# Allow running Docker inside LXC lxc.aa_profile = unconfined lxc.cap.drop = mac_override sys_time sys_module sys_rawio
Note: this affect security!
/var/lib/docker /var/lib/docker/vfs/dir /var/lib/docker/volumes
docker info
docker pull centos
docker run -d -e VARIABLE=CONTENT -v /sys/fs/cgroup:/sys/fs/cgroup:ro -p 222:22 centos --rm remove after --name INSTANCE_NAME -it interactive
docker ps docker ps -a docker images docker stats {container}
docker inspect {container}
docker attach {container} docker stop {container} docker start {container}
-v /home/user:/home/user:ro -u 500:500