CargOS

# Allow running Docker inside LXC
lxc.aa_profile = unconfined
lxc.cap.drop = mac_override sys_time sys_module sys_rawio

Note: this affect security!

/var/lib/docker
/var/lib/docker/vfs/dir
/var/lib/docker/volumes

docker info

docker pull centos

docker run -d -e VARIABLE=CONTENT -v /sys/fs/cgroup:/sys/fs/cgroup:ro -p 222:22 centos
--rm remove after
--name INSTANCE_NAME
-it interactive

docker ps
docker ps -a
docker images
docker stats {container}

docker inspect {container}

docker attach {container}
docker stop {container}
docker start {container}

-v /home/user:/home/user:ro -u 500:500