pdonorio

Container security notes

Internet references

Kernel and architecture

• namespaces - overview of Linux namespaces http://man7.org/linux/man-pages/man7/namespaces.7.html

• mount_namespaces - overview of Linux mount namespaces

pdonorio

pdonorio

###############
## BEFORE
# add '127.0.0.1 dev.domain.io' to your /etc/hosts
## CLEAN
# docker-compose down -v && rm -rf data images
###############

version: '3'
services:

pdonorio

How easy is to quick test and prototype

Nowadays docker compose is getting life so much easy for developers.

Let's say I want to quickly test some python code on elasticsearch... I just need to have a compose file like the one below, and then from the same directory:

docker-compose up -d

pdonorio

FROM ubuntu:16.04
# LTS
MAINTAINER "Paolo D'Onorio De Meo"

# Preparation
RUN apt-get update -qq && apt-get install -y \
        ## normal base
        wget git vim expect lsof sudo \
        ## fix adding irods to source list

pdonorio

EPOS b2safe

Download the repo

git clone https://github.com/EUDAT-B2STAGE/http-api.git myb2safe
cd myb2safe && git checkout b2safe_development

STEP 1: prepare sql

• change passwords IRODS_PASSWORD and ALCHEMY_PASSWORD in projects/b2safe/project_configuration.yaml

pdonorio

B2SAFE <-> B2ACCESS certificates issue

Reproducing the issue with the dockerized environment of the HTTP-API, using the 'debug' mode.

A simple guide step-by-step.

pdonorio

Since iRODS uses thread locks I tried overriding the original session class to make it possible.

Test it with:

import pickle
import base64

original_session = iRODSPickleSession(...)

pdonorio

Simple and lightweight python process LOCK

Use a lock across python processes or threads.

Based on sqlite/sqlalchemy implementation. Tested on python 3.4+.

To see how it works launch process.py multiple times.

pdonorio

FROM jupyter/datascience-notebook  # <-- use a jupyter image here
MAINTAINER "Paolo D'Onorio De Meo <p.donoriodemeo@gmail.com>"

# Python 3.6 virtualenv
ENV PY36 Python3.6
RUN conda create -y -n $PY36 python=3.6.1 \
    && conda clean -y --all
RUN /bin/bash -c "source activate $PY36 && pip install mypy ipython ipykernel version_information"