If you repeat the identical command with out the –permanent swap, firewalld will make the change on the fly for you, and you should not have to restart docker. Then remember to reload the firewall for adjustments