scollier

If you choose to use a password, inspired from the start.sh at: https://github.com/jbfink/docker-wordpress/blob/master/start.sh

#let's create a user to ssh into
SSH_USERPASS=`pwgen -c -n -1 8`
mkdir /home/user
useradd -G sudo -d /home/user user
chown user /home/user
echo user:$SSH_USERPASS | chpasswd
echo ssh user password: $SSH_USERPASS

scollier

Private files in docker container

It is sometimes necessary to have files in a container that shouldn't ever end up in an image. These files are generally some form of private key or password that aren't allowed to be distributed. This document details a few usecases for such files and their requirements.

Use Cases

Private keys for packages

scollier

for i in 1 2 3; do
 ls $i
done

scollier

1. Cover Agenda - No slides, all demo
 1. Demo 1: Setting up RHEL Atomic
  a. Getting the qcow2 image from the customer portal
  b. Adding more disk space, fdisk / mkfs.xfs, fstab
  c. subscribe the host with subscription manager, list subs
  d. finish up demo 1 with a "rpm-ostree upgrade" , reboot into a configured environment
 2. Demo 2: Cover a basic httpd server Dockerfile - Non-Systemd
  a. Build the image
  b. run the image
  c. Typical Docker commands: Docker {ps, images, log, etc..}

scollier

*************************************************************
Demo 1: Manual Atomic / Kubernetes Configuration

1. Look at the config files for kubernetes

# rpm -qc kubernetes

2. Look at the binaries for kubernetes

# rpm -ql kubernetes | grep bin

scollier

#!/bin/bash

SIZE="15"
ROOTPASS="password"
OUTPUTDIR="output"
VMEXISTS=$(virsh list --all | grep -i test)

if [ ! -d "$OUTPUTDIR" ]; then
	mkdir ./"$OUTPUTDIR"
fi

scollier

multi-container.json file:

apiVersion: v1beta1
id: multicontainer
desiredState:
  manifest:
    version: v1beta1
    id: multicontainer
    containers:
      - name: mongodb

scollier

test

scollier

Script for container best practices contribution video.

Set up the environment:

Have the chrome browser showing 3 pre-configured tabs: github, asciidoc reference, docker registry showing container.
Open a terminal to a clean Fedora 21 host.


Start covering the material:

scollier

test