Was setting `ipvlan`, since home router didn't support `macvlan`, and only started working when I noticed elsewhere that I needed to add the `-o parent=eth0` for `ipvlan` setup as it was set for `macvlan`.
* Firewalld integration
Added a section mentioning the firewalld integration
and added notes on handling issues we've seen in the
community
Relates to https://github.com/docker/for-linux/issues/1163
Signed-off-by: Arko Dasgupta <arko.dasgupta@docker.com>
* Update network/iptables.md
Co-authored-by: Usha Mandya <47779042+usha-mandya@users.noreply.github.com>
* Minor style edits
Co-authored-by: Usha Mandya <47779042+usha-mandya@users.noreply.github.com>
The `ENV key value` form can be ambiguous, for example, the following defines
a single env-variable (`ONE`) with value `"TWO= THREE=world"`:
ENV ONE TWO= THREE=world
While we cannot deprecate/remove that syntax (as it would break existing
Dockerfiles), we should reduce exposure of the format in our examples.
Also updating some code-blocks that were missing language-hints
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* Update Networking overview file
I feel it's better to change the current title (which is just ["Overview"](https://docs.docker.com/network/)) to "Networking"
This will add more meaning and also be more consistent with other overview pages such as [Orchestration](https://docs.docker.com/get-started/orchestration/) and [Develop with Docker](https://docs.docker.com/develop/)
* Updated the title to match the toc entry
Co-authored-by: Usha Mandya <47779042+usha-mandya@users.noreply.github.com>
* Fix incorrect links in compose section
there's a bug causing wrapped links to not work, and replacing
some links to point to the .md file, so that IDE's can check
if the anchors are valid. Also replaced some links to point
to their new location.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* engine/swarm: update links
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* Fix various broken links
There's a bug in the "jekyll-relative-links" plugin that causes wrapped links to not work.
Also replacing some links to point to the .md file, so that IDE's can check if the anchors
are valid. Finally, replaced some links to point to their new locations, so that users don't
get redirected..
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* Remove incorrect difference between user-defined and default bridge
This PR removes the first bullet point from the list differences between user-defined bridge networks and the default bridge network:
[User-defined bridges provide better isolation and interoperability between containerized applications](https://docs.docker.com/network/bridge/#differences-between-user-defined-bridges-and-the-default-bridge).
The default bridge network, similar to user-defined bridges, opens all ports to other containers and allows for inter-container communication by default. This is elaborated and demonstrated in #8973. Other relevant issue: #8437.
* Remove mention of previous bullet point
* Added isolation advantage of user-defined over default network
* Move classic overlay networking topic to swarm standalone section
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* Redirect old "getting started with overlay networks" to current page
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* improve description of iptables design, add notes about securing Docker hosts
* fix typo
* simplify a sentence
* fix chain name
* more minor changes
* add notes about the FORWARD chain policy
* shorten section on --ip
* rephrase section title
Running:
```
$ docker swarm --join --token <TOKEN> \
--advertise-addr <IP-ADDRESS-OF-WORKER-1> \
<IP-ADDRESS-OF-MANAGER>:2377
```
throws the following error
```
unknown flag: --join
See 'docker swarm --help'.
Usage: docker swarm COMMAND
Manage Swarm
Commands:
ca Display and rotate the root CA
init Initialize a swarm
join Join a swarm as a node and/or manager
join-token Manage join tokens
leave Leave the swarm
unlock Unlock swarm
unlock-key Manage the unlock key
update Update the swarm
Run 'docker swarm COMMAND --help' for more information on a command.
```
The command in the PR returns
```
This node joined a swarm as a worker.
```
In the tutorial, you connect to alpine1 (ONE!), do some stuff, can't ping alpine2 and I guess the author was confused at this point because immediately after not being able to ping alpine2 comes detaching from the one you're connected to and that's alpine1.
1. Be more specific about what happens when constraints aren't satified.
2. There is no `--global`. Also addressed in network/overlay.md.
3. Label constraints do not match node labels without `node.label` prefix.
AFAIK neither 2 nor 3 have ever been correct
testedon: 17.06.2-ee-16