IBM MQ Container (Commands)

mq.txt

https://github.com/ibm-messaging/mq-container/blob/master/docs/usage.md

Fix Podman admin:
  SET CHLAUTH(DEV.ADMIN.SVRCONN) TYPE(USERMAP) CLNTUSER('admin') MCAUSER(1001) ACTION(REPLACE)

---

http://www.mqseries.net/phpBB/viewtopic.php?t=68135&sid=905fec09d6969f9e0f4d18bfa5665c4d

setmqaut -m QM1 -n SYSTEM.ADMIN.COMMAND.QUEUE -t q -p app -all +inq +put
setmqaut -m QM1 -n SYSTEM.DEFAULT.MODEL.QUEUE -t q -p app -all +get +dsp
setmqaut -m QM1 -t qmgr -p app -all +connect +inq +dsp
setmqaut -m QM1 -n 'DEV.QUEUE.*' -t q -p app -all +inq +dsp

---

CLEAR QLOCAL('DEV.QUEUE.1')
DELETE QLOCAL('DEV.QUEUE.1')
DEFINE QLOCAL('DEV.QUEUE.1') REPLACE

---

https://developer.ibm.com/tutorials/mq-secure-msgs-tls/
https://developer.ibm.com/articles/mq-downloads/ (grab & go archive)

$ mkdir keys && pushd $_
$ openssl req -newkey rsa:2048 -nodes -keyout key.key -x509 -days 365 -out key.crt
$ chmod g+rw key.key # otherwise it can't be read w/ podman
$ # openssl x509 -text -noout -in key.crt
$ runmqakm -keydb -create -db clientkey.kdb -pw [!!pick_a_passw0rd_here!!] -type pkcs12 -stash
$ runmqakm -cert -add -label QM1.cert -db clientkey.kdb -stashed -trust enable -file key.crt
$ popd

$ podman run --rm \
    --env LICENSE=accept \
    --env MQ_APP_PASSWORD=passw0rd \
    --env MQ_QMGR_NAME=QM1 \
    --env MQ_ENABLE_METRICS=true \
    --publish 1414:1414 \
    --publish 9443:9443 \
    --publish 9157:9157 \
    --volume $(pwd)/keys:/etc/mqm/pki/keys/mykey \
    docker.io/ibmcom/mq