Docker for IBM Cloud frequently asked questions (FAQs)

Estimated reading time: 5 minutes

How do I sign up?

Docker EE for IBM Cloud is an unmanaged, native Docker environment within IBM Cloud that runs Docker Enterprise Edition software. Docker EE for IBM Cloud is available on December 20th 2017 as a closed Beta.

Request access to the beta. Once you do, we’ll be in touch shortly!

What IBM Cloud infrastructure permissions do I need?

To provision the resources that make up a Docker swarm, the account administrator needs to enable certain permissions for users in the IBM Cloud infrastructure customer portal.

You can navigate to user permissions by going to Account > Users > User name > Permissions.

Make sure that you enable the permissions in the following table.

  • The View Only user role does not have any of these enabled by default.
  • The Basic User role has some of these enabled by default. Permissions marked with * designate new permissions that Basic Users need.
  • The Super User role has everything enabled.

Save your setting changes!

Don’t forget to click Set Permissions as you go through the tabs of each permission set so that you don’t lose your settings.

Table 1. The minimum user permissions that are required to provision and manage a Docker EE swarm mode cluster for IBM Cloud.
Permissions set Description Required permissions
Devices Connect to and configure your VSI, load balancers, and firewalls.
  • View hardware detail
  • View virtual server details
  • Hardware firewall
  • Software firewall manage
  • Manage load balancers
  • Manage device monitoring
  • Reboot server and view IPMI system information
  • *Issue OS Reloads and initial rescue kernel
  • Manage port control
Network Provision, connect, and expose IP addresses.
  • *Add compute with public network port
  • View bandwidth statistics
  • Add IP addresses
  • Manage email delivery service
  • *Manage Network VLAN Spanning
Services Provision and manage services such as CDN, DNS records, SSH keys, NFS storage volumes.
  • View CDN bandwidth statistics
  • Vulnerability scanning
  • *Manage CDN account
  • *Manage CDN file transfers
  • View licenses
  • Manage DNS, reverse DNS, and WHOIS
  • Antivirus/spyware
  • Host IDS
  • *Manage SSH keys
  • *Manage storage
  • *View Certificates (SSL)
  • *Manage Certificates (SSL)
Account General settings to provision or remove services and instances.
  • View account summary
  • Manage notification subscribers
  • *Add/upgrade cloud instances
  • *Cancel server
  • *Cancel services
  • *Add server
  • *Add/upgrade services

Which IBM Cloud region and locations (data centers) will this work with?

Docker EE for IBM Cloud is available in the following IBM Cloud regions and locations (data centers).

Region Region Prefix Cities Available locations
Frankfurt region eu-de Frankfurt, Paris fra02, par01
United Kingdom eu-gb London lon04
Sydney au-syd Hong Kong, Sydney hkg02, syd01, syd04
US South ng Dallas, Toronto, Washington DC dal12, dal13, tor01, wdc06, wdc07

Default location

By default, clusters are created in US South, wdc07.

Where are my container logs and metrics?

You must enable logging. See Enabling logging and metric data for your swarm for more information.

Why don’t bx d4ic commands work?

The Docker EE for IBM Cloud CLI plug-in simplifies your interaction with IBM Cloud infrastructure resources. As such, many bx d4ic commands require you to provide your infrastructure account user name and API key credentials as options during the command (--sl-user <> --sl-api-key <api-key>).

Instead of including these in each command, you can set your environment variables.

Why can’t I target an organization or space in IBM Cloud?

Before you can target an organization or space in IBM Cloud, the account owner or administrator must set up the organization or space. See Creating organizations and spaces for more information.

Can I manually change the load balancer configuration?

No. If you make any manual changes to the load balancer, they are removed the next time that the load balancer is updated or swarm changes are made. This is because the swarm service configuration is the source of record for service ports. If you add listeners to the load balancer manually, they could conflict with what is in cluster, and cause issues.

How do I run administrative commands?

SSH into a manager node. Manager nodes are accessed on port 56422.

Tip: Because this port differs from the default (-p 22), you can add an alias to your .profile to make the SSH process simpler:

alias ssh-docker='function __t() { ssh-keygen -R [$1]:56422 > /dev/null 2>&1; ssh -A -p 56422 -o StrictHostKeyChecking=no docker@$1; unset -f __t; }; __t'

Are there any known issues?

Yes. News, updates, and known issues are recorded by version on the Release notes page.

Where do I report problems or bugs?

Contact us through email at

If your stack is misbehaving, please run the following diagnostic tool from one of the managers to collect your docker logs and send them to Docker:

$ docker-diagnose
OK hostname=manager1
OK hostname=worker1
OK hostname=worker2
Done requesting diagnostics.
Your diagnostics session ID is 1234567890-xxxxxxxxxxxxxx
Please provide this session ID to the maintainer debugging your issue.

Note: Your output will be slightly different from the above, depending on your swarm configuration.

ibm faqs