Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run Scan×
Skip to content
World desk9 min

Run a Minecraft Bedrock Server in Docker With itzg and Backups

A practical guide to running Minecraft Bedrock Dedicated Server with itzg in Docker: Compose configuration, persistent /data storage, BDS 1.26.50+ ports, upgrades, access controls and restore-tested backups.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The dependable way to run a Minecraft Bedrock Dedicated Server (BDS) in Docker is to use itzg/minecraft-bedrock-server, accept the EULA, persist /data on a host directory or named volume, and manage the container with Docker Compose. For BDS 1.26.50 and newer, the image’s current NetherNet example publishes TCP port 19132 and UDP ports 19140-19155. A persistent /data mount keeps worlds and configuration when the container is recreated; a separate, tested backup process protects that data from host or operator mistakes.

What the itzg Bedrock image does

itzg/minecraft-bedrock-server is a container wrapper around Mojang’s Bedrock server software. The BDS package is not embedded in the Docker image. At startup, the container downloads or upgrades the server software from Mojang, then launches it with settings generated from environment variables and files in /data. Consequently, an image update and a Mojang server release are separate events: restarting the same image can still install a newer BDS release when VERSION=LATEST.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The container will not start the game server until you set EULA=TRUE. The /data directory is the important state boundary. It contains the expanded server, server.properties, worlds, allow-list data and other runtime files. Mounting it to storage outside the writable container layer is what lets you replace, upgrade or recreate the container without losing the world.

Requirements before you deploy

  • A Linux, Windows or macOS machine with Docker Engine and the Compose plugin (the command is docker compose).
  • Enough disk space for the Bedrock package, logs and your worlds. The official material does not publish a universal storage estimate, so monitor the mounted filesystem rather than relying on a fixed number.
  • A fixed LAN address or a known public address for the Docker host if players will connect from other devices.
  • Router and host-firewall access for the transport and ports required by the BDS version you select.
  • A backup destination that is not the same disk as the live world if you need protection from disk failure.

Create a project directory and keep the Compose file and the data directory together when using a bind mount:

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
mkdir -p ~/bedrock-server/data
cd ~/bedrock-server

Recommended Docker Compose deployment

For BDS 1.26.50 and later, the official itzg example uses NetherNet. Replace 192.168.1.10 below with the Docker host’s LAN or public address as appropriate for your network.

services:
  bds:
    image: itzg/minecraft-bedrock-server
    environment:
      EULA: "TRUE"
      SERVER_UDP_PORTS: "192.168.1.10:19140-19155:19140-19155"
      GAMEMODE: survival
      DIFFICULTY: normal
    ports:
      - "19132:19132/tcp"
      - "19140-19155:19140-19155/udp"
    volumes:
      - ./data:/data
    stdin_open: true
    tty: true

Save this as compose.yaml. The host-side path ./data is relative to the directory containing that file. A named volume is also valid, but non-root operation can require you to create the volume first and set its ownership to the UID/GID used by the container. A bind mount makes inspection and copying straightforward.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Start and observe the server

  1. From the project directory, run docker compose up -d.
  2. Follow startup and download messages with docker compose logs -f. The first run can take longer because the BDS package is fetched from Mojang.
  3. Wait for the log to indicate that the server is ready before testing a client connection.
  4. Stop it cleanly with docker compose down. This removes the container but leaves ./data intact. Start it again with docker compose up -d.

Do not use docker compose down -v with a named volume unless you intentionally want Docker to delete that volume. A bind-mounted directory is not removed by Compose, but it can still be deleted manually, so protect it with filesystem permissions and backups.

Ports and NetherNet transport

In the current README, BDS 1.26.50 and newer use NetherNet by default. The example maps TCP 19132 for the initial connection and UDP 19140-19155 for gameplay. The SERVER_UDP_PORTS value tells the image how the host address and UDP range correspond to the container range; it must match the address players use to reach the Docker host.

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Mapping Purpose in the current example Protocol
19132:19132 Initial Bedrock connection TCP
19140-19155:19140-19155 NetherNet gameplay range UDP

Open only the ports required by the transport used by your BDS release. If you run another BDS version or choose another transport, follow that version’s image instructions rather than assuming the NetherNet range applies. Publishing a port in Compose does not open a router or operating-system firewall automatically. For internet access, forward the same external ports at the router and permit them on the host firewall.

Persisting worlds and configuration

The /data mount is what survives container replacement. At minimum, it should contain the worlds directory and configuration files such as server.properties. Never rely on data written only inside the container’s writable layer: docker compose down, a manual container removal, or a redeployment can discard it.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Bind mount versus named volume

Choice Advantages Operational cautions
./data:/data Easy to inspect, copy, checksum and send to another host; naturally included in filesystem backup jobs. The host path must have permissions compatible with the container process, and accidental edits can change live configuration.
Named volume Docker manages the storage location and Compose keeps the declaration portable. Backups require a volume-aware procedure; pre-create and chown the volume when running as a non-root UID/GID.

Change settings in compose.yaml and recreate or restart through Compose. Editing files inside a running container makes the change harder to reproduce and can be lost during replacement.

Configure gameplay with environment variables

The image translates supported environment variables into Bedrock server properties. Common controls include:

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Variable Effect Example
GAMEMODE Default game mode for the world. survival
DIFFICULTY World difficulty. normal
LEVEL_NAME World or level name used by the server. family-world
MAX_PLAYERS Connection limit configured in server properties. 10
ONLINE_MODE Whether Bedrock account authentication is required. true
VIEW_DISTANCE View distance setting. 32
TICK_DISTANCE Simulation tick distance. 4

Permission and access controls are separate from basic gameplay settings. OPS, MEMBERS and VISITORS accept player identifiers. Private servers can use ALLOW_LIST and ALLOW_LIST_USERS, or maintain allowlist.json in /data. Verify the exact syntax supported by the image version before deploying a change.

Run commands without entering the console

The image includes a send-command helper. Replace the placeholder with the Compose container name or ID:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
docker exec CONTAINER_NAME_OR_ID send-command gamerule dofiretick false

The command’s output appears in the container logs. This is useful for one-off administration while keeping the declarative configuration in Compose.

Choose a version and upgrade safely

VERSION=LATEST is the default. On each container startup, the image checks for a newer Bedrock release and downloads it when available. VERSION=PREVIEW selects the latest preview; a specific version can be pinned when you need reproducible deployments or must avoid a temporary compatibility problem.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
  1. Decide whether this server should track the latest release, preview builds or a pinned version.
  2. Set or change VERSION in compose.yaml, not only inside the running container.
  3. Stop or restart with Compose so the existing /data mount is reused.
  4. Before an upgrade, copy /data and confirm that the backup can be read.
  5. Start the service and inspect docker compose logs -f for download, migration or world-loading errors.
  6. If the new release causes a problem, stop the service, restore the previous data copy if necessary, pin the known-good BDS version, and start again.

Because the server software is downloaded only at startup, changing an image tag alone does not install a new BDS package until the container is restarted.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Back up an itzg Bedrock server

A useful backup captures the complete mounted /data tree, not just the Docker image. The worlds directory is essential, but configuration, permissions and allow-list files are needed to reproduce the server accurately. The official material does not publish a tested recovery time, recommended frequency, retention schedule or disaster-recovery benchmark, so choose those values for your world and document them.

Manual filesystem backup with a bind mount

For a short maintenance window, stop the server so files are quiescent, archive the directory, then start it again:

cd ~/bedrock-server
docker compose stop
tar -czf bedrock-data-$(date +%Y-%m-%d-%H%M).tar.gz data/
docker compose start

Store the archive on another disk or host. A local archive on the same disk protects against accidental deletion but not disk failure, theft or filesystem corruption. Check that the archive can be listed with tar -tzf; a backup that has never been read is not a verified restore point.

Named-volume backup

For a named volume, stop the service and use a temporary container to stream the volume into an archive on the host. The volume name shown by docker volume ls must replace BEDROCK_VOLUME:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
docker compose stop
docker run --rm -v BEDROCK_VOLUME:/data:ro -v "$PWD":/backup alpine tar -czf /backup/bedrock-data.tar.gz -C /data .
docker compose start

Test the resulting archive before relying on it. The image documentation mentions kaiede/minecraft-bedrock-backup as a separate backup component, but it does not define a complete retention, destination or restore policy for that component. Treat it as an optional tool that requires independent configuration review, not as automatic disaster recovery.

Restore procedure

  1. Stop the BDS service with docker compose stop.
  2. Move the damaged or unwanted data directory aside instead of deleting it immediately.
  3. Extract the verified archive into a new empty directory, preserving the worlds tree and configuration files.
  4. Fix ownership and permissions if the container runs as a non-root user.
  5. Point the Compose volume at the restored directory and run docker compose up -d.
  6. Watch the logs, connect with a test account, and confirm the expected world, players and settings before reopening access.

Security and access controls

  • Use an allow-list for private servers and grant operator, member and visitor permissions deliberately.
  • Publish only the TCP and UDP ports required by your selected BDS transport.
  • Apply firewall rules on the Docker host and, for internet servers, on the router. The image does not provide host firewalling.
  • Keep the Compose file and backups readable only by administrators; they can reveal server settings and world data.
  • Do not treat ONLINE_MODE or an allow-list as a replacement for network-layer controls.

The image does not claim to provide a tested internet-hardening profile. Authentication, firewalling, rate limiting and monitoring remain responsibilities of the host and surrounding network.

Docker Compose or a one-off docker run?

Concern Compose One-off docker run
Repeatability Environment, ports and mounts live in a reviewable file. Options are embedded in shell history and are easier to omit on recreation.
Upgrades Change VERSION or another variable, then restart the same service. You must reconstruct the full command accurately.
Storage Volume declaration is explicit and reusable. Mount flags must be repeated every time.
Logs and lifecycle docker compose logs, up, stop and down provide a consistent workflow. Container names and flags vary between manual invocations.
Rollback Pin a known-good version and restore a matching data copy from the file. Rollback depends on remembering the previous command and image settings.

The itzg documentation recommends a management layer such as Docker Compose or Kubernetes for long-running servers because it supports incremental reconfiguration and image upgrades.

Troubleshooting checklist

The container exits immediately

  • Check docker compose logs for an EULA error and confirm the value is exactly TRUE.
  • Verify that the host can reach Mojang’s download service; the BDS package is fetched at startup.
  • Inspect the mounted directory permissions, especially when using a named volume or a non-root UID/GID.

Players cannot connect

  • Confirm the client and server use compatible BDS versions.
  • Check that TCP 19132 and the required UDP range are published, allowed by the host firewall and forwarded by the router.
  • Verify that SERVER_UDP_PORTS contains the address players actually use, not an outdated LAN address.
  • For releases or transports other than the current NetherNet example, apply the port instructions for that version.

The world disappeared after recreation

  • Inspect the Compose volume declaration and confirm it still points to the original host directory or named volume.
  • Look for the worlds directory under the mounted /data path.
  • Do not run commands that remove volumes unless deletion is intentional; restore from a verified archive if the data was removed.

A setting did not change

  • Confirm the variable name and value in compose.yaml.
  • Recreate or restart the service so the image regenerates the relevant server property.
  • Check whether a manually edited file in /data overrides the generated value, and keep the desired setting in one authoritative place.

Operational checklist

  • Keep EULA=TRUE and all gameplay settings in version-controlled Compose configuration.
  • Persist /data outside the container layer.
  • Choose LATEST, PREVIEW or a pinned VERSION deliberately.
  • Back up the entire data tree before upgrades and verify archives by reading or test-restoring them.
  • Store at least one copy off the Docker host.
  • Document the exact restore steps and the network ports for your BDS version.
  • Review logs after every startup and version change.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.