Blame
| a1cd5e | Steven Anderson | 2024-12-17 19:26:17 | 1 | # docker |
| 2 | ||||
| 3 | #### Build Image |
|||
| 4 | docker build -t <tagname> . |
|||
| 5 | ||||
| 6 | #### Run Image Temporarily |
|||
| 7 | sudo docker run --rm -it -p 8080:5000 --name spyglass-frontend <tagname> |
|||
| 8 | ||||
| 9 | #### Get Shell on Docker Container |
|||
| 10 | docker exec -it <container_id> sh |
|||
| 11 | ||||
| 12 | #### Start New Container in Daemon Mode |
|||
| 13 | docker run -d -p 8082:5000 --name <name> <image> |
|||
| 14 | ||||
| 15 | #### Rename Container |
|||
| 16 | docker rename <target> <new_name> |
|||
| 17 | ||||
| 18 | #### Modify Restart Policy |
|||
| 19 | docker update --restart unless-stopped <container> |
|||
| 20 | ||||
| 21 | #### Block outside access to docker but allow localhost |
|||
| 22 | Without the `-m state` rule above the `DROP` rule, outside access is blocked, but traffic initiated from docker won't be allowed back. |
|||
| 23 | ||||
| 24 | -A DOCKER-USER -m state --state RELATED,ESTABLISHED -j ACCEPT |
|||
| 25 | -A DOCKER-USER ! -s 127.0.0.1/32 -i eth0 -j DROP |
|||
| 29e912 | Steven Anderson | 2025-01-21 13:18:19 | 26 | |
| 27 | #### Update a docker container that uses docker compose |
|||
| 89d921 | Steven Anderson | 2025-01-21 13:18:49 | 28 | docker compose pull |
| 29 | docker compose up --force-recreate --build -d |
|||
| 29e912 | Steven Anderson | 2025-01-21 13:18:19 | 30 | docker image prune -f |