Che 7 Air Gap HOW TO

Che 7 Air Gap HOWTO.adoc

Che 7 Air Gap HOW TO

1. Pull all images, push to internal quay/artifactory

```
docker.io/eclipse/che-server:latest (or :nightly: or :7.1.0)

docker.io/eclipse/che-theia-dev:next (or :7.0.0-next)
docker.io/eclipse/che-theia:next (or :latest or :7.1.0)
docker.io/eclipse/che-theia-endpoint-runtime:latest (or :7.1.0)

docker.io/eclipse/che-machine-exec:latest (or :nightly: or :7.1.0)
docker.io/eclipse/che-init-plugin-broker:latest (or :v0.20 or :v0.20.0)
docker.io/eclipse/che-unified-plugin-broker:latest (or :v0.20 or :v0.20.0)

docker.io/eclipse/che-keycloak:latest (or :nightly: or :7.1.0)
docker.io/centos/postgresql-96-centos7:9.6 (or registry.redhat.io/rhscl/postgresql-96-rhel7:1 (or :1-46))

quay.io/eclipse/che-operator:nightly (or :7.1.0)
quay.io/eclipse/che-jwtproxy:nightly (:latest)
quay.io/eclipse/che-devfile-registry:nightly (or :7.1.0)
quay.io/eclipse/che-plugin-registry:nightly (or :7.1.0)

registry.access.redhat.com/ubi8-minimal:8.0 (or :8.0-159) [PVC]

PLUS these (all using tag :next (or :latest or :7.1.0)):

docker.io/eclipse/che-remote-plugin-runner-java8
docker.io/eclipse/che-remote-plugin-runner-java11
docker.io/eclipse/che-remote-plugin-openshift-connector-0.0.17
docker.io/eclipse/che-remote-plugin-openshift-connector-0.0.21
docker.io/eclipse/che-remote-plugin-dependency-analytics-0.0.12
```

ALSO these (future / community supported ones):

```
docker.io/eclipse/che-remote-plugin-php7
docker.io/eclipse/che-remote-plugin-go-1.10.7
docker.io/eclipse/che-remote-plugin-clang-8
docker.io/eclipse/che-remote-plugin-python-3.7.3
docker.io/eclipse/che-remote-plugin-dotnet-2.2.105
```

```
docker.io/eclipse/che-remote-plugin-kubernetes-tooling-0.1.17
docker.io/eclipse/che-remote-plugin-kubernetes-tooling-1.0.0
```

2a. Build fork of che-plugin-registry, pointing at internal URLs for sidecar containers using https://github.com/nickboldt/containers/blob/master/che-plugin-registry-airgap/airgap_build.sh

2b. Or pull pre-built example from https://quay.io/repository/nickboldt/airgap-che-plugin-registry?tab=tags ... use the latest rcquay tag)

3. use chectl to install Che 7 (tested on OCP 3.11 only so far)

4. Start a workspace.

5. In the workspace's console, disable ssl verification so that your company's internal certs don't have to use used to pull from your internal git repos.

   git config --global http.sslVerify false

This assumes you trust your colleagues.

Alternatively, might be a way to load the certs into the workspace pod so it can use them. Even better, a way to load them when creating the pod, so this manual step isn't needed and we can start up a workspace from a devfile, including pulling a project all in one click.

6. Now you can git clone in the workspace.

   git clone https://whatever/you/want.git

7. NOTE: once the project is cloned, you might have to enable proxy to access the outside world (eg., Maven Central)