No possibility to expose Docker on TCP port

[Crown0815]

Description

See this discussion: #361 (comment)

It appears that the configuration of the Docker Service prevents overwriting the hosts.

Version

colima version 0.7.5
git commit: 1588c06
limactl version 0.23.2
qemu-img version 9.1.0
Copyright (c) 2003-2024 Fabrice Bellard and the QEMU Project developers

Operating System

• macOS Intel <= 13 (Ventura)
• macOS Intel >= 14 (Sonoma)
• Apple Silicon <= 13 (Ventura)
• Apple Silicon >= 14 (Sonoma)
• Linux

Output of colima status

unable to configure the Docker daemon with file /etc/docker/daemon.json: the following directives are specified both as a flag and in the configuration file: hosts: (from flag: [fd://], from file: [tcp://0.0.0.0:2375 unix:///var/run/docker.sock])

Reproduction Steps

see this comment

Expected behaviour

Start of docker engine with docker deamon exposed through port 2375

Additional context

No response

[andrei-e-random]

Worked for me, at least for now. Not sure what could break later (other than the obvious).

colima ssh
sed -e 3d -e 5s,$,\ -H\ tcp://127.0.0.1:2375, /etc/systemd/system/docker.service.d/docker.conf | sudo tee /etc/systemd/system/docker.service.d/override.conf
sudo systemctl daemon-reload
sudo systemctl restart docker
# test it
# Works from the vm
docker -H tcp://127.0.0.1:2375 info
exit
# Works from host
docker -H tcp://127.0.0.1:2375 info
# Works from a properly ran container
docker run -it --rm --add-host=host.docker.internal:host-gateway -e DOCKER_HOST=tcp://host.docker.internal:2375 docker:dind info

On the test, one should see:

[DEPRECATION NOTICE]: API is accessible on http://127.0.0.1:2375 without encryption.
         Access to the remote API is equivalent to root access on the host. Refer
         to the 'Docker daemon attack surface' section in the documentation for
         more information: https://docs.docker.com/go/attack-surface/
In future versions this will be a hard failure preventing the daemon from starting! Learn more at: https://docs.docker.com/go/api-security/