Forge Home


Installs, configures, and manages the Docker daemon and Docker containers.


44,144 latest version

4.3 quality score

We run a couple of automated
scans to help you access a
module's quality. Each module is
given a score based on how well
the author has formatted their
code and documentation and
modules are also checked for
malware using VirusTotal.

Please note, the information below
is for guidance only and neither of
these methods should be considered
an endorsement by Puppet.

Version information

  • 2.2.1 (latest)
  • 2.2.0 (deleted)
  • 2.1.0
  • 2.0.0
  • 1.1.0
  • 1.0.2
  • 1.0.1
  • 1.0.0
released Mar 28th 2017
This version is compatible with:
  • Puppet Enterprise 2017.2.x, 2017.1.x, 2016.5.x, 2016.4.x
  • Puppet >= 3.0.0 < 5.0.0
  • , , , , ,
This module has been deprecated by its author since Oct 11th 2017.

The author has suggested puppetlabs-docker as its replacement.

Start using this module


puppetlabs/docker_platform — version 2.2.1 Mar 28th 2017


Table of Contents

  1. Overview
  2. Module Description - What the module does and why it is useful
  3. Setup - The basics of getting started with docker_platform
  4. Usage - Configuration options and additional functionality
  5. Reference - An under-the-hood peek at what the module is doing and how
  6. Limitations - OS compatibility, etc.
  7. Development - Guide for contributing to the module


The Puppet docker_platform module installs, configures, and manages the Docker daemon and Docker containers.


This module lets you use Puppet to implement the Docker container system across a Puppet-managed infrastructure. It includes classes and defines to install the Docker daemon, manage images and containers across different nodesets, and run commands inside containers.


Setup requirements

For Enterprise Linux 7 systems, a few issues might prevent Docker from starting properly. You can learn about these issues in the Known Issues section below.

Beginning with docker_platform

To install Docker on a node, include the class docker.

include 'docker'

This installs Docker from the official repository or alternatively from EPEL on RedHat based distributions.


Installing Docker

You can install Docker with various parameters specified for the docker class:

class {'docker':
  tcp_bind     => 'tcp://',
  socket_bind  => 'unix:///var/run/docker.sock',
  version      => '0.5.5',
  dns          => '',
  docker_users => [ 'user1', 'user2' ],

This example installs Docker version 0.5.5, binds the Docker daemon to a Unix socket and a tcp socket, provides the daemon with a dns server, and adds two users to the Docker group.

Docker recently launched new official repositories which are now the default for the module from version 5. If you want to stick with the old repositories you can do so with the following:

class { 'docker':
  package_name => 'lxc-docker',
  package_source_location => '',
  package_key_source => '',
  package_key => '36A1D7869245C8950F966E92D8576A8BA88D21E',
  package_release => 'docker',

The module also now uses the upstream repositories by default for RHEL based distros, including Fedora. If you want to stick with the distro packages you should use the following:

class { 'docker':
  use_upstream_package_source => false,
  package_name => 'docker',


To install a Docker image, use the define docker::image:

docker::image { 'base': }

This is equivalent to running docker pull base. This downloads a large binary, so on first run, it can take a while. For that reason, this define turns off the default five-minute timeout for exec.

docker::image { 'ubuntu':
  ensure      => 'present',
  image_tag   => 'precise',
  docker_file => '/tmp/Dockerfile',

The above code adds an image from the listed Dockerfile. Alternatively, you can specify an image from a Docker directory, by using docker_dir parameter instead of docker_file.


Now that you have an image, you can run commands within a container managed by Docker:

docker::run { 'helloworld':
  image   => 'base',
  command => '/bin/sh -c "while true; do echo hello world; sleep 1; done"',

You can set ports, expose, env, dns, and volumes with either a single string or, as above, with an array of values.

Specifying pull_on_start pulls the image before each time it is started.

The depends option allows expressing containers that must be started before other containers start. This affects the generation of the init.d/systemd script.

The service file created for systemd and upstart based systems enables automatic restarting of the service on failure by default.

To use an image tag, append the tag name to the image name separated by a semicolon:

docker::run { 'helloworld':
  image   => 'ubuntu:precise',
  command => '/bin/sh -c "while true; do echo hello world; sleep 1; done"',

If using Hiera, there's a docker::run_instance class you can configure, for example:

    image: 'ubuntu:precise'
    command: '/bin/sh -c "while true; do echo hello world; sleep 1; done"'


As of Docker 1.9.x, Docker has official support for networks. The module now exposes a type, docker_network, used to manage those. This works like:

docker_network { 'my-net':
  ensure   => present,
  driver   => 'overlay',
  subnet   => '',
  gateway  => '',
  ip_range => '',

Only the name is required, along with an ensure value. If you don't pass a driver Docker network will use the default bridge. Note that some networks require the Docker daemon to be configured to use them, for instance for the overlay network you'll need a cluster store configured. You can do that on the docker class like so:

extra_parameters => '--cluster-store=<backend>://<port>


Docker Compose allows for describing a set of containers in a simple YAML format, and then running a command to build and run those containers. The docker_compose type included in the module allows for using Puppet to run Compose. This means you can have Puppet remediate any issues and make sure reality matches the model in your Compose file.

Here's an example. Given the following Compose file:

  image: ubuntu:14.04
  command: /bin/sh -c "while true; do echo hello world; sleep 1; done"

That could be added to the machine you're running Puppet using a file resource or any other means.

Then define a docker_compose resource pointing at the Compose file like so:

docker_compose { '/tmp/docker-compose.yml':
  ensure  => present,

Now when Puppet runs it will automatically run Compose is required, for example because the relevant Compose services aren't running.

You can also pass addition options (for example to enable experimental features) as well as provide scaling rules. The following example requests 2 containers be running for example. Puppet will now run Compose if the number of containers for a given service don't match the provided scale values.

docker_compose { '/tmp/docker-compose.yml':
  ensure  => present,
  scale   => {
    'compose_test' => 2,
  options => '--x-networking'

Private registries

By default images will be pushed and pulled from The Docker Hub. If you have your own private registry without authentication, you can fully qualify your image name. If your private registry requires authentication you may configure a registry using the following:

docker::registry { '':
  username => 'user',
  password => 'secret',
  email    => '',

You can logout of a registry if it is no longer required.

docker::registry { '':
  ensure => 'absent',

If using Hiera, there's a docker::registry_auth class you can configure, for example:

    username: 'user1'
    password: 'secret'
    email: ''


You can also run arbitrary commands within the context of a running container:

docker::exec { 'helloworld-uptime':
  detach    => true,
  container => 'helloworld',
  command   => 'uptime',
  tty       => true,

Full Basic Example

To install Docker, download a Ubuntu image, and run a Ubuntu-based container that does nothing except run the init process, you can use the following example manifest:

class { 'docker':}

docker::image { 'ubuntu':
  require => Class['docker'],

docker::run { 'test_1':
  image   => 'ubuntu',
  command => 'init',
  require => Docker::Image['ubuntu'],

Advanced Community Examples

This example contains a fairly simple example using Vagrant to launch a Linux virtual machine, then Puppet to install Docker, build an image and run a container. For added spice, the container runs a ASP.NET vNext application.

Launch multiple containers and connect them together using Nginx, updated by Consul and Puppet.

Build a cluster of hosts running Docker Swarm configured by Puppet.


Full API reference documentation is available as generated by Puppet Strings.

If you would like a local copy of the module documentation simply install Puppet Strings as described in the Strings documentation and then run the followin in the module directory.

puppet strings

This should create a directory called doc with all the HTML files in.



This module is currently supported on:

  • RedHat Enterprise Linux 7.1 x86_64
  • CentOS 7.1 x86_64
  • Oracle Linux 7.1 x86_64
  • Scientific Linux 7.1 x86_64
  • Ubuntu 14.04/16.04 x86_64

Known Issues

Depending on the initial state of your OS, you might run into issues which prevent Docker from starting properly:

Enterprise Linux 7

EL7 (RedHat/CentOS/Oracle/Scientific) requires at least version 1.02.93 of the device-mapper package to be installed for Docker's default configuration to work. That version is only available on EL7.1+.

You can install this package via Puppet using the following manifest:

package {'device-mapper':
  ensure => latest,

To ensure that device-mapper is installed before the docker class is executed, use the before or require metaparameters.


Puppet Labs modules on the Puppet Forge are open projects, and community contributions are essential for keeping them great. We can't access the huge number of platforms and myriad hardware, software, and deployment configurations that Puppet is intended to serve. We want to keep it as easy as possible to contribute changes so that our modules work in your environment. There are a few guidelines that we need contributors to follow so that we can have a chance of keeping on top of things.

For more information, see our module contribution guide.

To see who's already involved, see the list of contributors.


This module is maintained by: Gareth Rushgrove