Docker on Turris Omnia

Turris Omnia
44

I have docker running in an LXC container with no issues for months now.

I run Hass.io at the LXC container level, which creates it’s own containers, as well as a couple other containers thrown in there (pi-hole, mumble server)

These were my notes from setting it up…

(edit, add lxc network config in case anyone needs it)

Install Docker

  1. Install needed opkg packages on the Turris Omnia host
opkg install kmod-veth
opkg install kmod-ipt-extra
opkg install iptables-mod-extra
  1. Install a new container (I created an arch linux container)
  2. Open up the /srv/lxc/containername/config file for editing
  3. Uncomment the line that enables nesting
# Uncomment the following line to support nesting containers:
lxc.include = /usr/share/lxc/config/nesting.conf
# (Be aware this has security implications)
  1. Configure network to bridge to lan
    (not shown: either set ip static on lxc container OS, or use DHCP)
# Network configuration
lxc.net.0.type = veth
lxc.net.0.link = br-lan
lxc.net.0.flags = up
lxc.net.0.name = eth0
lxc.net.0.hwaddr = 22:11:85:de:f9:fb
  1. Add the following lines to open up access to the host, allowing docker to successfully start
raw.lxc: |-
lxc.mount.auto = cgroup:rw:force
lxc.cgroup.devices.allow = a
security.nesting: "true"
security.privileged: "true"
lxc.cap.drop =

  1. Save and exit the config file

  2. Start the lxc container

lxc-start -n <container_name>
  1. Attach to the console of the lxc container
lxc-attach -n <container_name>
  1. Install docker (arch, so pacman)
pacman -Syu
pacman -S docker
pacman -S lxc
  1. Enable Docker
systemctl enable docker
systemctl start docker

I could turn this into wiki article but I am not sure all of my steps are considered good practices for people to follow. Those LXC configuration changes come with risk.

11 Likes