Get Docker EE for for SLES¶

Firewall configuration¶

Docker creates a DOCKER iptables chain when it starts. The SUSE firewall may block access to this chain, which can prevent you from running containers with published ports. You may see errors such as the following:

WARNING: IPv4 forwarding is disabled. Networking will not work.
docker: Error response from daemon: driver failed programming external
        connectivity on endpoint adoring_ptolemy
        (0bb5fa80bc476f8a0d343973929bb3b7c039fc6d7cd30817e837bc2a511fce97):
        (iptables failed: iptables --wait -t nat -A DOCKER -p tcp -d 0/0 --dport 80 -j DNAT --to-destination 172.17.0.2:80 ! -i docker0: iptables: No chain/target/match by that name.
 (exit status 1)).

If you see errors like this, adjust the start-up script order so that the firewall is started before Docker, and Docker stops before the firewall stops. See the SLES documentation on init script order.

Set up the repository¶

1. Temporarily add the $DOCKER_EE_BASE_URL and $DOCKER_EE_URL variables into your environment. This only persists until you log out of the session. Replace <DOCKER-EE-URL> listed below with the URL you noted down in the prerequisites.

   $ DOCKER_EE_BASE_URL="<DOCKER-EE-URL>"
   $ DOCKER_EE_URL="${DOCKER_EE_BASE_URL}/sles/<SLES_VERSION>/<ARCH>/stable-<DOCKER_VERSION>"
   

   Where:

   • DOCKER-EE-URL is the URL from your Docker Hub subscription.
   • ARCHITECTURE is x86_64, s390x, or ppc64le.
   • ERSION is 18.09

   As an example, your command should look like:

   DOCKER_EE_BASE_URL="https://storebits.docker.com/ee/sles/sub-555-55-555"
   

2. Use the following command to set up the stable repository. Use the command as-is. It works because of the variable you set in the previous step.

   $ sudo zypper addrepo $DOCKER_EE_URL docker-ee-stable
   

3. Import the GPG key from the repository. Replace <DOCKER-EE-URL> with the URL you noted down in the prerequisites.

   $ sudo rpm --import "${DOCKER_EE_BASE_URL}/sles/gpg"
   

Install Docker EE¶

1. Update the zypper package index.

   $ sudo zypper refresh
   

   If this is the first time you have refreshed the package index since adding the Docker repositories, you are prompted to accept the GPG key, and the key’s fingerprint is shown. Verify that the fingerprint matches 77FE DA13 1A83 1D29 A418  D3E8 99E5 FF2E 7668 2BC9 and if so, accept the key.

2. Install the latest version of Docker EE and containerd, or go to the next step to install a specific version.

   $ sudo zypper install docker-ee docker-ee-cli containerd.io
   

   Start Docker.

   $ sudo service docker start
   

3. On production systems, you should install a specific version of Docker EE instead of always using the latest. List the available versions. The following example only lists binary packages and is truncated. To also list source packages, omit the -t package flag from the command.

   $ zypper search -s --match-exact -t package docker-ee
   
     Loading repository data...
     Reading installed packages...
   
     S | Name          | Type    | Version  | Arch   | Repository
     --+---------------+---------+----------+--------+---------------
       | docker-ee     | package | 19.03-1  | x86_64 | docker-ee-stable
   

   The contents of the list depend upon which repositories you have enabled. Choose a specific version to install. The third column is the version string. The fifth column is the repository name, which indicates which repository the package is from and by extension its stability level. To install a specific version, append the version string to the package name and separate them by a hyphen (-):

   $ sudo zypper install docker-ee-<VERSION_STRING> docker-ee-cli-<VERSION_STRING> containerd.io
   

   Docker is installed but not started. The docker group is created, but no users are added to the group.

4. Configure Docker to use the Btrfs filesystem. This is only required if the ``/`` filesystem is not using BTRFS. However, explicitly specifying the storage-driver has no harmful side effects.

   Edit the file /etc/docker/daemon.json (create it if it does not exist) and add the following contents:

   {
     "storage-driver": "btrfs"
   }
   

   Save and close the file.

5. Start Docker.

   $ sudo service docker start
   

6. Verify that Docker is installed correctly by running the hello-world image.

   $ sudo docker run hello-world
   

   This command downloads a test image and runs it in a container. When the container runs, it prints an informational message and exits.

Docker EE is installed and running. You need to use sudo to run Docker commands.

Upgrade Docker EE¶

To upgrade Docker EE:

1. If upgrading to a new major Docker EE version (such as when going from Docker 18.03.x to Docker 18.09.x), add the new repository.
2. Run sudo zypper refresh.
3. Follow the installation instructions, choosing the new version you want to install.

Upgrade Docker EE¶

To upgrade Docker EE, download the newer package file and repeat the installation procedure, using zypper update instead of zypper install, and pointing to the new file.