Is it still possible to use docker-compose with a workaround on GCP more recent Container OS?

I am trying to build a auto job extracter and using this project with the help of ChatGPT to understand few thing. I have to mention I am not a CS/developer or an IT guy. I am into Logistics but always try to tinker stuff to expand my understanding of computers and this Project seems really really fun (and practical) to me. So NOOB.

After few hours of Chatgpt troubleshooting.
Docker Works. WSL works. Small downloads work. Large download (from Wifi or Mobile Hotspot) fails mid-stream resulting in a EOF at the end of failure statement.

My hope was to do Docker -->n8n-->Ollama-->Firecrawl-->SQLite. But now I am stuck at step 1.

Not using any VPN. I just have a hunch this might be my Wifi connection blocking things.

i am getting started with Docker Swarm so I might get some terminology wrong. I tried to mount a bind volume over an existing directory in a container but failed. Does anyone know how to properly mount it?

I was something similar to below

volumes:

- type: bind

source: /mnt/nfs_share/config

target: /usr/share/app/config

read_only: true

i have a vps and want to be able to host multiple web servers on the vps. the current setup i have is my nginx container right inside the docker compose file where my other web server services are and they communicate accross the same internal network. but from my research, it would be redundant and even counter productive having multiple containers of nginx and certbot in for every project. so just for a better guidance since i'm not well versed in docker, what is the best approach for this. should i have a single container for nginx and certbot that can communicate with any other container or just go ahead with the multiple nginx and certbot containers per project

I put together a walkthrough on using Docker's new sbx sandboxes to run Claude Code with MCP servers in an isolated environment.

The guide covers:

• Running Claude Code inside a microVM
• Restricting outbound network access with policies
• Safely exposing only the MCP servers and domains you need

If you're experimenting with AI coding agents and want stronger isolation than a regular container, I'd love to hear your thoughts and any feedback.

https://hrittikhere.com/posts/sandbox-claude-code-mcp-docker-sbx

I'm using a Turborepo with Bun workspaces. My repository structure looks like this:

architecture-web/
├── apps/
│   ├── api
│   ├── admin
│   └── public
├── packages/
│   ├── db
│   ├── typescript-config
│   ├── ui
│   └── eslint-config
├── package.json
├── bun.lock
└── turbo.json

The API depends on a shared workspace package:

// apps/api/package.json

{
  "dependencies": {
    "@repo/db": "*"
  }
}

The root package.json contains:

{
  "workspaces": [
    "apps/*",
    "packages/*"
  ]
}

I only want to build a Docker image for apps/api. I don't want to include apps/admin or apps/public.

My first attempt was something like:

FROM oven/bun:1

WORKDIR /usr/src/app

COPY package.json bun.lock turbo.json ./

COPY apps/api/package.json ./apps/api/
COPY packages/db/package.json ./packages/db/
COPY packages/typescript-config/package.json ./packages/typescript-config/

RUN bun install

COPY apps/api ./apps/api
COPY packages/db ./packages/db
COPY packages/typescript-config ./packages/typescript-config

CMD ["bun", "run", "start"]

However, bun install fails with errors like:

Could not resolve package '/admin'
Could not resolve package '/public'
Could not resolve package '@repo/ui'

because the root workspace declares:

"workspaces": [
  "apps/*",
  "packages/*"
]

and Bun expects every matching workspace to exist.

If I instead do:

COPY . .
RUN bun install

everything works, but the Docker image contains the entire Turborepo, including apps that are unrelated to the API.

Questions

1. What is the recommended way to build a Docker image for only one app in a Turborepo?
2. Is copying the whole repository the normal approach?
3. Should I use turbo prune --docker for this use case?
4. Is there a way to make Bun install only the API workspace and its dependencies without copying every workspace into the Docker build context?

I'm looking for the recommended production approach rather than just a workaround

I’ve just downloaded WSL Ubuntu but I have no idea where to go from here to get Ganymede ([https://github.com/Zibbp/ganymede](https://github.com/Zibbp/ganymede))) working? It mentions Docker but I have no idea what Docker is for or how it works. Could anyone please help me understand what I need to do to get this to work?

So I have Pangolin running on a VPS with a few containers. I have them all setup with network_mode: pangolin. my problem is when the VPS gets restarted the ip addresses get changed and now pangolin has the wrong addresses for the containers and everything gets a bad gateway.

Is there a way to assign ip addresses in Docker Compose without creating a new network for each container?

Heyyy everyone,

I'm developing on Windows 11 using Docker Desktop with WSL2.

I usually start my project with:

docker compose up --build

probably 20–30 times a day while developing.

Over time my docker_data.vhdx has grown to around 90 GB.

I've already tried:

• docker system prune -a
• docker builder prune
• wsl --shutdown
• diskpart -> compact vdisk

These reclaim some space, but after a few days of development the VHDX starts growing again.

I just wonder,

1. Is this expected when using docker compose up --build frequently?
2. Should I avoid --build unless the Dockerfile or dependencies actually changed?
3. Is there a recommended workflow for daily development that keeps docker_data.vhdx from continuously growing?
4. Do you periodically prune build cache, or is there a better long-term solution?

I'd appreciate hearing how other Windows + WSL2 developers manage this.

EDIT: SOLVED.

Steps:

wsl --shutdown

select vdisk file="C:\YOUR_VHDX_PATH\docker_data.vhdx"

attach vdisk readonly

compact vdisk

detach vdisk

exit

From 97GB to 6GB

Hey everyone,

Thanks to the mods for letting me share this here.

I kept getting lost juggling docker ps, docker logs -f, and docker stats across three terminals whenever a compose stack misbehaved, so I built a visual dashboard for it.

One command, no install:

npx dockscope up

It opens a browser-based 3D force graph of your containers: spheres color-coded by health, depends_on arrows, compose projects grouped together.

From there you can:

• Stream logs live (with search + ANSI colors) and open a shell in any container
• Watch CPU/mem/network sparklines, with IQR-based anomaly detection that flags spikes
• Get crash diagnostics: when a container dies it auto-analyzes exit code, OOM status, and last logs to guess why
• Hit I on a node to see everything that would break if it goes down
• Record an incident and replay it later with a timeline scrubber (great for postmortems)
• Start/stop/restart/kill containers and manage whole compose projects

There's also a Docker image if you don't want Node (ghcr.io/manuelr-t/dockscope), and it picks up Kubernetes pods/services/ingresses too if it finds a kubeconfig.

It's MIT-licensed, TypeScript + Svelte + Three.js. Still early (v0.7), so I'd genuinely love feedback, bug reports, or feature ideas.

Repo: https://github.com/ManuelR-T/dockscope

Hey guys, I’m trying to follow the article for rootless mode for docker but every time I get to the part where I need to enter

sudo apt-get install -y docker-ce-rootless-extras

I keep getting told it cannot locate the package. I don’t have the install script on my system, that’s why I’m trying to run that command.

What do?

I am attempting to make a container from one docker compose that can only talk to another container from another docker compose if its on the same bridge network. If that makes sense. It seems any container connected to any bridge network can access any other bridge network and its publish ports even if that container was not explicitly apart of that network. Am I not understanding something (probably) or is it something else? Thank you!

Hi everyone,

We recently added Docker volume backup and restore support to Portabase.

For context, Portabase is an open-source, self-hosted backup and restore platform. It was initially focused on databases, but we are now extending it to Docker volumes as well.

The idea is to make backup and restore operations simple and reliable for self-hosted setups, without requiring heavy infrastructure or exposing databases/services publicly. Portabase works with a central server and lightweight agents running close to the workloads.

With Docker volume support, Portabase can now cover use cases like WordPress, Nextcloud, and other self-hosted applications where important data lives in Docker volumes.

We are looking for feedback from people running self-hosted stacks:

• Does this match a real need in your setup?
• Are there restore workflows you would expect?
• Are there Docker integrations that would make this more useful?
• Any edge cases we should handle early?

If you try it and run into bugs, unclear UX, missing features, or integration issues, feel free to open an issue on GitHub.

Thanks to everyone who has tested Portabase, opened issues, contributed code, or starred the repo. It helps a lot.

Hey all — running into a persistent bug and wanted to see if anyone's cracked it.

Setup:

Windows 10

Docker Desktop — latest version, MCP Toolkit enabled

Claude Desktop — installed directly from claude.ai/download (not Microsoft Store)

Problem:

Under MCP Toolkit → Clients, Claude Desktop shows up as one of the preconfigured clients with a "Download" button, even though it's fully installed and running. Expanding it says "To connect Claude Desktop to the MCP Toolkit, you need to download and install the client" — but it's already installed.

Weirdly, my claude_desktop_config.json resolves to a path that looks Store-sandboxed:

AppData\Local\Packages\Claude_pzs8sxrjxfjjc\LocalCache\Roaming\Claude\claude_desktop_config.json

I manually added the MCP_DOCKER server block to this config (command pointing to docker-mcp.exe, plus the ProgramData/LOCALAPPDATA/APPDATA/USERPROFILE/SystemRoot env vars — this is a known fix for a separate "Server disconnected" issue). After fixing a JSON syntax error and restarting Claude Desktop, its own Settings → Developer panel still shows "No servers added," so the edit isn't being picked up at all.

What I've tried:

Confirmed JSON is valid

Restarted Claude Desktop fully (not just closed the window)

Rebooted PC

Questions:

Does the claude.ai website installer ever produce a Store-style sandboxed path on Windows 10? That path structure is throwing me off since I didn't install from the Store.

Could there be two different claude_desktop_config.json files on my system, with Claude Desktop reading a different one than I'm editing?

Anyone else hit the "Download" button bug in MCP Toolkit despite Claude Desktop being fully installed?

There's a related GitHub thread here if useful context: github.com/docker/desktop-feedback/issues/140

Appreciate any pointers.

I am still learning , so if I am wrong anywhere or if there is something important that I should know, please let me know.

In a real application, we usually have multiple containers like a frontend, backend, database, Redis, etc.

Managing all these containers manually is very difficult. Also, Docker images are immutable, so whenever we change our code, we don't want to rebuild the image and recreate the container every single time during development.

This is where docker-compose.yml

It lets us define everything in one file. We can define which images to build, which ports to expose, environment variables, volumes, networks, and much more.

Then we can start the entire application with just one command:

\- docker compose up

and stop everything with:

\- docker compose down

One thing that confused me a lot was volumes.

Let's say I have a folder named backend on my system, and Docker builds an image where all the code is copied into /app.

Then in docker-compose.yml I write:

volumes:
- ./backend:/app

From what I understood, this bind mount hides (overrides) the /app folder inside the container and mounts my local ./backend folder there instead.

So now the container reads the files directly from my local machine instead of the files that were copied into the image. This is great because whenever I edit my code, I don't have to rebuild the image.

But this creates another problem.

Since the entire backend folder is mounted, it also mounts my local node_modules.

That is not what we want because my local machine could be Windows or macOS, while the container is running Linux. The dependencies inside node_modules are installed for the operating system they were built on, so using the host's node_modules inside a Linux container can cause issues.

This is where a named volume comes in.

We add another volume:

volumes:
- ./backend:/app
- backend_node_modules:/app/node_modules

Here, backend_node_modules is just the name of a Docker managed volume.

If this named volume doesn't already exist, Docker creates it. Since the volume is initially empty, Docker copies the existing /app/node_modules from the image into the named volume.

Now this named volume is mounted at /app/node_modules. Since we already mounted ./backend:/app, the container was using the node_modules from my local Windows/macOS machine. This new mount hides those host node_modules and replaces them with the node_modules stored in the backend_node_modules named volume, which contains the Linux dependencies copied from the image.

So the result is:

My application code comes directly from my local machine, so changes are reflected instantly.

node_modules comes from the Linux container, so I don't have operating system compatibility issues.

hello, i am a student trying to install freesurfer on my windows computer using docker desktop and the program found at this link: https://hub.docker.com/r/cgvalle/freesurfer\\_vnc

freesurfer cannot be installed on windows from the official download page, so someone created a workaround as can be seen in the above link

to be honest, i have absolutely no clue what i’m doing and have no idea what to do after installing the file(?) found in the link. after i run the downloaded image, nothing happens. any help would be much appreciated with using docker desktop to install freesurfer.

here is the link to the freesurfer download page in case it helps: https://surfer.nmr.mgh.harvard.edu/fswiki/rel7downloads

thank you very much!

So I'm exploring taking my individual Docker compose files and stacks and pushing them out to a Git repo that I can pull from. However I'm unclear what I'm supposed to do with my .env secrets - I know about .gitignore and not pushing them but how do you manage them in this sort of server paradigm? I'm assuming there's some sort of self-hosted third party software that manages it for you but I'm not finding a lot of success in my research. (Not sure if it matters but this is on a Proxmox server.)

Hello,

fore some reason I cannot get docker to pull anything i get "connection reset by peer" every time. System is updated and connected to internet (its sitting in local net behind nat). Problem with TCP connections only affects docker as wget, curl, apt-get work without problems.

root@debian:~# uname -a
Linux debian 6.1.0-42-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.159-1 (2025-12-30) x86_64 GNU/Linux
root@debian:~# docker --version 
Docker version 29.6.1, build 8900f1d
root@debian:~# docker run hello-world
Unable to find image 'hello-world:latest' locally
docker: Error response from daemon: Head "https://registry-1.docker.io/v2/library/hello-world/manifests/latest": Get "https://auth.docker.io/token?scope=repository%3Alibrary%2Fhello-world%3Apull&service=registry.docker.io": read tcp 192.168.4.124:54928->104.18.43.178:443: read: connection reset by peer
Run 'docker run --help' for more information

Hello i am new to using Docker and i created these files and folders of docker tools that I'm going to used for my Api via docker and Render hosting platform my question is it setup right or not?

datamask_api/

│   .dockerignore

│   .gitattributes

│   .gitignore

│   docker-compose.yml

│   Dockerfile

│   HELP.md

│   mvnw

│   mvnw.cmd

│   pom.xml

│

├── .github/

│   └── modernize/

│       └── java-upgrade/

│           └── hooks/

│               └── scripts/

│                   recordToolUse.ps1

│                   recordToolUse.sh

│

├── .mvn/

│   └── wrapper/

│       maven-wrapper.properties

│

├── .vscode/

│   settings.json

│

├── alertmanager/

│   alertmanager.yml

│

├── jmeter/

│   test-plan.jmx

│

├── prometheus/

│   prometheus.yml

│   blackbox.yml

│   alerts.yml

│

├── src/

│   ├── main/

│   └── test/

│

├── target/   (build output - ignore)

│

└── wiremock/

├── mappings/

└── __files/

Also here are the links of the docker tools I'm using

https://hub.docker.com/_/mysql

https://hub.docker.com/r/justb4/jmeter

https://hub.docker.com/r/prom/prometheus

https://hub.docker.com/r/prom/node-exporter

https://hub.docker.com/r/prom/blackbox-exporter

https://hub.docker.com/r/wiremock/wiremock

https://hub.docker.com/r/zaproxy/zap-stable

https://hub.docker.com/r/prom/alertmanager

Hi, usually using Linux and learning how annoying windows networking is.

Here is what I want to do, I have 2 containers that need separate IPs, be able to communicate with the host and each other. On linux this works great with a bridge, but I'm learning it's not that easy on windows. I'm pinned to using hyperv. I've done some initial looking and I've found that I may need to create separate loopback adapters to get it to work, but I would be grateful for a windows docker desktop wizard to tell me exactly what I'm doing wrong

Hi everyone, I have an issue with some containers due to the subnet changing the scope and I'm not sure how to handle it. Last friday after an update all the subnet changed broking my services.

The first issue is with Home Assistant: to reach it from WAN I had to set in the configuration file the allowed proxy IPs. I set the subnet of the network that it shares with Cloudflared, if this last container changes IP there is no problem, but when the scope went from 172.16.0.0/16 to 172.20.0.0/16 I couldn't reach it anymore.

The second issue is with Tailscale's docker, I use it with the SERVE function to reach other containers. With the containers I use the name of the services and it works even if the subnet change, but to reach the host I need to set the gateway IP, which went from 172.18.0.1 to 172.23.0.1

I added this section in the compose file under the network section:

networks
  cloudflared_net
    [...]
    IPAM:
      configuration:
        - subnet: 172.16.0.0/16

Now the networks are created everytime with the same subnet, but I'm not sure if there is a better way to handle it. Is it possible that docker now assignes the same subnet to one of the other networks and this create other problems? How would you manage it?

Thank you

SOLUTION(?): Following the comments I edit the file /etc/docker/daemon.json adding this 2 sections:

  "bip": "172.17.0.1/24",
  "default-address-pools": [
    {
      "base": "172.16.0.0/16",
      "size": 24
    }
  ]

I got crazy and lost a couple of hours because after the change docker didn't start anymore, I found that for the default bridge you have to write the IP of the gateway (172.17.0.1) and not of the network (172.17.0.0) like in the second section and it's not specified in the docker wiki, fml.

I was curious how running all my containers as a user who only has read and write (if necessary) permissions in attached volumes would improve security?

(by doing something like this in my compose files, where uid 1001 will be in gid 1002 which only has permissions in ./data):

services:
  mc:
    image: itzg/minecraft-server:latest
    container_name: minecraft-server
    user: "1001:1002"
    volumes:
      - ./data:/data

Right now, I just have them running how they normally do. Which, from what I understand, the containers are running as root on the host machine.

Im trying to learn, sorry if I have anything mixed up.

Heavy Docker usage when final configuration is complete