468
回編集
(→LXC) |
(→Docker) |
||
| (同じ利用者による、間の13版が非表示) | |||
|
== 設定 ==
=== nftables ===
<nowiki>
$ sudo systemctl reload nftables
$ sudo systemctl restart lxc-net
$ sudo systemctl restart docker
$ sudo nft list ruleset
</nowiki>
=== libvirt ===
<nowiki>
$ sudo adduser
$ newgrp libvirt
</nowiki>
=== LXC(Unprivileged) ===
~/.config/lxc/lxc.conf
$ lxc-attach -n debian
$ lxc-stop -n debian
</nowiki>
==== 削除 ====
<nowiki>
$ lxc-stop -n debian
$ lxc-destroy -n debian
</nowiki>
<nowiki>
lxc.net.0.link = br0
</nowiki>
=== Docker ===
<nowiki>
sudo adduser USER docker
</nowiki>
/etc/docker/daemon.json
<nowiki>
{
"data-root": "/docker"
}
</nowiki>
※ver.29では、containerdが使われている
/etc/containerd/config.toml
<nowiki>
#root = "/var/lib/containerd"
</nowiki>
/etc/nftables.conf
<nowiki>
table inet filter {
chain input {
# Docker
iifname "docker0" udp dport {53,67} accept
iifname "docker0" tcp dport 53 accept
}
chain forward {
# Docker
iifname "docker0" accept
oifname "docker0" ct state established,related accept
}
}
</nowiki>
<nowiki>
$ docker pull debian:trixie
$ docker images
$ docker run --name debian-trixie -it debian:trixie bash
$ docker rm debian-trixie
</nowiki>
==== apache ====
Dockerfile
<nowiki>
FROM debian:trixie
RUN apt update && \
apt install -y apache2 && \
rm -rf /var/lib/apt/lists/*
EXPOSE 80
CMD ["/usr/sbin/apache2ctl", "-D", "FOREGROUND"]
</nowiki>
<nowiki>
$ docker build -t apache .
$ docker run -d \
--name web \
-p 8080:80 \
apache
</nowiki>
| |||