[Users] Docker inside OVZ 7 containers

[Konstantin Khorenko]

On 05/28/2016 09:35 PM, jjs - mainphrame wrote:
> Thanks for the guidelines - I see some encouraging initial results
> with docker inside a centos 7 CT:

Good to know, thank you for sharing!

>
> [root at vz105 ~]# docker run hello-world
> Unable to find image 'hello-world:latest' locally
> Trying to pull repository docker.io/library/hello-world ... latest:
> Pulling from library/hello-world
>
> 79112a2b2613: Pull complete
> 4c4abd6d4278: Pull complete
> Digest: sha256:4f32210e234b4ad5cac92efacc0a3d602b02476c754f13d517e1ada048e5a8ba
> Status: Downloaded newer image for docker.io/hello-world:latest
>
>
> Hello from Docker.
> This message shows that your installation appears to be working correctly.
>
> To generate this message, Docker took the following steps:
>   1. The Docker client contacted the Docker daemon.
>   2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
>   3. The Docker daemon created a new container from that image which runs the
>      executable that produces the output you are currently reading.
>   4. The Docker daemon streamed that output to the Docker client, which sent it
>      to your terminal.
>
> To try something more ambitious, you can run an Ubuntu container with:
>   $ docker run -it ubuntu bash
>
> Share images, automate workflows, and more with a free Docker Hub account:
>   https://hub.docker.com
>
> For more examples and ideas, visit:
>   https://docs.docker.com/engine/userguide/
>
> [root at vz105 ~]#
>
> On Fri, May 27, 2016 at 1:41 AM, Konstantin Khorenko
> <khorenko at virtuozzo.com> wrote:
>> Hi Jake,
>>
>> when trying Docker Containers inside Virtuozzo 7 Containers, please make
>> sure you have
>> kernel 3.10.0-327.18.2.vz7.14.7 or later.
>>
>> And if there are any issues with Docker application template, please let us
>> know,
>> but in fact it's enough to:
>> * load "veth", "overlay" kernel modules on the host
>> * enable full netfilters for the VZ 7 CT (to be run on a stopped Container):
>>    # prlctl set $CTID --netfilter=full
>>
>> And after that install and use Docker inside a VZ7 CT like it's done on any
>> full OS without Docker application template installation.
>>
>> --
>> Best regards,
>>
>> Konstantin Khorenko,
>> Virtuozzo Linux Kernel Team
>>
>>
>> On 05/27/2016 08:02 AM, jjs - mainphrame wrote:
>>>
>>> Thanks Denis,
>>>
>>> I'll check this out very soon -
>>>
>>> Jake
>>>
>>> On Thu, May 26, 2016 at 8:00 AM, Denis Silakov <dsilakov at virtuozzo.com>
>>> wrote:
>>>>
>>>> You can try to create container from centos-7-x86_64 template and then
>>>> install docker app template there:
>>>>
>>>> # vzctl create 111 --ostemplate centos-7-x86_64
>>>> # vzctl start 111
>>>> # vzpkg install 111 docker
>>>>
>>>> It can require some preparations though; pre-install script checks them
>>>> and
>>>> refuses to proceed if anything is wrong. Currently it checks that
>>>> "bridge:on" feature is set and netfilter is set to "full"
>>>>
>>>> (https://src.openvz.org/projects/OVZT/repos/centos-7-x86_64-ez/browse/docker_pre-install-hn#42).
>>>>
>>>>
>>>> On 05/25/2016 03:27 AM, jjs - mainphrame wrote:
>>>>>
>>>>>
>>>>> Greetings,
>>>>>
>>>>> Just a quick question - I've been reading that it's possible to spin
>>>>> up docker apps inside OVZ 7 containers - are there any particular
>>>>> preparations or workarounds required, in the way of differences from a
>>>>> docker install on a full OS?
>>>>>
>>>>> Disclaimer - I haven't done anything with docker, but I'm curious to
>>>>> see how useful it might be, and in particular, how well it works
>>>>> inside a Linux container.
>>>>>
>>>>> Jake
>>
>> _______________________________________________
>> Users mailing list
>> Users at openvz.org
>> https://lists.openvz.org/mailman/listinfo/users
> _______________________________________________
> Users mailing list
> Users at openvz.org
> https://lists.openvz.org/mailman/listinfo/users
> .
>