Docker Daemon Advanced Improvement¶

Example of `/etc/docker/daemon.json`¶

Great settings for docker daemon:

    {
        "user": "docker_container_user",
        "max-concurrent-downloads": 50,
        "max-concurrent-uploads": 50,
        "bip": "192.168.20.1/24",
        "log-driver": "json-file",
        "log-opts": {
            "max-size":"10m",
            "max-file":"5"
            }
    }

Explanation:

Set concurrent downloads to 50 downloads at the same time.
Set concurrent uploads to 50 uploads at the same time.
Set default Docker bridge IP gateway to 192.168.20.1/24.
Set default log driver to write JSON into files.
Set default log options to:
- A JSON file has a maximum size of 10MB
- Store only a maximum of 5 JSON files

Secure the Docker Container¶

Add a docker user as root or any other admin user: useradd -s /usr/sbin/nologin -M -d /dev/null -c “Dockeruser container” docker_container_user echo “docker_container_user:231072:65536” >> /etc/subgid echo “docker_container_user:231072:65536” >> /etc/subuid
change /etc/docker/docker.json see above
restart docker deamon: service dockerd restart

Sources¶

https://docs.docker.com/engine/reference/commandline/network_create/#bridge-driver-options
https://docs.docker.com/network/bridge/#manage-a-user-defined-bridge
https://docs.docker.com/v17.09/engine/userguide/networking/default_network/custom-docker0/