User Tools

Site Tools



Docker, The Linux container engine is an open source project to pack, ship and run any application as a lightweight container.

Have look at Docker getting started.


PLD Linux Base images

Minimal PLD Linux base images are built every Friday and published in GitLab:

There's also available base images from Th snapshots:

$ docker run --rm -it echo hello pld linux
hello pld linux

To build your own base image, you can use contrib/ as base.

Additionally PHP base images are provided:

Setup Cgroups

Easiest way is to install libcgroup package and enable all cgroup types:

# install libcgroup and enable mounts
poldek -u --noask libcgroup
sed -i -e '/^#mount/,$ s/^#//' /etc/cgconfig.conf
service cgconfig start 

Network Configuration

IPv4 packet forwarding is disabled by default in PLD Linux, so internet access from inside the container will not work unless net.ipv4.ip_forward is enabled:

 WARNING: IPv4 forwarding is disabled.

To fix, run:

 sudo sysctl -w net.ipv4.ip_forward=1

Or, to enable it more permanently, enable it on the host's /etc/sysctl.conf:



Don't run docker as root. Add your user to docker group in host to be able to run from your own user.

By adding yourself to the docker group you are effectively granting yourself full root permissions. For more information please read On Docker security: docker group considered harmful.

Whoever, we still consider that more secure approach than just running as root. Accidental damage to Host system is minimized this way.

How To


Getting rid of stopped containers

docker ps -f status=exited
docker ps -q -f status=exited | xargs -r docker rm

Getting rid of unused images

docker images --filter dangling=true
docker images --filter dangling=true --quiet | xargs -r docker rmi

Getting rid of unused volumes

docker volume ls -f dangling=true
docker volume ls -qf dangling=true | xargs -r docker volume rm

For Docker < 1.9, see docker-cleanup-volumes tool.

For Docker >= 1.13 use docker {container,image,volume,network} prune subcommands.


To play around inside vagrant, create Vagrantfile and run vagrant up followed by vagrant ssh:

mkdir test
cd test
# use curl or wget
curl -sS > Vagrantfile || \
wget -q -O Vagrantfile
vagrant up
vagrant ssh
# -*- mode: ruby -*-
# vi: set ft=ruby :
BOX_NAME = ENV['BOX_NAME'] || "pld64"
BOX_URI = ENV['BOX_URI'] || ""
hostname = File.basename(File.dirname(__FILE__))
print "\033k#{hostname}\033\\" do |config|
  # Setup virtual machine box. This VM configuration code is always executed. = BOX_NAME
  config.vm.box_url = BOX_URI
  # Provision docker and new kernel if deployment was not done
  if Dir.glob("#{File.dirname(__FILE__)}/.vagrant/machines/default/*/id").empty?
    pkg_cmd = "set -xe; "
    # install libcgroup and enable mounts
    pkg_cmd << "poldek -u --noask libcgroup; "
    pkg_cmd << "sed -i -e '/^#mount/,$ s/^#//' /etc/cgconfig.conf; "
    pkg_cmd << "service cgconfig start; "
    # ensure ip forward is enabled
    pkg_cmd << "sed -i -e '/^net.ipv4.ip_forward/ s/0/1/' /etc/sysctl.conf; "
    pkg_cmd << "sysctl -p; "
    # Add docker package and start it
    pkg_cmd << "poldek -u --noask lxc-docker; "
    pkg_cmd << "service lxc-docker start; "
    pkg_cmd << "usermod -A docker vagrant; "
    # Add glibc locales
    pkg_cmd << "poldek -u glibc-localedb-all; "
    # Make some more space for containers
    pkg_cmd << "poldek -u xfsprogs; ldconfig; "
    pkg_cmd << "lvextend --size=+3G /dev/sys/rootfs; xfs_growfs /; "
    config.vm.provision :shell, :inline => pkg_cmd
# Providers were added on Vagrant >= 1.1.0
Vagrant::VERSION >= "1.1.0" and Vagrant.configure("2") do |config|
  config.vm.provider :virtualbox do |vb| = BOX_NAME
    config.vm.box_url = BOX_URI
    # ssh agent forwarding can be useful
    #config.ssh.forward_agent = true
    # Make VM accessible outside VM itself, and use eth1 device :public_network, { bridge: 'eth1', auto_config: true }
packages/docker.txt · Last modified: 2020-10-24 16:21 by glen