Scott Collier scollier

Private files in docker container

It is sometimes necessary to have files in a container that shouldn't ever end up in an image. These files are generally some form of private key or password that aren't allowed to be distributed. This document details a few usecases for such files and their requirements.

	multi-container.json file:

	apiVersion: v1beta1
	id: multicontainer
	desiredState:
	manifest:
	version: v1beta1
	id: multicontainer
	containers:
	- name: mongodb

	#!/bin/bash

	SIZE="15"
	ROOTPASS="password"
	OUTPUTDIR="output"
	VMEXISTS=$(virsh list --all \| grep -i test)

	if [ ! -d "$OUTPUTDIR" ]; then
	mkdir ./"$OUTPUTDIR"
	fi

	*************************************************************
	Demo 1: Manual Atomic / Kubernetes Configuration

	1. Look at the config files for kubernetes

	# rpm -qc kubernetes

	2. Look at the binaries for kubernetes

	# rpm -ql kubernetes \| grep bin

	1. Cover Agenda - No slides, all demo
	1. Demo 1: Setting up RHEL Atomic
	a. Getting the qcow2 image from the customer portal
	b. Adding more disk space, fdisk / mkfs.xfs, fstab
	c. subscribe the host with subscription manager, list subs
	d. finish up demo 1 with a "rpm-ostree upgrade" , reboot into a configured environment
	2. Demo 2: Cover a basic httpd server Dockerfile - Non-Systemd
	a. Build the image
	b. run the image
	c. Typical Docker commands: Docker {ps, images, log, etc..}

	If you choose to use a password, inspired from the start.sh at: https://github.com/jbfink/docker-wordpress/blob/master/start.sh

	#let's create a user to ssh into
	SSH_USERPASS=`pwgen -c -n -1 8`
	mkdir /home/user
	useradd -G sudo -d /home/user user
	chown user /home/user
	echo user:$SSH_USERPASS \| chpasswd
	echo ssh user password: $SSH_USERPASS

Scott Collier scollier

Private files in docker container

Use Cases

Private keys for packages

	for i in 1 2 3; do
	ls $i
	done