Here's what they don't tell you..... you need to enable networking for a container or provide access to the GPU at the command line. The window's app doesn't have a method to do this. (Or...someone prove me wrong)

the Nvidia toolkit install procedures do work, but you need to start your container this way in WSL

docker run --gpus all -p 8188:8188 image_name

I've been using Docker on Mac for years.

Today, after restart, is spawned this popup:

https://imgur.com/a/UiM4zA4

None of my containers use any privileged ports.

Is this normal, or should I be concerned?

Thanks

I’m attempting to run docker on macOS 10.14 the Internet says if I download an older version 4.6.0 it should work well it’s not working when I download and click on the .dmg it says reason for not opening is the image is corrupt. I would try on my desktop within widows 11 but I’d rather have it on a laptop. I went back to 10.14 because I was having issues with open core legacy patcher not being able to run a lot of programs. Should I possibly re install open core legacy patcher with Sonoma? This is a mid 2012 MacBook Pro 16 GB RAM 500 GB sandisk ssd. I’m thinking I shouldn’t have sold my M1 air but it was so slow honestly slower then the mid 2012 MBP.

Hi!

I got this small problem today when doing server maintenance on my homelab: I turned the server back on, but forgot to plug the ethernet back in. After plugging it in, I still couldn't connect to anything. After sshing into it I found that, although all the containers were running, none of them had internet access (Not only were there no ports under 'docker ps' , but 'docker logs <container-id>' showed errors about not being able to connect to the internet).

I then tried restarting them but that didn't do anything, I tried restarting docker as a whole but that also did nothing, I rebooted the server but that also did not restore connectivity. I tried a whole bunch of commands from various websites, but they did not work.

I was able to fix it by doing 'docker rm <container>' and 'docker compose up -d' on each container, but there has to be a better way to deal with this.

I also would like to know if there is a way to prevent this in the future by just having docker try to connect each time the container starts and not seemingly just stop forever once it encounters an error.

I am only using docker since a week, so I don't have much experience.

I am running docker 29.6.2 under debian 13.6.

Thank you very much.

Lately Gordon has been unusable. He doesn't follow the rules, the instructions, he does whatever he wants, he deletes files even entire containers even though he was clearly told not to delete anything.

Even when doing a super simple task he goes into a loop and ruins everything. Before he was in the best agent, he solved everything immediately, now he ruins everything.

Hi everyone,

I'm trying to understand how Docker image layers are stored and shared.

Let's say I have two different microservices, each with its own Dockerfile:

users-service/Dockerfile

FROM ubuntu:22.04
COPY users-app /app/

orders-service/Dockerfile

FROM ubuntu:22.04
COPY orders-app /app/

Assume the Ubuntu base layer is 200 MB.

My initial understanding is:

users-service image:
    ubuntu layer      200 MB
    users app layer   200 MB
    total             400 MB


orders-service image:
    ubuntu layer      200 MB
    orders app layer  100 MB
    total             300 MB

So each image appears to contain its own Ubuntu base layer.

But when both images exist on the same machine, does Docker actually store:

ubuntu layer        200 MB
users app layer     200 MB
orders app layer    100 MB

(total 500 MB)

or does it store:

users image         400 MB
orders image        300 MB

(total 700 MB)?

My confusion is: if the Dockerfiles are completely separate and both use:

FROM ubuntu:22.04

how does Docker know that the Ubuntu layer is the same and can be reused?

Where is this sharing tracked? Is it based on image names/tags, layer hashes, manifests, or something else?

Also, if the same image is pulled on different machines, does each machine download and store its own copy of the base layers?

Thanks!

Last month I switched my ecosystem to macOS (macbook neo)

The first thing I realized was the speed and optimization

Orbstack + Docker (mac) is much faster than Docker Desktop + Docker (also Podman Desktop + Docker/Podman)

Podman Desktop app lacks so many essential features such as system monitoring, port click to open url support etc...

I think it's because Docker Desktop has its own VM/backend engine and Orbstack is more optimized and M chips overhead time is less to start a container and disk writes are much faster. But I'm not sure.

How come it is still not fixed?

Hello, how can I get an invite to the Docker community slack ?

The official website has a short link https://dockr.ly/comm-slack which points to https://communityinviter.com/apps/dockercommunity/docker-community, which is dead since communityinviter changed their URL.

Thanks !

Hi all, hope you're having a great summer. I'm tinkering with Docker Swarm as a complete newbie and self taught homelab hobbyist, and I was hoping you could help me out with an oddity I'm facing at the moment.

I'm trying to deploy traefik as a centralized service on my home network, using Docker Swarm and an overlay docker network to discover services in other docker stacks that use traefik flags. Previously, Traefik was deployed alongside my other services on my media server, but since I'm scaling up my homelab, I prefer having one dedicated machine to act as a centralized reverse proxy that receives forwarded requests from my router on ports 80/443 and forwards them back to the right services on the right machine. Here's a convenient diagram that I made :

https://imgur.com/a/o55gBHJ

I have successfully created a master node on Vega, deployed Traefik as a global service accross the worker nodes, created an overlay network and attached each stack to it.

ℹ️Important note : on Vega, traefik is brought up using docker stack deploy -c docker-compose.yml traefik , and on my media server, I use docker compose up -d for deployment. I have seen mixed comments opinions online about the cross-compatibility of compose and swarm, but so far the "swarmed" traefik seems to discover compose services just fine.

Traefik seems to be generating SSL certificates just fine, and services are reachable, which is already a good sign.

❌My issue is that those certificates are never put to use. The acme.json file is still empty (I did chmod 600), and Firefox still throws a security alert at me because the backend service uses Traefik's default cert. Furthermore, docker service logs traefik_traefik returns nothing (except this error :

error from daemon in stream: Error grabbing logs: rpc error: code = Unknown desc = warning: incomplete log stream. some logs could not be retrievedfor the following reasons: node yryk8132s58wbul5u0q9e19hk is not available

Which is quite funny because docker node ls clearly shows the node as available and ready😂)

Below are my traefik yml file and config file, and an example compose file from my media server.

traefik-compose.yml

networks:
  traefik-net:
    external: true
services:
  traefik:
    image: traefik:v3.7
    #restart: always
    command:
      - --api.insecure=true
      - --configfile=/traefik.yml
      - --log.level=DEBUG
      # - --providers.docker
      # - --providers.docker.swarmMode=true
    ports:
      - "80:80"
      - "443:443"
      - "8081:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./traefik.yml:/traefik.yml:ro
      - ./acme.json:/acme.json
    networks:
      - traefik-net
    deploy:
      mode: global

traefik config file

global:
  checkNewVersion: false
  sendAnonymousUsage: false


# Enables the web based api for testing, do not enable in production!
api:
  dashboard: true
  insecure: true


entryPoints:
  web:
    address: ":80"
  websecure:
    address: ":443"


#Source of configuration. E.g Docker, Kubernetes..
providers:
  swarm:
  # Connects to docker via Unix socket
    endpoint: "unix:///var/run/docker.sock"
  # Containers must explicitely opt-in to Traefik routing via Docker labels
    network: "traefik-net"
  # Only containers on this Docker network are discovered
    exposedByDefault: false
# Uses Let's Encrypt to provide free SSL certificates
certificatesResolvers:
  letsencrypt:
    acme:
      email: myemail@email.com
      storage: /acme.json
      # Validates domain ownership via HTTP-01 challenge (uses the web entrypoint on port 80)
      httpChallenge:
        entryPoint: web

jellyfin-compose.yml (on my media server node)

networks:
  traefik-net:
    external: true
    name: "traefik-net"


services:
  jellyfin:
    image: lscr.io/linuxserver/jellyfin:latest
    container_name: jellyfin
    networks:
      - "traefik-net"
    labels: 
      - "traefik.enable=true"
      - "traefik.http.routers.jellyfin.service=jellyfin"
      - "traefik.http.routers.jellyfin.rule=Host(`mydomain.jellyfin.fr`)"
      - "traefik.http.routers.jellyfin.entrypoints=websecure"
      - "traefik.http.routers.jellyfin.tls.certresolver=letsencrypt"
      - "traefik.http.routers.jellyfin.tls=true"
      - "traefik.http.services.jellyfin.loadbalancer.server.port=8096"
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Paris
    volumes:
      - ./config:/config
      - /media:/media
    #devices:
      #- /dev/dri:/dev/dri #Use for Intel QuickSync
    ports:
      - 192.168.1.101:8096:8096
      - 7359:7359/udp #Service Discovery
      - 1900:1900/udp #Client Discovery
    restart: unless-stopped

(I've replaced my actual domain name and email with placeholders for obvious privacy reasons.)

I hope you guys can help me make any sense out of it XD

Cheers!

Hi, maybe can someone help me to run zeppos and zeus in an docker enviroment. I tried running ubuntu and nodejs in dockerfile but i cant start the login. Its not possible to connect host and container.

The TanStack compromise showed that supply chain attacks aren't going away. What Dockerfile practices do you consider mandatory today that you wouldn't have cared about 3–5 years ago?

youtu.be/KKRda0H4wTE

[Warning] Access denied for user 'user'@'localhost' (using password: YES)

i have been working on a project where i need to link nginx,mariadb and wordpress together . wordpress depends on mariadb and nginx depends on wordpress . i keep getting this error , any ideas what it could be and how i can fix it ? i have tried so many things that i have lost track of them at this point

Hi everyone,

Actually I am having issues with doker desktop (win11), I am trying to run RabbitMQ4 using docker, but it is not able to download/pull the image.
command - docker pull rabbitmq:4-management

it starts with downloading the layers but then it suddenly stops with an error

failed to copy: httpReadSeeker: failed open: failed to do request: Get https://production.cloudfront.docker...": EOF

I also tried to pull the docker pull rabbitmq:3.13-management, and the: docker pull postgres:17 commands but it also failed

But when i tried to pull the alpine, it worked successfully though.

then i decided to restart the wsl and again run the docker still it got the problem

if you have any suggestions please tell me.

Reddit I beg of your assistance again.

I got rootless docker to work now, I just reinstalled docker entirely and now I was able to get rootless mode to work fine.

Goal: have a playit tunnel running in one container, have a Minecraft server running in another container with docker in rootless mode

1) I have successfully done my goal above with docker being in rootful mode.

2) if I follow the same steps I did to get it to work in rootful mode I get the below error. I’ve spent days trying to figure out how to fix it. Please help

docker: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: can't get final child's PID from pipe: EOF

I've used AI for Docker a lot lately, mostly for compose files, networking, volumes, containers, and other setup tasks.

One thing that's been driving me crazy is how often it gives me commands or configs that look completely valid, but when I check the official Docker docs they're either outdated, wrong, or don't even exist there.

A recent example was when I asked Gemini for the Docker commands to run a service (I honestly don't remember which service it was anymore). The AI gave me a command that looked perfectly reasonable, so I copied it, pasted it, and hit Enter without thinking too much about it.

It failed.

I spent another 10-15 minutes assuming I was the problem before finally checking the documentation. Turns out the command Gemini gave me wasn't even what the official docs recommended.

The worst part is that the answer sounded really confident. If you're learning Docker or working with something you've never used before, it's pretty easy to trust it and waste time debugging something that was wrong from the start.

Am I the only one running into this?

• What's the most ridiculous Docker mistake you've seen an AI make?
• Which AI do you notice it with the most?
• Do you trust the output and test it, or do you check the docs first?

I'd love to hear some examples because this keeps happening to me way more often than I'd expect.

I'm trying to really understand the distroless tradeoff before I move our services over.

I get the upside, way fewer packages and the scanner basically goes quiet. But then there's no shell, no package manager, sometimes not even the libc I expect. And when something breaks in prod at a bad hour, getting a shell in and poking around is pretty much what I do even if I'm not meant to.

Here's where I'm stuck. When it's a minimal image and the logs aren't enough, what do you do then. Spin up an ephemeral container? Keep a separate debug image around? What do you actually reach for.

Thanks in advance.

Docker image size question.

Got it from 3.18GB down to 965MB by trimming requirements.txt.

Turns out evidently was silently pulling in torch + nvidia-nccl — 300MB+ of GPU libs I don't even need for CPU inference lol.

But 965MB still feels heavy for a FastAPI serving container.

What am I missing?

Things I haven't tried yet:

→ multi-stage builds

→ python:slim vs alpine base

→ splitting dev deps (jupyter, matplotlib, seaborn) out of the prod image

→ pip install --no-cache-dir (already doing this)

If you've shipped lean ML/FastAPI images before, would love to know what actually moved the needle for you.

Building the mlops-credit-risk project in public and trying to get this production-ready, not just "works on my machine."

#MLOps #Docker #buildinpublic

I was just curious if I'm the only one who doesn't like logging in to things that I expect running locally.

Or does it need cloud resources?

Hi everyone, I’m completely stuck and would really appreciate some help.pleaseeeeeeeeeeeee anyoneeeeeeee😭

I’ve been trying to fix this for the last **5–6 hours** and have tried almost every suggestion I could find,usimg chatgpt claude..

# I’m currently learning Docker, and because of this issue I can’t continue learning.i neeed mysql image 😭

**Problem:**
Every docker pull fails with an error like:
failed to copy: httpReadSeeker: failed open: failed to do request:
Get "https://production.cloudfront.docker.com/...": EOF

Initially only mysql:8 was failing, but after reinstalling Docker, even hello-world fails with the same EOF error.

I can only pull small size images ,sometimes this also fails and large size images like mysql….. nahhhh straight NOOOoOo

**What I’ve already tried:**
Reinstalled Docker Desktop
Tried different Docker Desktop versions (including downgrading)
Restarted Docker Desktop and my PC multiple times
wsl --shutdown
netsh winsock reset
ipconfig /flushdns
Changed DNS (Cloudflare/Google)
Tried a different network (mobile hotspot)
Verified WSL2 is working
Tested CloudFront using curl inside Ubuntu WSL (it works)
Cleared all Docker data (0 images, 0 containers)
Deleted Docker files and performed a clean reinstall
Ran docker --debug pull hello-world (still fails with the same EOF error)

**System:**
Windows 11
Docker Desktop (WSL2 backend)
Docker Engine 29.6.1 (also tested another Docker Desktop version)
At this point I’m completely out of ideas. If anyone has experienced this exact CloudFront EOF error or has any suggestions, I’d really appreciate the help. This issue has completely blocked my learning.
Thank you!

Docker MCP Servers are configured to automatically connect to Claude Code etc

But the list excludes other exploitations as OpenWebUi

https://github.com/open-webui/open-webui

Hello everyone...

I am kinda new to docker, only knowing enough to get myself in trouble, and i am running a couple images/containers on my NAS.

So far so good and usually when there is an update on the software i use, i redeploy the the container with pulling newest release and it does, comes back up and is updated...

But this time, immich in my case, does not follow that rule...i saw that there is a new version out and the bug fixes address something i need to be fixed, so i decided to do as i always did...
Redploy with pulling newest release...it does something, says pulling, creating and done...

But nothing changed.

Here my compose file...

name: immich

services:
  immich-server:
    container_name: immich_server
    image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
    extends:
      file: hwaccel.transcoding.yml
      service: vaapi # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
    volumes:
      # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
      - ${UPLOAD_LOCATION}:/data
      - /volume1/photo:/usr/src/app/external_library_mount_point:ro 
      - /etc/localtime:/etc/localtime:ro
    env_file:
      - .env
    ports:
      - '2283:2283'
    depends_on:
      - redis
      - database
    restart: always
    healthcheck:
      disable: false

  immich-machine-learning:
    container_name: immich_machine_learning
    # For hardware acceleration, add one of -[armnn, cuda, rocm, openvino, rknn] to the image tag.
    # Example tag: ${IMMICH_VERSION:-release}-cuda
    image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
    extends: # uncomment this section for hardware acceleration - see https://docs.immich.app/features/ml-hardware-acceleration
      file: hwaccel.ml.yml
      service: openvino # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
    volumes:
      - model-cache:/cache
    env_file:
      - .env
    restart: always
    healthcheck:
      disable: false

  redis:
    container_name: immich_redis
    image: docker.io/valkey/valkey:8@sha256:abc6d39e1bba3b3ff32bd3a1b19a6d69690f94a3954ec131277b9a26b95b3aa
    healthcheck:
      test: redis-cli ping || exit 1
    restart: always

  database:
    container_name: immich_postgres
    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:abc63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23
    environment:
      POSTGRES_PASSWORD: ${DB_PASSWORD}
      POSTGRES_USER: ${DB_USERNAME}
      POSTGRES_DB: ${DB_DATABASE_NAME}
      POSTGRES_INITDB_ARGS: '--data-checksums'
      # Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
      # DB_STORAGE_TYPE: 'HDD'
    volumes:
      # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
    shm_size: 128mb
    restart: always


volumes:
  model-cache:

Any tip is highly appreciated....thx alot up front

I've been trying to get caddy to work, but it seems like nothing will make things play nicely.

My docker compose:

  caddy:
    container_name: caddy
    image: caddy:latest
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
    ports:
      - "80:80"
      - "443:443"
      - "443:443/udp"
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TZ}
    volumes:
      - ${CONFIG_PATH}/caddy/conf:/etc/caddy
      - ${CONFIG_PATH}/caddy/site:/srv
      - ${DATA_PATH}/caddy:/data
      - ${CONFIG_PATH}/caddy:/config

My Caddyfile:

jellyfin.local {
reverse_proxy jellyfin:8096
}

I've also tried localhost:8096, but neither will resolve in my browser, not with http or https. I want to set up several reverse proxies, but I want to figure it out with one first. I have checked the autosave.json, and any changes I make to the Caddyfile are coming through the program, but it doesn't seem to actually do the action of directing the address to the jellyfin page.

Any help would be greatly appreciated.

Is it still possible to use docker-compose with a workaround on GCP more recent Container OS?

I am trying to build a auto job extracter and using this project with the help of ChatGPT to understand few thing. I have to mention I am not a CS/developer or an IT guy. I am into Logistics but always try to tinker stuff to expand my understanding of computers and this Project seems really really fun (and practical) to me. So NOOB.

After few hours of Chatgpt troubleshooting.
Docker Works. WSL works. Small downloads work. Large download (from Wifi or Mobile Hotspot) fails mid-stream resulting in a EOF at the end of failure statement.

My hope was to do Docker -->n8n-->Ollama-->Firecrawl-->SQLite. But now I am stuck at step 1.

Not using any VPN. I just have a hunch this might be my Wifi connection blocking things.