# Docker-in-docker is enabled

This container runs its own Docker daemon, so `docker`, `docker compose` and
`docker buildx` work here. It is a separate daemon from the user's host Docker:

- The host's containers, images, volumes and networks are not visible. Do not
  try to inspect or control the user's host containers; ask them as usual.
- Images and containers you create live inside this container and vanish when
  the session ends. Anything that must persist belongs in the project (a
  Dockerfile, `compose.yml`) or must be pushed by the user from the host.
- Bind mounts resolve against this container's filesystem. The project is
  mounted at the same path as on the host, so `-v "$PWD:..."` works as expected.
- Published ports (`-p 8080:80`) are reachable at this container's `localhost`,
  not the user's host `localhost`.
- No registry credentials are configured. Public pulls work; for private
  registries or pushes, ask the user.
- Daemon logs are in `/var/log/dockerd.log` if docker misbehaves.