Skip to content

Commit 45e0d3c

Browse files
desktop: hardened-desktop: Document windowsDockerdPort (#17397)
* desktop: hardened-desktop: Document windowsDockerdPort * Update desktop/hardened-desktop/settings-management/configure.md --------- Co-authored-by: Allie Sadler <[email protected]>
1 parent 6dc93e4 commit 45e0d3c

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

desktop/hardened-desktop/settings-management/configure.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,8 @@ The following `admin-settings.json` code and table provides an example of the re
6464
"mode": "system",
6565
"http": "",
6666
"https": "",
67-
"exclude": []
67+
"exclude": [],
68+
"windowsDockerdPort": 65000
6869
},
6970
"enhancedContainerIsolation": {
7071
"locked": true,
@@ -112,7 +113,8 @@ The following `admin-settings.json` code and table provides an example of the re
112113
| `configurationFileVersion` | |Specifies the version of the configuration file format. |
113114
| `exposeDockerAPIOnTCP2375` | <span class="badge badge-info">Windows only</span>| Exposes the Docker API on a specified port. If `value` is set to true, the Docker API is exposed on port 2375. Note: This is unauthenticated and should only be enabled if protected by suitable firewall rules.|
114115
| `proxy` | |If `mode` is set to `system` instead of `manual`, Docker Desktop gets the proxy values from the system and ignores and values set for `http`, `https` and `exclude`. Change `mode` to `manual` to manually configure proxy servers. If the proxy port is custom, specify it in the `http` or `https` property, for example `"https": "http://myotherproxy.com:4321"`. The `exclude` property specifies a comma-separated list of hosts and domains to bypass the proxy. |
115-
| `enhancedContainerIsolation` | | If `value` is set to true, Docker Desktop runs all containers as unprivileged, via the Linux user-namespace, prevents them from modifying sensitive configurations inside the Docker Desktop VM, and uses other advanced techniques to isolate them. For more information, see [Enhanced Container Isolation](../enhanced-container-isolation/index.md).
116+
&nbsp; &nbsp; &nbsp; &nbsp;`windowsDockerdPort` | <span class="badge badge-info">Windows only</span> | Exposes Docker Desktop's internal proxy locally on this port for the Windows Docker daemon to connect to. If it is set to 0, a random free port is chosen. If the value is greather than 0, use that exact value for the port. The default value is -1 which disables the option. Note: This is available for Windows containers only. |
117+
| `enhancedContainerIsolation` | | If `value` is set to true, Docker Desktop runs all containers as unprivileged, via the Linux user-namespace, prevents them from modifying sensitive configurations inside the Docker Desktop VM, and uses other advanced techniques to isolate them. For more information, see [Enhanced Container Isolation](../enhanced-container-isolation/index.md).|
116118
| `linuxVM` | |Parameters and settings related to Linux VM options - grouped together here for convenience. |
117119
| &nbsp; &nbsp; &nbsp; &nbsp;`wslEngineEnabled` | <span class="badge badge-info">Windows only</span> | If `value` is set to true, Docker Desktop uses the WSL 2 based engine. This overrides anything that may have been set at installation using the `--backend=<backend name>` flag.
118120
| &nbsp;&nbsp; &nbsp; &nbsp;`dockerDaemonOptions`| |If `value` is set to true, it overrides the options in the Docker Engine config file. See the [Docker Engine reference](/engine/reference/commandline/dockerd/#daemon-configuration-file). Note that for added security, a few of the config attributes may be overridden when Enhanced Container Isolation is enabled. |

0 commit comments

Comments
 (0)