r/docker

We moved everything onto long term support base images last year assuming that fewer package updates meant fewer findings. Eighteen months in and the scanners report more than what we started because the pinned versions age and the backports lag behind. Im weighing staying put against moving to something rebuilt far more often. Rebuilding weekly means more churn for a team of five. Anyone gone from LTS bases to a faster rebuild cadence and found it less work overall?

So I know that every service should be on its own network, with grouped services (app & db) on the same network. All good.

I was looking at moving to ipvlans to give my containers their own IPs to make it easier to track traffic in and out. Simple right?

So I created a new network:

docker network create \
  --driver ipvlan \
  --subnet=10.0.0.0/25 \
  --gateway=10.0.0.1 \
  -o parent=enp2s0 \
  -o ipvlan_mode=l3 \
  ipvlan-3

...and some test services worked great. When I went to create a second network:

docker network create \
  --driver ipvlan \
  --subnet=10.0.0.128/28 \
  --gateway=10.0.0.129 \
  -o parent=enp2s0 \
  -o ipvlan_mode=l3 \
  ipvlan-3-librenms

it wouldn't let me as it said the parent was already being used.

How to I achieve multiple networks with the same parent NIC?

Thanks

Does anyone have some good resources to start learning and practicing docker?

Hey everyone,

I’ve been running Docker Swarm with Portainer for a while. While Portainer's agent handles cross-node orchestration well, I’ve never really loved the UI or workflow, and I'm looking for a cleaner alternative.

I recently stumbled across Dockhand and like the UI and feature set, but I’m trying to understand how it handles Swarm setups. Does it actually support native Swarm primitives (services, stacks, replica placement, routing mesh), or does its agent (Hawser) simply manage multiple standalone Docker daemons side-by-side?

If you’ve tested Dockhand with a Swarm cluster, what has your experience been? If it’s strictly standalone multi-host, what modern alternatives are you using for Swarm management (e.g., Swarmpit, Arcane, or sticking with CLI/GitOps)?

Thanks!