Setting AGENT_HOST to the host's real IP (e.g. 10.40.40.3) causes the agent
to try binding to that specific address inside the container, which fails with
'cannot assign requested address' because the container only has a Docker
bridge interface.
Without AGENT_HOST the agent binds to 0.0.0.0:9001 and Docker's port mapping
(-p 9001:9001) forwards traffic correctly. The TLSSkipVerify on the Portainer
registration already handles the bridge-IP cert mismatch.
Fixes: portainer_agent restart loop on snap-based Docker hosts.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
sam
9fa819a10d