Arch Linux User Repository

Hello. Many package was putting sysctl file under /usr/lib/sysctl.d/ dir. Please move /etc/sysctl.d/99-docker-rootless.conf to /usr/lib/sysctl.d/99-docker-rootless.conf.

Hi! Do you mind including this files as docker.socket too?

[Unit]
Description=Docker Socket for the API

[Socket]
ListenStream=%t/docker.sock
SocketMode=0660

[Install]
WantedBy=sockets.target

With this file, one can run systemctl --user enable --now docker.socket, and docker will auto-start on demand (like the system docker). %t expands to $XDG_RUNTIME_DIR; this follows upstream's recommended path for the socket, at matches the one on your instructions now).

post_install Setup for docker-rootless-extras

Setup on your userspace, i,e exec this command and following instruction.

  $ dockerd-rootless-setuptool.sh check

systemd Setup for docker-rootless-extras

Start rootless docker with systemd.

  $ systemctl start --user dockerd-rootless.service

To launch the daemon on system startup.

  $ systemctl enable --user dockerd-rootless.service

Exec docker command on docker-rootless-extras

Following this commands.

  $ export DOCKER_HOST=unix:///run/user/1000/docker.sock
  $ docker info

How about including /etc/sysctl.d/99-docker-rootless.conf as part of this package?

Given that it's a hard prerequisite, it make sense to just install it, right?

For people who wants to use docker without adding user to docker group or sudo, which can be useful for development environment, this package might be for you

However there are some steps need to be done to get rootless docker to work after installing this package:

1. configure kernel settings

create /etc/sysctl.d/99-docker-rootless.conf:

kernel.unprivileged_userns_clone=1

and then run: sudo sysctl --system

see https://docs.docker.com/engine/security/rootless/#distribution-specific-hint for detailed information

2. configure subuid and subgid

create /etc/subuid and /etc/subgid with: (for example, testuser is username)

testuser:231072:65536

see https://docs.docker.com/engine/security/userns-remap/#prerequisites for detailed information

3. start and enable user service: systemctl --user status|start|stop docker

4. finally set docker socket environment variable:

export DOCKER_HOST=unix://$XDG_RUNTIME_DIR/docker.sock

you can also add it to ~/.bashrc or somewhere alike

Please read https://docs.docker.com/engine/security/rootless/ for more information

Any possibility of getting overlay2 storage driver for ArchLinux, as there's for Ubuntu/Debian? The vfs driver is almost unusable, it takes an horrid amount of space to construct images, I can't use it at all.

Hi! Can you please rename the package to docker-rootless-bin ? Packages that don't build from source are asked to do so: https://wiki.archlinux.org/index.php/AUR_submission_guidelines

"Packages that use prebuilt deliverables, when the sources are available, must use the -bin suffix. An exception to this is with Java. The AUR should not contain the binary tarball created by makepkg, nor should it contain the filelist."

thank you ef004 for finding this link: https://download.docker.com/linux/static/stable/x86_64/docker-rootless-extras-$pkgver.tgz

I have updated this package and if there's any problem please let me know!

The modified the PKGBUILD slightly to make it work

# Maintainer: PastLeo <chgu82837@gmail.com>
pkgname=docker-rootless
pkgver=19.03.5
pkgrel=1
pkgdesc="Run the Docker daemon as a non-root user (Rootless mode)"
arch=('x86_64')
url="https://docs.docker.com/engine/security/rootless/"
license=('Apache')
depends=('docker')
provides=('docker-rootless')
install=docker-rootless.install
source=(
    "https://download.docker.com/linux/static/stable/x86_64/docker-rootless-extras-$pkgver.tgz"
    "docker.service"
)

md5sums=(
    "7251a34d0fc2d6faf6e0952566779fb5"
    "c5158588c36fc80cf85835258f8cd345"
)

sha256sums=(
    "85fb4012f8c95864b3c0da2308b99ed91c0b65f605ea6d8d2f7eb6f23812f47d"
    "eefe4eaa55184c396f929a2436a22af97130c6e7f8791a79582902dea7c4cd9b"
)

package() {
    mkdir -p "$pkgdir/usr/bin/"
    install -Dm755 "$srcdir/docker-rootless-extras/"* "$pkgdir/usr/bin/"
    install -Dm644 "$srcdir/docker.service" "$pkgdir/usr/lib/systemd/user/docker.service"
}