Cerca
Heus ací els resultats de la cerca.
Noms de pàgina coincidents:
Resultats de text complet:
- DOCKER
- ker:docker-compose:start]] * [[tech:docker:volumes]] * [[tech:docker:security]] * [[tech:docker:... DkKs29etRis]] * Health Check: [[https://atareao.es/podcast/tu-contenedor-docker-podria-estar-muerto-y-tu-sin-enterarte/]] * [[https://tech.paulcz.net... ttps://docs.docker.com/compose/compose-file/#volumes]] === casos de uso * [[tech:docker:docker-comp
- docker-compose @tech:docker:docker-compose
- se up -d --scale <SERVICIO>=<NUM_CONT></code> === estado servicio <code bash> docker compose ps docker... de bash> # reiniciar sin cambios: docker compose restart [nombre_del_servicio] # reconstruir si detecta cambios (y reiniciar servicios dependientes si no estan en marcha) docker compose up -d [nombre_del_servicio] # reconstruir forzando docker compo
- docker volumes
- = docker volumes /via: [[https://docs.docker.com/storage/volumes/]] {{ :tech:docker:pasted:20200327-151948.png }} * bind mount: montaje clásico con ''-v'' sobre una estructura de directorios * tmpfs mount: almacenar data no persistente * volume: * gestionado desde cli docker * trasversal al OS
- docker-compose casos de uso @tech:docker:docker-compose
- de yaml docker-compose.yml> version: '3.9' services: db: image: mariadb ports: - "3306:3306" volumes: - ./data/db:/var/lib/mysql env_file: ... name: mariadb adminer: image: adminer restart: unless-stopped ports: - 8080:8080 </code> <code properties db.env> MYSQL_ROOT_PASSWO
- dockerd remote tls access @tech:docker:dockerd
- = dockerd remote tls access == via * [[https://docs.docker.com/engine/security/https/]] * [[https:... ing-to-a-remote-docker-daemon]] * [[https://success.docker.com/article/how-do-i-enable-the-remote-ap... n con el **dockerd** de manera que solo los clientes con certificado firmado por la misma CA que el se... r puedan conectarse * nos permite limitar el acceso al **dockerd** local y además es el paso previo
- Dockerfile
- * [[https://docs.docker.com/develop/develop-images/dockerfile_best-practices/]] * mirar: [[https://runnable.com/blog/9-common-dockerfile-mistakes]] == nombre contenedores * [a-zA-Z0-9][a-zA-Z0
- docker daemon TLS
- = docker daemon TLS * create directories:<code bash>mkdir -p ${HOME}/.docker mkdir -p /etc/docker/certs</code> * create certificates:<code bash> docker run --rm -v $(pwd)/.docker:/ce... /ca.pem chown -R $USER ~/.docker # añadir IPs correspondientes docker run --rm -v /etc/docker/ssl:/server \ -v $(pwd)/.docker:/certs \ -e SSL_IP=1
- docker TLS (OLD)
- ttps://docs.docker.com/engine/security/protect-access/]] * [[https://www.labkey.org/Documentation/wi... a -out ca-key.pem 4096 openssl req -x509 -new -nodes -key ca-key.pem -days 3650 -out ca.pem -subj '/CN=docker-CA' </code> <code properties; openssl-ca.cnf> [req] req_extensions = v3... ent-cert.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out client-cert.pem -days 3650 -extensions
- Dockerfile mariadb + SSL @tech:docker:dockerfile:examples
- ockerfile <code ruby; Dockerfile> FROM mariadb:latest ADD --chown=mysql:root ./data/certs/server-key.... nrsa 2048 > ca-key.pem openssl req -new -x509 -nodes -days 3600 -key ca-key.pem -out ca-cert.pem # ser... r key openssl req -newkey rsa:2048 -days 3600 -nodes -keyout server-key.pem -out server-req.pem openss... t key openssl req -newkey rsa:2048 -days 3600 -nodes -keyout client-key.pem -out client-req.pem openss
- Dockerfile run script @tech:docker:dockerfile:examples
- /docker-MariaDB-with-SSL/blob/master/run.sh]] == destacable <sxh bash> for i in /scripts/pre-init.d/*s... ; then echo "[i] pre-init.d - processing $i" . "${i}" fi done ... ; then echo "[i] pre-init.d - processing $i" . "${i}" fi done ... ysqld" ]; then echo "[i] mysqld already present, skipping creation" chown -R mysql:mys
- docker scan
- docker scan --accept-license --version</code> * Es necesario hacer login en Docker Hub:<code bash>docker login --username matebcn</code> * Scan: <code... %'': salida en formato JSON * ''%%--group-issues%%'': agrupa las vulnerabilidades y solo aparece una vez. * ''%%--dependency-tree%%'': muestra árb
- docker run
- = docker run == usos útiles <code bash; portainer.sh> #!/bin/bash docker run \ --detach \ --... publish 9000:9000 \ --name portainer \ --restart unless-stopped \ --volume /var/run/docker.sock:/var/run/docker.sock \ --volume ${PWD}/dat... -ftpd docker run \ -v ${PWD}/data:/home/bob/files \ -e FTP_PASSIVE_PORTS=10000:10009 \ -p 100
- docker context
- ntext create --docker host=ssh://<SERVER_CONN> --description "server docker daemon" <SERVER> docker co... ntext create --docker host=ssh://<USER>@<PASS> --description "server docker daemon" <SERVER> docker co... cker host=ssh://<SERVER_CONN> --default-stack-orchestrator swarm --description "swarm01" swarm01 swarm01</code>
- dockerd @tech:docker:dockerd
- temd sudo systemctl daemon-reload sudo systemctl restart docker</code> <code json; /etc/docker/daemon... docker-registry no seguros "insecure-registries" : ["10.29.66.85:5000"] } </code> * [[https://