summaryrefslogtreecommitdiff
path: root/docs/configuration/container/index.rst
diff options
context:
space:
mode:
Diffstat (limited to 'docs/configuration/container/index.rst')
-rw-r--r--docs/configuration/container/index.rst56
1 files changed, 45 insertions, 11 deletions
diff --git a/docs/configuration/container/index.rst b/docs/configuration/container/index.rst
index 988b425b..4dacc6f4 100644
--- a/docs/configuration/container/index.rst
+++ b/docs/configuration/container/index.rst
@@ -21,19 +21,43 @@ Configuration
If a registry is not specified, Docker.io will be used as the container
registry unless an alternative registry is specified using
- **set container registry <name>** or the registry is included in the image name
+ **set container registry <name>** or the registry is included
+ in the image name
.. code-block:: none
set container name mysql-server image quay.io/mysql:8.0
+.. cfgcmd:: set container name <name> entrypoint <entrypoint>
+
+ Override the default entrypoint from the image for a container.
+
+.. cfgcmd:: set container name <name> command <command>
+
+ Override the default command from the image for a container.
+
+.. cfgcmd:: set container name <name> arguments <arguments>
+
+ Set the command arguments for a container.
+
+.. cfgcmd:: set container name <name> host-name <hostname>
+
+ Set the host name for a container.
+
+.. cfgcmd:: set container name <name> allow-host-pid
+
+ The container and the host share the same process namespace.
+ This means that processes running on the host are visible inside the
+ container, and processes inside the container are visible on the host.
+
+ The command translates to "--pid host" when the container is created.
+
.. cfgcmd:: set container name <name> allow-host-networks
Allow host networking in a container. The network stack of the container is
not isolated from the host and will use the host IP.
- The following commands translate to "--net host" when the container
- is created
+ The command translates to "--net host" when the container is created.
.. note:: **allow-host-networks** cannot be used with **network**
@@ -47,7 +71,8 @@ Configuration
Optionally set a specific static IPv4 or IPv6 address for the container.
This address must be within the named network prefix.
- .. note:: The first IP in the container network is reserved by the engine and cannot be used
+ .. note:: The first IP in the container network is reserved by the
+ engine and cannot be used
.. cfgcmd:: set container name <name> description <text>
@@ -103,8 +128,10 @@ Configuration
Set the restart behavior of the container.
- **no**: Do not restart containers on exit
- - **on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)
- - **always**: Restart containers when they exit, regardless of status, retrying indefinitely
+ - **on-failure**: Restart containers when they exit with a non-zero
+ exit code, retrying indefinitely (default)
+ - **always**: Restart containers when they exit, regardless of status,
+ retrying indefinitely
.. cfgcmd:: set container name <name> memory <MB>
@@ -122,12 +149,18 @@ Configuration
Set container capabilities or permissions.
- **net-admin**: Network operations (interface, firewall, routing tables)
- - **net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)
+ - **net-bind-service**: Bind a socket to privileged ports
+ (port numbers less than 1024)
- **net-raw**: Permission to create raw network sockets
- **setpcap**: Capability sets (from bounded or inherited set)
- - **sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)
+ - **sys-admin**: Administration operations (quotactl, mount, sethostname,
+ setdomainame)
- **sys-time**: Permission to set system clock
+.. cfgcmd:: set container name <name> label <label> value <value>
+
+ Add metadata label for this container.
+
.. cfgcmd:: set container name <name> disable
Disable a container.
@@ -145,8 +178,8 @@ Container Networks
.. cfgcmd:: set container network <name> prefix <ipv4|ipv6>
- Define IPv4 or IPv6 prefix for a given network name. Only one IPv4 and
- one IPv6 prefix can be used per network name.
+ Define IPv4 and/or IPv6 prefix for a given network name.
+ Both IPv4 and IPv6 can be used in parallel.
.. cfgcmd:: set container network <name> vrf <nme>
@@ -216,7 +249,8 @@ Example Configuration
*********************
For the sake of demonstration, `example #1 in the official documentation
- <https://www.zabbix.com/documentation/current/manual/installation/containers>`_
+ <https://www.zabbix.com/documentation/current/manual/
+ installation/containers>`_
to the declarative VyOS CLI syntax.
.. code-block:: none