[Root] Running docker container on Redmi Note 5 Pro

🇹🇼 中文版

It is possibe to run docker containers on Android phone with a custom kernel which enable cgroups and other missing features.

Video

My deivce: Xiaomi Redmi Note 5 (whyred)
Phone OS: Lineage OS 18 (Android 11). Rooted.

You can download my pre-compiled kernel here if you own the device: https://github.com/ivon852/android_kernel_xiaomi_whyred_docker

1. Check if the device supports docker features

The device must be rooted. Install Termux and check if your device supports docker:

1
2
3
4
5
pkg install wget
wget https://raw.githubusercontent.com/moby/moby/master/contrib/check-config.sh
chmod +x check-config.sh
sed -i '1s_.*_#!/data/data/com.termux/files/usr/bin/bash_' check-config.sh
sudo ./check-config.sh

You will see many red “missing”" under “Generally Necessary”. So we must enable them in the following steps.

2. Download and modify the kernel

Xiaomi phone is easy for flashing custom roms. Also there are many third-party kernel for them. Sometimes the code is more reliable than the official ones.

So I choose RAD kernel to begin with.

My computer operating system is Lubuntu 20.04. You may need a Linux VM for compiling the kernel on Windows.

Now, please wathc fossfrog’s guide to learn how to compile a custom kernel:

3. Enable missing features in kernel

Use make menuconfig to launch kconfig Enable all missing features in kernel.
For exaple, to enable CONFIG_OVERLAY_FS, press / in main menu.
Inout the config name, it will tell your where it is.
Use up and down arrow key to move. Press y to enable it.
Then, use right and left key to move to Save. Then move to Exit.
According to FreddieOliveira’s instructions, you also need to modify kernel/Makefile:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
diff --git a/kernel/Makefile b/kernel/Makefile
index d5c1115..2dea801 100644
--- a/kernel/Makefile
+++ b/kernel/Makefile

 $(obj)/configs.o: $(obj)/config_data.h
# config_data.h contains the same information as ikconfig.h but gzipped.
# Info from config_data can be extracted from /proc/config*
targets += config_data.gz
-$(obj)/config_data.gz: arch/arm64/configs/lavender_stock-defconfig FORCE
+$(obj)/config_data.gz: $(KCONFIG_CONFIG) FORCE
    $(call if_changed,gzip)

    filechk_ikconfiggz = (echo "static const char kernel_config_data[] __used = MAGIC_START"; cat $< | scripts/basic/bin2c; echo "MAGIC_END;")

And this net/netfilter/xt_qtaguid.c：

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
--- orig/net/netfilter/xt_qtaguid.c     2020-05-12 12:13:14.000000000 +0300
+++ my/net/netfilter/xt_qtaguid.c       2019-09-15 23:56:45.000000000 +0300


{
        struct proc_iface_stat_fmt_info *p = m->private;
        struct iface_stat *iface_entry;
-       struct rtnl_link_stats64 dev_stats, *stats;
+       struct rtnl_link_stats64 *stats;
        struct rtnl_link_stats64 no_dev_stats = {0};


        current->pid, current->tgid, from_kuid(&init_user_ns, current_fsuid()));
        iface_entry = list_entry(v, struct iface_stat, list);
+       stats = &no_dev_stats;
-       if (iface_entry->active) {
-               stats = dev_get_stats(iface_entry->net_dev,
-                                     &dev_stats);
-       } else {
-               stats = &no_dev_stats;
-       }
        /*
         * If the meaning of the data changes, then update the fmtX
         * string.

Complile the kernel

1
make -j8

Repackage the kerenel into boot.img with Android Image Kitchen. Flash boot.img to the phone.
For Redmi Note 5, run this command after boot:

1
sudo mount -t tmpfs -o uid=0,gid=0,mode=0755 cgroup /sys/fs/cgroup

4. Install docker in Termux

Run Moby’s script again to check if all “Generally Necessary” items are green. Then install docker packages:

1
pkg install root-repo && pkg install docker

Start second Termux session (swipe from left). Start docker daemon。

1
sudo dockerd --iptables=false

Open a new sesson. Pull image hello-world. You shall see a welcome message by docker.

1
sudo docker run hello-world

Now try runngni a Apache container:

1
sudo docker run -d -p 80:80 --name myapache --net=host --dns=8.8.8.8 httpd

Now docker is running on your Android phone.

4. References

This tutorial shows how to run docker natively on Android, without VMs and chroot.