Skip to content

Latest commit

 

History

History
executable file
·
180 lines (143 loc) · 5.27 KB

11_Docker_configuration.md

File metadata and controls

executable file
·
180 lines (143 loc) · 5.27 KB

Task

  • Docker configuration and administration.

Useful Docker links

Docker Compose links:

Change Docker Default Root Data Directory

Links:

Sometimes there is not enough space in the /var/lib/docker directory:

df -H /var/lib/docker
Filesystem      Size  Used Avail Use% Mounted on
/dev/md2p1      106G   31G   69G  32% /

To change Docker default root data directory:

# Check root dir is `/var/lib/docker`
#docker info | grep "Docker Root Dir"
docker info -f '{{ .DockerRootDir}}'

# Stop the Docker services
sudo systemctl stop docker
sudo systemctl stop docker.socket
sudo systemctl stop containerd
# Verify Docker has been stopped
ps aux | grep -i docker | grep -v grep

# Edit JSON file
sudo vim /etc/docker/daemon.json
# Add the following information to this file
{
  "data-root": "/data/docker_root"
}
# To exit Vim editor press the `Esc` key to enter "Normal mode".
# Then type `:` to enter "Command-line mode".
    :wq  # to write and quit

# Copy files to new Docker dir
sudo rsync -axPS /var/lib/docker/ /data/docker_root
# Start the Docker services
sudo systemctl start docker
# Verify Docker is up and is using the new dir `/data/docker_root`
docker info -f '{{ .DockerRootDir}}'

# Check containers has started and running
docker ps
# Try Hello-World
docker pull hello-world
docker run hello-world

# Remove previous dir
#sudo rm -r /var/lib/docker

Close port 5000

Close port 5000 for security reasons. You should login via SSH graphical interface ssh -X user@website -p port or via X2Go Client and then use http://localhost:5000 to connect to DIGITS.

# Open port 5000 for NVIDIA DIGITS (not secure)
##sudo ufw allow 5000
# Close port 5000 for NVIDIA DIGITS
sudo ufw delete allow 5000
# Check the status
sudo ufw status

Manage Docker

Manage Docker containers

# To show only running containers
docker ps
# or
docker container ls

docker container stop 6827ed3a784f  # stop container

# To show all containers
docker ps -a
# or
docker container ls -a

# Check status of the docker service. Press "Q" key to exit.
sudo systemctl status docker
# or
systemctl is-active docker

Manage Docker as a non-root user

If you don’t want to preface the docker command with sudo, create a Unix group called docker and add users to it.

❗ Only trusted users should be allowed to control your Docker daemon. ❗

# Show docker group
cat /etc/group | grep "docker"
# Create the docker group if it doesn't exist
sudo groupadd docker
# Add trusted users to the docker group.
# I don't know, is it possible to add existing group to docker group?
sudo usermod -aG docker $USER
# Log out and log back.

# Verify that you can run docker commands without sudo.
docker run hello-world

# To delete user from a docker group
sudo deluser username docker

Start containers automatically

It starts container, but not Nvidia DIGITS itself.

# Autostart
docker run -dit --restart unless-stopped nvidia/digits:latest

# Stop autostart
docker run -dit --restart no nvidia/digits:latest

Stop all docker containers

sudo docker kill $(sudo docker ps -q)

Manage Docker Compose tool

Docker Compose is a tool for defining and running multi-container Docker applications.

# Install Docker Compose tool. WARNING: current version could be different.
sudo curl -L https://github.com/docker/compose/releases/download/1.24.0-rc1/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose
sudo chmod +x /usr/local/bin/docker-compose

# Test the installation
docker-compose --version