Debian10 Docker19 CE NFT - ewsdocker/ewsdocker.github.io GitHub Wiki

Installing Docker-CE on Debian 10.6.0 (+) and nftables firewall

Setup

Login as root.

Or su, or sudo -s, or use sudo before restricted commands.

Install additional utilities.

apt-get install apt-transport-https ca-certificates curl gnupg2 wget software-properties-common   

Create the docker group

groupadd docker  

Add users to the docker group.

usermod -aG docker <user>  

Open some required ports in the nftables firewall.

nft add rule ip filter INPUT tcp dport { 1000, 2375, 2376 } accept  
nft list ruleset > /etc/nftables.conf

Install docker-ce package

• The latest stable version of Docker-CE is available from Docker Stable Downloads. Select the processor type (e.g. - amd64), place the mouse over the selected package, right click and select the copy link function;
• Install the latest stable version with the link copied from the above step:
• The url for the newest package at the time of this writing (October 25, 2020) is

docker-ce_19.03.13~3-0~debian-buster_amd64.deb  

Using the url above, the following commands will download and install the selected docker-ce package:

wget https://download.docker.com/linux/debian/dists/buster/pool/stable/amd64/containerd.io_1.3.7-1_amd64.deb
wget https://download.docker.com/linux/debian/dists/buster/pool/stable/amd64/docker-ce-cli_19.03.13~3-0~debian-buster_amd64.deb
wget https://download.docker.com/linux/debian/dists/buster/pool/stable/amd64/docker-ce_19.03.13~3-0~debian-buster_amd64.deb
gdebi containerd.io_1.3.7-1_amd64.deb
gdebi docker-ce-cli_19.03.13~3-0~debian-buster_amd64.deb
gdebi docker-ce_19.03.13~3-0~debian-buster_amd64.deb

Check proper installation

docker run --rm --name=hello hello-world

Enable and start the docker service

systemctl enable docker.service  
systemctl start docker.service  

Reboot

reboot  

Docker should be available to run without root (or sudo) by any user added to the docker group.

If docker fails to start, check that docker.service is running

systemctl status docker.service  

If it is not running, try re-enable/re-start at least once

systemctl enable docker.service  
systemctl start docker.service  

If that does not work, there is something wrong with the installation instructions
(or it was not installed properly).

Check the steps above and pay attention to the system responses.

Cleanup

rm *.deb  
docker rmi hello-world  

Home  <==  BACK      |      NEXT  ==> Debian9-Docker18-UserNs