Debian: Remove docker network bridge default
This disables the docker network bridge that is created by default
when no bridge options are provided by docker.service or daemon.json.
Since docker bridge is not used, it can be safely removed.
The docker.service file is provided by package docker.io, i.e.,
dpkg-query -S /lib/systemd/system/docker.service
docker.io: /lib/systemd/system/docker.service
dpkg -s docker.io | grep Version
Version: 20.10.5+dfsg1-1+deb11u1
This file contains the default ExecStart:
[Service]
ExecStart=/usr/sbin/dockerd -H fd:// $DOCKER_OPTS
The ExecStart gets overridden by a Drop-In. The previous default
setting gets wiped out using "ExecStart=", then the value is redefined
with same options and "--bridge=none" appended.
Drop-In: /etc/systemd/system/docker.service.d
└─docker-stx-override.conf
If the network with address 172.17.0.0/16 (or similar network) and it
gateway address is 172.17.0.1, this IP address causes conflict with
docker0 bridge. This results in packet loss between GW and application
pods.
Closes-Bug: 1996916
Test Plan:
PASS: AIO-SX Fresh install ISO. Verify docker bridge not configured.
i.e., 'sudo docker network ls'
PASS: STORAGE: Fresh install ISO. Verify docker bridge not configured.
i.e., 'sudo docker network ls'
Signed-off-by: Jim Gauld <james.gauld@windriver.com>
Change-Id: Ied12dffd3d2894c05bd174ea937ae4bd9a800084
This commit is contained in:
@@ -1,4 +1,6 @@
|
||||
[Service]
|
||||
ExecStart=
|
||||
ExecStart=/usr/sbin/dockerd -H fd:// --bridge=none $DOCKER_OPTS
|
||||
ExecStartPost=/bin/bash -c 'echo $MAINPID > /var/run/dockerd.pid;'
|
||||
ExecStopPost=/bin/rm -f /var/run/dockerd.pid
|
||||
|
||||
|
||||
Reference in New Issue
Block a user