Struan Bartlett

Hi @kaysond. Thanks for the suggestion. We have considered this, as it would be neat to be able to use docker services to deploy DIND. As you suggest, it's possible...

Hi @kaysond. I've been considering your approach. The problem I see with it, is while bind-mounting `/var/run/docker/netns` (or, more broadly, `/var/run/docker`) will allow the container to access the host network...

Given your show of confidence - thanks for that - I've done some digging myself, and I believe I've worked it out. For a container ``, run: ``` nsenter --net=$(docker...

The POC implementation of a DIND service can now be found at https://github.com/newsnowlabs/docker-ingress-routing-daemon/tree/service-v1. P.S. On further consideration of the automatic detection of node ingress network IPs, any process calling `docker...

Hi @kaysond. I've mostly implemented the outer-wrapper service with autodetection of node IPs, and cross-checking of these IPs against node labels, with no loss of sysctl functionality. I expect to...

Hi @kaysond. I'm pleased to let you know that I've now pushed a more complete implementation to the branch, and a ready-build image to Docker Hub. I'd appreciate you trying...

Thanks so much @kaysond. Given the changes in this branch do not remotely touch the core code, and that the documentation for the new service added to `README` is marked...

Following further testing, I have applied several fixes and improvements to the branch: - fix bug in passing parameters to 'docker service update' that prevented updates to the `dind-global` service...

Hi @kaysond. Thanks ever so much for looking at the branch, and for your thoughtful feedback. > * There seems to be a hole/bug in the iptables rules (probably unrelated...

@paisley Thanks for raising this issue. The process for updating the built-in SSL certificate is supposed to be automated, but obviously something has broken. We'll take a look.