Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Can I change a docker container from a self-delete policy to auto-restart?

Analeea last edited by

I've got a container started (not my code, not my container, but I often manage the server and deal with the aftermath of it being patched) and I need to make a hot-fix to the deployment strategy, I had gone through the steps to change it to auto-restart, but a coworker noticed that the container was started with --rm. My guess is that this is circumventing any attempt to start it up after reboots (because the container just isn't there any more)

So is there a way to remove the --rm policy from a running container?
Reply Quote 0
1 Reply Last reply
E
esther last edited by

You can use a docker update. ( https://docs.docker.com/engine/reference/commandline/update/ ).

docker update --restart always /.

Not sure about removing the --rm flag, though
Reply Quote 0
1 Reply Last reply

docker 1820

2
Posts

0
Views

Suggested Topics

O

Internet connection inside Docker container in Kubernetes
Continuous Integration and Delivery (CI, CD) • docker kubernetes • • obi

2

0
Votes

2
Posts

1
Views

C

In my opinion k8s should not be used to build docker images as it is an orchestration platform, but there is an open issue in the GitHub k8s repository. In conclusion, building docker images on a k8s cluster seems not to be possible at the moment.
D

access from one container to another by name
Software Programming • docker docker compose • • derk

2

0
Votes

2
Posts

0
Views

E

In this case, links can be removed from the web container and the domen can be added to the app with alias. Thus, circular dependence can be avoided. Instruction of the hostname does not affect the outer containers, it's a sygolism in the inner name of the container only if it comes into bash.version: '2' services: web: image: nginx ports: - "80:80" app: image: php links: - web:site.dev volumes: - /var/www:/var/www If you need to make links from two sides, the toast. version: '2' services: web: image: nginx ports: - "80:80" links: - app:site2.dev app: image: php links: - web:site.dev volumes: - /var/www:/var/www There's a mistake. ERROR: Circular dependency between web and appas long as extra_hosts can be resolved
Y

Understanding Docker layers
Continuous Integration and Delivery (CI, CD) • docker dockerfile • • yajahira

2

0
Votes

2
Posts

1
Views

E

A docker image is actually a linked list of filesystem layers. Each instruction in a Dockerfile creates a filesystem layer that describes the differences in the filesystem before and after execution of the corresponding instruction. The docker inspect subcommand can be used on a docker image to reveal its nature of being a linked list of filesystem layers. The number of layers used in an image is important when pushing or pulling images, as it affects the number of concurrent uploads or downloads occuring. when starting a container, as the layers are combined together to produce the filesystem used in the container; the more layers are involved, the worse the performance is, but the different filesystem backends are affected differently by this. This has several consequences for how images should be built. The first and most important advice I can give is: Advice #1 Make sure that the build steps where your source code is involved comes as late as possible in the Dockerfile and are not tied to previous commands using a && or a ;. The reason for this, is that all the previous steps will be cached and the corresponding layers will not need to be downloaded over and over again. This means faster builds and faster releases, which is probably what you want. Interestingly enough, it is surprisingly hard to make optimal use of the docker cache. My second advice is less important but I find it very useful from a maintenance view point: Advice #2 Do not write complex commands in the Dockerfile but rather use scripts that are to be copied and executed. A Dockerfile following this advice would look like COPY apt_setup.sh /root/ RUN sh -x /root/apt_setup.sh COPY install_pacakges.sh /root/ RUN sh -x /root/install_packages.sh and so on. The advice of binding several commands with && has only a limited scope. It is much easier to write with scripts, where you can use functions, etc. to avoid redundancy or for documentation purposes. People interested by pre-processors and willing to avoid the small overhead caused by the COPY steps and are actually generating on-the-fly a Dockerfile where the COPY apt_setup.sh /root/ RUN sh -x /root/apt_setup.sh sequences are replaced by RUN base64 --decode … | sh -x where the … is the base64-encoded version of apt_setup.sh. My third advice is for people who wants to limit the size and the number of layers at the possible cost of longer builds. Advice #3 Use the with-idiom to avoid files present in intermediary layers but not in the resulting filesystem. A file added by some docker instruction and removed by some later instruction is not present in the resulting filesystem but it is mentioned two times in the docker layers constituting the docker image in construction. Once, with name and full content in the layer resulting from the instruction adding it, and once as a deletion notice in the layer resulting from the instruction removing it. For instance, assume we temporarily need a C compiler and some image and consider the # !!! THIS DISPLAYS SOME PROBLEM --- DO NOT USE !!! RUN apt-get install -y gcc RUN gcc --version RUN apt-get --purge autoremove -y gcc (A more realistic example would build some software with the compiler instead of merely asserting its presence with the --version flag.) The Dockerfile snippet creates three layers, the first one contains the full gcc suite so that even if it is not present in the final filesystem the corresponding data is still part of the image in same manner and need to be downloaded, uploaded and unpacked whenever the final image is. The with-idiom is a common form in functional programming to isolate resource ownership and resource releasing from the logic using it. It is easy to transpose this idiom to shell-scripting, and we can rephrase the previous commands as the following script, to be used with COPY & RUN as in Advice #2. # with_c_compiler SIMPLE-COMMAND # Execute SIMPLE-COMMAND in a sub-shell with gcc being available. with_c_compiler() ( set -e apt-get install -y gcc "$@" trap 'apt-get --purge autoremove -y gcc' EXIT ) with_c_compiler\ gcc --version Complex commands can be turned into function so that they can be fed to the with_c_compiler. It is also possible to chain calls of several with_whatever functions, but maybe not very desirable. (Using more esoteric features of the shell, it is certainly possible to make the with_c_compiler accept complex commands, but it is in all aspects preferable to wrap these complex commands into functions.) If we want to ignore Advice #2, the resulting Dockerfile snippet would be RUN apt-get install -y gcc\ && gcc --version\ && apt-get --purge autoremove -y gcc which is not so easy to read and maintain because of the obfuscation. See how the shell-script variant outs emphasis on the important part gcc --version while the chained-&& variant buries that part in the middle of noise.
J

Build isolation - Docker container based builds in Bamboo 6.4.0
Continuous Integration and Delivery (CI, CD) • docker bamboo • • jonetta

2

0
Votes

2
Posts

1
Views

Yes, you are correct. Bamboo will spawn the build containers on the agent that the build is running on (either Local, Remote, or, Elastic - depending on your configuration). In order for this to work the agent will require Docker to be installed and running.
K

any way to limit "docker logs" output by default?
Continuous Integration and Delivery (CI, CD) • linux docker • • kalyn

2

0
Votes

2
Posts

1
Views

C

One way to limit docker logs is to specify limits in docker daemon's config file. You can put this in /etc/docker/daemon.json { "log-driver": "json-file", "log-opts": { "max-size": "10m", "max-file": "3" } } and then restart your docker daemon.
E

How can I deal with container "patching" in a strict release process?
Continuous Integration and Delivery (CI, CD) • kubernetes containers cicd • • emran

2

0
Votes

2
Posts

1
Views

D

I have tackled a very similar problem. We also do not want to rebuild when we patch. To solve this problem, when we do a build, we store our artifact in a repository such as jfrog or nexus. Then when it comes time for patching, we fetch the artifact from the repository and put it on top of an updated base image. How we use base images is also a very important factor. We rely on stable base image tags such as openjdk11:latest and trust the vendor that any updates are safe since it is still jdk11. This of course means selecting a reliable base image. There are several options here and one worth checking is RedHat UBI images.
How to create a local network mapping in linux
Continuous Integration and Delivery (CI, CD) • docker networking docker compose containers • • Demir

2

0
Votes

2
Posts

1
Views

Do you have network constraints to create a new subnet or what is the reason? if it's not useful at all, you can just map the port and open the firewall of your PC so that the other machines can see the application. version: '3' services: nextclouddb: image: mariadb container_name: nextcloud-mariadb volumes: - /home/username/data/mysql:/var/lib/mysql - /etc/localtime:/etc/localtime:ro environment: - MYSQL_ROOT_PASSWORD=STONGPASSWORD - MYSQL_PASSWORD=ANOTHERSTONGPASSWORD - MYSQL_DATABASE=nextcloud - MYSQL_USER=nextcloud restart: unless-stopped nextcloudapp: image: nextcloud:latest container_name: nextcloud-app volumes: - /home/username/data/html:/var/www/html - /home/username/data/config:/var/www/html/config - /home/username/data/apps:/var/www/html/custom_apps - /home/username/data/data:/var/www/html/data - /home/username/data/themes:/var/www/html/themes - /etc/localtime:/etc/localtime:ro restart: unless-stopped ports: - 2287:80
A

Debug Docker caching issues
Continuous Integration and Delivery (CI, CD) • docker • • Avante

2

0
Votes

2
Posts

1
Views

M

The docker cache needs the following: Build has been run on the same docker host previously (or you explicitly added flags to trust a pulled image) and The previous image needs to still be on the build host (not pruned) and The same previous layer and either The same command being run (including the same environment/args) or The same hash on the files being copied If you see the cache being busted on a COPY or ADD command, and not the previous step, then you need to look at the hash being generated. All the files need to be identical, same file names, cases, file permissions, file owners, and the contents need to be bit for bit identical. You can look at the resulting checksum for this hash by running a docker image history command, e.g.: $ docker image history golang:alpine IMAGE CREATED CREATED BY SIZE COMMENT 6b21b4c6e7a3 3 weeks ago /bin/sh -c #(nop) WORKDIR /go 0B <missing> 3 weeks ago /bin/sh -c mkdir -p "$GOPATH/src" "$GOPATH/b… 0B <missing> 3 weeks ago /bin/sh -c #(nop) ENV PATH=/go/bin:/usr/loc… 0B <missing> 3 weeks ago /bin/sh -c #(nop) ENV GOPATH=/go 0B <missing> 3 weeks ago /bin/sh -c set -eux; apk add --no-cache --v… 344MB <missing> 3 weeks ago /bin/sh -c #(nop) ENV GOLANG_VERSION=1.12.7 0B <missing> 3 weeks ago /bin/sh -c [ ! -e /etc/nsswitch.conf ] && ec… 17B <missing> 3 weeks ago /bin/sh -c apk add --no-cache ca-certifica… 551kB <missing> 3 weeks ago /bin/sh -c #(nop) CMD ["/bin/sh"] 0B <missing> 3 weeks ago /bin/sh -c #(nop) ADD file:0eb5ea35741d23fe3… 5.58MB You can include the --no-trunc option to get a full line. The key piece of data relevant to your question from the above image is in the ADD step where you see file:0eb5ea35741d23fe3…. If that checksum changes between two image builds, the cache will bust and you'll start a new set of layers.
B

docker swarm + jenkins CI
Software Programming • docker jenkins continuous integration docker swarm • • Burma

2

0
Votes

2
Posts

0
Views

A

Add your agents to yours. Jenkinsthat will follow your CI. For example, with a flame https://plugins.jenkins.io/swarm ♪ He's decorated. Docker Swarm butts like glue Jenkins♪Then we need to set up a paipline (Jenkinsfile) in which you will describe the agent you need to launch with Pipelines DSL.sh 'docker build'♪ sh 'docker service create') Pipeline could be like https://jenkins.io/doc/book/pipeline/syntax/#declarative-pipeline and https://jenkins.io/doc/book/pipeline/syntax/#scripted-pipeline ♪Several examples that can help you: https://github.com/krasi-georgiev/cd-demo/blob/master/Jenkinsfile - scripted pipelineExample with https://gist.github.com/bvis/68f3ab6946134f7379c80f1a9132057a
Host a docker registry native
Continuous Integration and Delivery (CI, CD) • docker docker registry • • irl

2

0
Votes

2
Posts

1
Views

I take for granted you are referring to the registry server released by docker.com. The documentation clearly states on the very first line: Before you can deploy a registry, you need to install Docker on the host Since the registry is the main product of the docker/distribution opensource project, you could fork and see how you can modify this as a standalone install not requiring docker, but I have no clue if it is possible and that would probably end up being a bad idea. There are other existing products you can install 'standalone' that will let you manage your own registry. But they all come with some degree of requirements (java, ruby...). I have experience with 2 free products I use daily: Sonatype nexus3 oss is a multi format repository manager supporting docker registries (requires java). gitlab-ce has support for container registries in each projects if you configure it (ruby required). The latest one is probably an overkill if you only need a basic registry and not all of the git, wiki, etc. ressources. I recently came across a fairly recent review article listing other products I have no experience with: Harbor from VMware Portus by Suse It also mentions as a bonus the use of Openshift as a registry, but even minishift for something as light as possible will require to install docker. All of these solutions can probably meet your 'native run' requirements, but they are all much more complex to install and maintain than simply poping-up a registry:2 container.
Docker - Mount a volume from a container to an other (equivalent volumes_from) in docker-compose 3
Continuous Integration and Delivery (CI, CD) • docker docker compose volume • • inna

2

0
Votes

2
Posts

1
Views

A

The Problem: Named volumes are initialized on container creation when the volume is empty, and from the first container that starts up using that volume. That initialization includes all files, directories, and file metadata like owners and permissions. If there is content in the named volume, docker will not initialize it again since that would defeat the purpose of persistence. Option A: When you have multiple containers sharing a volume to share updated build time content like you have, my first suggestion is to modify the build to place the relevant data in each image. Depending on what is being shared and between what images, you may be able to use shared image layers to avoid ever needing to copy the data. Option B: When placing the data in each image and avoiding the shared volume is infeasible, then you likely want a process to copy data from the image into the volume as part of your container entrypoint. This has two advantages. First it works when the containers startup in either order, so you can eliminate dependencies between container startup order (though you may find it necessary to include some wait step in the other container entrypoints if they fail when run before the data is copied). And second, your copy can update the volume when existing data is already there. I've implemented a load-volume and save-volume pair of scripts in my docker base image that you can reuse in your own images to implement this second option. I typically ran into this issue when using tmpfs volumes to support read-only containers, but the scripts have been made generic enough to support your use case. Note that your scenario likely involves deleting existing data from the volume, and I've implemented that using rsync for performance, so that needs to be installed in your image to work.
how to connect to a MySQL database in a docker container?
Continuous Integration and Delivery (CI, CD) • mysql docker databases networking ports • • irl

2

0
Votes

2
Posts

1
Views

K

One way to achieve this is by using the MySQL socket to connect instead of port. For this you would have bind a mount to your container. You would anyway need a host directory bound to container to persist Database data. First create a directory on host to mount container /var/lib/mysql Use -v option in docker run to attach host path to container Connect from client using -S and point to mysql.sock socket file Example: mkdir /home/user/mysql-1 Then start the container so that /home/user/mysql-1 will attach to container's /var/lib/mysql: docker run --name mysql -d \ -v /home/user/mysql-1:/var/lib/mysql \ -e MYSQL_ROOT_PASSWORD=password \ mysql/mysql-server Once the container is started, you can connect to it with: mysql -h localhost -u user -p -S /home/user/mysql-1/mysql.sock
B

How to run Selenium Tests written in C# on a Safari browser in the same Windows 10 laptop?
Automated Testing • selenium webdriver docker safari • • Burma

2

0
Votes

2
Posts

3
Views

D

Apple's support for Safari on Windows stopped at 5.1 version, which means the latest safari you can install on Windows in Safari 5.1. Second - no docker images for Safari - Third, you can create a Machintosh VM on your PC here is the link for Catalina here is the link for Mojave if you add one of those on your machine you also need to enable Safari automation Open Safari Go to Safari > Preferences Go to Advanced and in the bottom, there is an option "Show Develop menu in menu bar" Check that option Go to Develop Check on "Allow Remote Automation" Close/Quit the browser After that, you can run the selenium node script on mac in order to connect it from the grid. And you can also use as a grid the docker-selenium
How to move a containerized application to a different host?
Continuous Integration and Delivery (CI, CD) • docker migration • • jeanid

2

0
Votes

2
Posts

1
Views

From what I understand of https://stackoverflow.com/questions/28734086/how-to-move-docker-containers-between-different-hosts, docker export will only save the container filesystem. But no metadata such as the default command, leading to that error when you try to run the imported archive: sh# IMAGE=$(docker import phpbb.tar) sh# docker run "${IMAGE}" docker: Error response from daemon: No command specified. Given my need, it is sufficient to docker commit the container to a new image, then docker save the image, and finally docker load and docker run it on the new host: old# docker commit CONTAINER name:tag old# docker save name:tag |gzip > archive.tar.gz old# scp archive.tar.gz root@new:. new# docker load < archive.tar.gz new# docker run name:latest It is important to save the image by repository name:tag and not by id to preserve the tag in the archive.
M

Port forwarding rules with Traefik and Docker.Compose
Continuous Integration and Delivery (CI, CD) • docker networking docker compose traefik • • meriah

2

0
Votes

2
Posts

0
Views

P

I can't tell exactly what you are trying, it looks like you might just not have Traefik and the services on the same network. Its also helpful to have a domain that's going to resolve to 127.0.0.1 on wildcard queries. This might be a valuable starting point as a working example. networks: traefik: name: demo_traefik services: proxy: image: traefik:latest command: > --accesslog=true --api.insecure=true --log.level=DEBUG --providers.docker=true --providers.docker.network=demo_traefik ports: - "80:80" - "8080:8080" networks: - traefik volumes: - /var/run/docker.sock:/var/run/docker.sock labels: traefik.http.routers.demo_traefik.rule: Host(traefik.localtest.me) traefik.http.services.demo_traefik.loadbalancer.server.port: 8080 example: image: nginx networks: - traefik scale: 4 labels: traefik.http.routers.demo_nginx.rule: Host(example.localtest.me) traefik.http.services.demo_nginx.loadbalancer.server.port: 80 whoami: image: traefik/whoami networks: - traefik labels: traefik.http.middlewares.whoami_strip.stripprefix.prefixes: /whoami traefik.http.routers.whoami.rule: Host(example.localtest.me) && PathPrefix(/whoami) traefik.http.routers.whoami.middlewares: whoami_strip docker compose up and then visit http://example.localtest.me/whoami in your browser.

Can I change a docker container from a self-delete policy to auto-restart?

Suggested Topics

Internet connection inside Docker container in Kubernetes Continuous Integration and Delivery (CI, CD) • docker kubernetes • • obi

access from one container to another by name Software Programming • docker docker compose • • derk

Understanding Docker layers Continuous Integration and Delivery (CI, CD) • docker dockerfile • • yajahira

Build isolation - Docker container based builds in Bamboo 6.4.0 Continuous Integration and Delivery (CI, CD) • docker bamboo • • jonetta

any way to limit "docker logs" output by default? Continuous Integration and Delivery (CI, CD) • linux docker • • kalyn

How can I deal with container "patching" in a strict release process? Continuous Integration and Delivery (CI, CD) • kubernetes containers cicd • • emran

How to create a local network mapping in linux Continuous Integration and Delivery (CI, CD) • docker networking docker compose containers • • Demir

Debug Docker caching issues Continuous Integration and Delivery (CI, CD) • docker • • Avante

docker swarm + jenkins CI Software Programming • docker jenkins continuous integration docker swarm • • Burma

Host a docker registry native Continuous Integration and Delivery (CI, CD) • docker docker registry • • irl

Docker - Mount a volume from a container to an other (equivalent volumes_from) in docker-compose 3 Continuous Integration and Delivery (CI, CD) • docker docker compose volume • • inna

how to connect to a MySQL database in a docker container? Continuous Integration and Delivery (CI, CD) • mysql docker databases networking ports • • irl

How to run Selenium Tests written in C# on a Safari browser in the same Windows 10 laptop? Automated Testing • selenium webdriver docker safari • • Burma

How to move a containerized application to a different host? Continuous Integration and Delivery (CI, CD) • docker migration • • jeanid

Port forwarding rules with Traefik and Docker.Compose Continuous Integration and Delivery (CI, CD) • docker networking docker compose traefik • • meriah

Internet connection inside Docker container in Kubernetes
Continuous Integration and Delivery (CI, CD) • docker kubernetes • • obi

access from one container to another by name
Software Programming • docker docker compose • • derk

Understanding Docker layers
Continuous Integration and Delivery (CI, CD) • docker dockerfile • • yajahira

Build isolation - Docker container based builds in Bamboo 6.4.0
Continuous Integration and Delivery (CI, CD) • docker bamboo • • jonetta

any way to limit "docker logs" output by default?
Continuous Integration and Delivery (CI, CD) • linux docker • • kalyn

How can I deal with container "patching" in a strict release process?
Continuous Integration and Delivery (CI, CD) • kubernetes containers cicd • • emran

How to create a local network mapping in linux
Continuous Integration and Delivery (CI, CD) • docker networking docker compose containers • • Demir

Debug Docker caching issues
Continuous Integration and Delivery (CI, CD) • docker • • Avante

docker swarm + jenkins CI
Software Programming • docker jenkins continuous integration docker swarm • • Burma

Host a docker registry native
Continuous Integration and Delivery (CI, CD) • docker docker registry • • irl

Docker - Mount a volume from a container to an other (equivalent volumes_from) in docker-compose 3
Continuous Integration and Delivery (CI, CD) • docker docker compose volume • • inna

how to connect to a MySQL database in a docker container?
Continuous Integration and Delivery (CI, CD) • mysql docker databases networking ports • • irl

How to run Selenium Tests written in C# on a Safari browser in the same Windows 10 laptop?
Automated Testing • selenium webdriver docker safari • • Burma

How to move a containerized application to a different host?
Continuous Integration and Delivery (CI, CD) • docker migration • • jeanid

Port forwarding rules with Traefik and Docker.Compose
Continuous Integration and Delivery (CI, CD) • docker networking docker compose traefik • • meriah