /etc/resolv.conf
docker exec -it nginx ls -lah /sys/class/net/

docker network disconnect bridge nginx
docker network disconnect ckn.b00 nginx
docker exec -it nginx ls -lah /sys/class/net/

docker run -itd --network=ckn.b00 nginx
docker network disconnect ckn.b00 nginx
docker network connect --alias db --alias mysql ckn.b00 mysql

Reference

Installing Docker Compose on Raspberry Pi 4 Install Docker Desktop on Windows Home Windows Subsystem for Linux Installation Install your Linux distribution of choice Updating the WSL-2 Linux kernel Docker Desktop WSL-2 backend Install Docker in Raspberry Pi 4 Docker Desktop for Windows Comparing WSL-1 vs WSL-2 Bitbucket Pipelines

Build Kerberos Docker Image from Ubuntu Build Apache Docker Image from Alpine Build LDAP Docker Image from Ubuntu Build Java Docker Image from CentOS Build Java Docker Image from Ubuntu Docker Run Oracle DB 18c XE Artifactory Jenkins GitLab Nexus

Unable to connect outside from Docker container Docker published ports are not reachable Docker Network Troubleshooting Purpose of docker0 interface Purpose of virbr0 interface Remove docker0 bridge Dockerfile Reference 10.19.83.0/28 10.20.13.0/28 Docker Network

---

How to Get A Docker Container IP Address Docker Networking Drivers and their usage Unable to ping container from host Containers cannot access Internet Windows container networking Uncomplicated Firewall (ufw) Advanced Docker Networking Macvlan & IPvlan basics Docker Network drivers Macvlan vs IPvlan

Customize the docker0 bridge