How To Enable Docker On A Virtuozzo 7 VPS

Docker VPS Virtuozzo bridge netfilter networking

By default, the required netfilter access to run Docker containers isn't sufficient on Virtuozzo VPSs

Published on March 27, 2019

2 min read

The VPS must be powered down to perform the necessary configuration changes. We will use VPS container dockertest.corey-regan.ca for the following instructions.

bash:Stop the running VPS

[root@virtuozzo ~]# vzctl stop dockertest.corey-regan.ca
Stopping the Container ...
 
Container was stopped
Unmount image: /vz/private/e54b18b7-1491-4861-8c7c-9b46ce30852d/root.hdd
Container is unmounted

bash:Enable network bridging on the VPS

[root@virtuozzo ~]# prlctl set dockertest.corey-regan.ca --features bridge:on
set features: bridge:on
The CT has been successfully configured.

bash:Enable full access to netfilter features for the VPS

[root@virtuozzo ~]# prlctl set dockertest.corey-regan.ca --netfilter full
Set netfilter: full
The CT has been successfully configured.

bash:Restart the VPS

[root@virtuozzo ~]# vzctl start dockertest.corey-regan.ca
Starting Container ...
Mount image: /vz/private/e54b18b7-1491-4861-8c7c-9b46ce30852d/root.hdd
Container is mounted
Setting permissions for image=/vz/private/e54b18b7-1491-4861-8c7c-9b46ce30852d/root.hdd
Os release: 3.10.0
Configure memguarantee: 0%
Setting permissions for image=/vz/private/e54b18b7-1491-4861-8c7c-9b46ce30852d/root.hdd
CPU limit: 100.0%
Set up ioprio: 5
Adding ip address(es): 204.13.48.99
Set hostname: dockertest.corey-regan.ca
File resolv.conf was modified
Container start in progress...

bash:Install Docker on the VPS, assuming the repo is already configured

[root@virtuozzo ~]# prlctl exec dockertest.corey-regan.ca yum install docker -y

bash:Enable the Docker service for automatic startup on system reboot, and start the Docker service on the VPS

[root@virtuozzo ~]# \
prlctl exec dockertest.corey-regan.ca systemctl enable docker && \
prlctl exec dockertest.corey-regan.ca systemctl start docker

bash:Verify the Docker service is running as expected on the VPS

[root@virtuozzo ~]# prlctl exec dockertest.corey-regan.ca systemctl status docker
? docker.service - Docker Application Container Engine
Loaded: loaded (/usr/lib/systemd/system/docker.service; disabled; vendor preset: disabled)

bash:Verify Docker can run the included hello-world container

[root@virtuozzo ~]# prlctl exec dockertest.corey-regan.ca docker run hello-world
Hello from Docker!
This message shows that your installation appears to be working correctly.