Kevin Krummenauer kekru

Enable Docker Remote API with TLS client verification

Docker's Remote API can be secured via TLS and client certificate verification.
First of all you need a few certificates and keys:

CA certificate
Server certificate
Server key
Client certificate
Client key

Create certificate files

Postgres DB with point in time recovery with pitrery

Not yet tested

Usage

This image is based on docker's official postgres image. See here for usage information.
Remove or replace the timezone settings in this Dockerfile with your timezone. Currently "Europe/Berlin" is set.
The pitrery backup directory is /backup.

Simple FTP based backup of a zip file

This script creates a zipfile and uploads it to an FTP server. You can define how many backups should be stored on the server. Older files will be deleted.

Windows CMD Utilities

Search for string in files:

FINDSTR /spin "the string" *
Searches for "the string" in the files of the current and all subdirectories.

Open a webpage that uses the CA with Firefox
Click the lock-icon in the addressbar -> show information -> show certificate
the certificate viewer will open
click details and choose the certificate of the certificate-chain, you want to import to CentOS
click "Export..." and save it as .crt file
Copy the .crt file to /etc/pki/ca-trust/source/anchors on your CentOS machine
run update-ca-trust extract
test it with wget https://thewebsite.org

See here

Please go to Enable Docker Remote API with TLS client verification.

Old content:

docker-auth.js Generate Certs

Troubleshooting

Create box

This is how to install something in a VM and export it as a Vagrant box and use it locally.

First copy the Vagrantfile from below and change the box to the box you want as a base.

Run vagrant up to create the Virtual Machine and vagrant ssh to login.
On Windows you might have to put ssh.exe to your %PATH%. If you have installed git, you can use C:\Program Files\Git\usr\bin You can also login via Putty on host: "localhost", Port "2222", login: "vagrant", password: "vagrant".

	#!/bin/bash
	set -e
	DIR=~/install-docker-client-temp

	mkdir -v --parents $DIR
	#https://get.docker.com/builds/Linux/i386/docker-latest.tgz \| tar xvz --directory $DIR
	curl https://download.docker.com/linux/static/edge/x86_64/docker-17.11.0-ce.tgz \| tar xvz --directory $DIR
	mv -v $DIR/docker/docker /usr/local/bin/docker
	chmod +x /usr/local/bin/docker

	FROM openjdk:8-jre
	RUN echo "Europe/Berlin" > /etc/timezone && dpkg-reconfigure -f noninteractive tzdata
	RUN mkdir /data
	WORKDIR /data
	ADD myapp.jar /data/myapp.jar

	ENV springprofiles="" \
	MAXRAMIFNOLIMIT=4096

	ENTRYPOINT MAXRAM=$(expr `cat /sys/fs/cgroup/memory/memory.limit_in_bytes` / 1024 / 1024) && \

	# LICENSE CDDL 1.0 + GPL 2.0
	#
	# Copyright (c) 1982-2016 Oracle and/or its affiliates. All rights reserved.
	#
	# ORACLE DOCKERFILES PROJECT
	# --------------------------
	# This is the Dockerfile for Oracle Database 11g Release 2 Express Edition
	#
	# REQUIRED FILES TO BUILD THIS IMAGE
	# ----------------------------------