Skip to content

Deploy with Docker Enterprise

The Enterprise node can run as a Docker container alongside your existing infrastructure, without needing a dedicated VM or hypervisor.

Service limitations

Port scan plugin and some services are not available on Docker deployments. If you need these services, use a VM deployment instead.

Before you start

  • Docker Engine 24+ or Docker Desktop installed
  • Outbound HTTPS access to <domain_id>.trapster.cloud on port 443
  • A valid Enterprise license
  • Registry credentials to pull the Trapster image -- if you do not have these, contact your Trapster account representative

Get the compose file

  1. Open Trapsters → click the + card → Deploy a new Trapster
  2. Click Docker -- the wizard shows a ready-to-use docker-compose.yml pre-filled with your organization's TRAPSTER_DOMAIN and TRAPSTER_CODE
  3. Copy or download the file

See Deployment overview for the full wizard flow.

Deploy

Authenticate with the registry credentials provided by your account representative:

bash
docker login <registry>

Then start the container:

bash
docker compose up -d

The Trapster node boots and connects to your dashboard automatically.

Networking

The compose file does not enforce a specific network mode. Use host networking (network_mode: host) if you want the container to bind service ports directly on the host's IP -- this is the simplest setup and most closely mirrors a VM deployment. Use a bridge network if you need to isolate the container or control port mapping explicitly.

Whichever mode you choose, ensure the Trapster's service ports are reachable from the network segment you want to monitor.

Environment variables

VariableDescription
TRAPSTER_DOMAINYour dashboard domain
TRAPSTER_CODERegistration token used to authenticate the node to your dashboard

These are pre-filled in the compose file from the wizard. Do not share them outside your team.

Accept registration

After the container starts, it appears as a pending device on the Trapsters page. Click Accept to register it, or Reject if you do not recognize it.

See Trapsters: accept registration.

Next steps