This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
# Generate self-cert certificates for Docker socket. I have tried many tutorials including http://tech.paulcz.net/2016/01/secure-docker-with-tls/ | |
# None worked... So I took the official steps from Docker docs - https://docs.docker.com/engine/security/https/ and placed them | |
# in a script. Please ensure that you replace the IP addresses/DNS names denoted in X with IP's and hostnames you wish to allow | |
# to connect with your daemon, normally 127.0.0.1 is always required and the hostname of your server. If you have a coreos cluster | |
# placing IP's and hostnames of each node maybe preferable over creating unique certs for each node. | |
# This script does not cover the steps for copying your certs to the relevant locations, as per the following document - https://docs.docker.com/engine/security/https/ | |
# 1. In our production setup we copy server.key, server-cert.pem and ca-cert.pem to /etc/docker/ssl | |
# 2. Client certs(ca.pem,cert.pem,key.pem) are copied to user dir in our case user core - /home/core/.docker/ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
env: | |
TERM: xterm-256color | |
window: | |
dimensions: | |
columns: 80 | |
lines: 24 | |
padding: | |
x: 2 |