Docker

The Docker tab manages containers and images on a server that has Docker installed. CloudPilot does not install Docker for you.

Containers#

The container list shows name, image, status, published ports and age, and lets you start, stop, restart and remove them.

Ports is the column worth reading carefully. A container publishing 0.0.0.0:5432 is reachable from the internet, not just from the machine. If that was not deliberate, fix it — see Firewall.

Images#

You can pull an image by repository and tag, and remove images you no longer need.

Pin your tags#

Pulling latest gives you whatever latest means today, which is not necessarily what it meant when you last deployed. Two machines pulling latest a week apart can end up running different software with no record of why.

Use a specific tag — myapp:1.4.2 — so what is running is what you chose.

Logs#

Container logs stream from the same tab, so you do not need a shell to see why a container is restarting.

Deploying as a project#

If you ship your application as a container, create the project with the docker runtime rather than managing the container by hand. You then get deploy history and rollback, which the Docker tab alone does not give you.

Use the Docker tab for containers that are infrastructure rather than releases — things you run alongside your projects.

Permissions#

View, run, pull, update and remove are separate permissions. Someone can be allowed to restart a container without being allowed to delete one. See Roles and permissions.