Secure Docker engine on Azure VM and copy certs to local

01-run-on-azure.ps1

$serverName = 'my.server.region.cloudapp.azure.com'
$externalIP = '1.2.3.4'
$internalIP = '10.0.0.4'

mkdir -p C:\certs\vm\client

docker run --rm `
 -e SERVER_NAME= $serverName `
 -e IP_ADDRESSES=127.0.0.1,$externalIP,$internalIP `
 -v 'C:\ProgramData\docker:C:\ProgramData\docker' `
 -v 'C:\certs\vm\client:C:\Users\ContainerAdministrator\.docker' `
 stefanscherer/dockertls-windows
 
 Restart-Service docker
 
 Enable-PSRemoting -Force
 
 Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False

02-run-local.ps1

$serverName = 'my.server.region.cloudapp.azure.com'

winrm set winrm/config/client '@{TrustedHosts="$serverName"}'

$SourceSession = New-PSSession -ComputerName $serverName -Credential (Get-Credential)

mkdir -p C:\certs\azure-vm 

Copy-Item -FromSession $SourceSession -Path 'C:\certs\vm\client\' -Destination 'C:\certs\azure-vm\' -Recurse