Blame
|
1 | # docker |
||||||
| 2 | ||||||||
| 3 | #### Build Image |
|||||||
| 4 | docker build -t <tagname> . |
|||||||
| 5 | ||||||||
| 6 | #### Run Image Temporarily |
|||||||
| 7 | sudo docker run --rm -it -p 8080:5000 --name spyglass-frontend <tagname> |
|||||||
| 8 | ||||||||
| 9 | #### Get Shell on Docker Container |
|||||||
| 10 | docker exec -it <container_id> sh |
|||||||
| 11 | ||||||||
| 12 | #### Start New Container in Daemon Mode |
|||||||
| 13 | docker run -d -p 8082:5000 --name <name> <image> |
|||||||
| 14 | ||||||||
| 15 | #### Rename Container |
|||||||
| 16 | docker rename <target> <new_name> |
|||||||
| 17 | ||||||||
| 18 | #### Modify Restart Policy |
|||||||
| 19 | docker update --restart unless-stopped <container> |
|||||||
| 20 | ||||||||
| 21 | #### Block outside access to docker but allow localhost |
|||||||
| 22 | Without the `-m state` rule above the `DROP` rule, outside access is blocked, but traffic initiated from docker won't be allowed back. |
|||||||
| 23 | ||||||||
| 24 | -A DOCKER-USER -m state --state RELATED,ESTABLISHED -j ACCEPT |
|||||||
| 25 | -A DOCKER-USER ! -s 127.0.0.1/32 -i eth0 -j DROP |
|||||||
|
26 | |||||||
| 27 | #### Update a docker container that uses docker compose |
|||||||
|
28 | docker compose pull |
||||||
| 29 | docker compose up --force-recreate --build -d |
|||||||
|
30 | docker image prune -f |
||||||