dockerd remote tls access

Anonymous (anonymous@undisclosed.example.com) — 2020-04-11T07:55:19+00:00

dockerd remote tls access via * * * * setup * pretendemos «asegurar» la conexión con el dockerd de manera que solo los clientes con certificado firmado por la misma CA que el servidor p…

docker volumes

Anonymous (anonymous@undisclosed.example.com) — 2020-03-28T00:27:24+00:00

docker volumes /via: * bind mount: montaje clásico con -v sobre una estructura de directorios * tmpfs mount: almacenar data no persistente * volume: * gestionado desde cli docker * trasversal al OS --volume o --mount * desde la versión 17.06

DOCKER

Anonymous (anonymous@undisclosed.example.com) — 2025-06-17T09:04:37+00:00

DOCKER devops info related +info * dockerd * Dockerfile * docker-compose * docker volumes * docker TLS (OLD) * docker daemon TLS * docker context * docker scan * Dev Containers: * Health Check: * * *

Dockerfile mariadb + SSL

Anonymous (anonymous@undisclosed.example.com) — 2021-11-16T07:36:10+00:00

Dockerfile mariadb + SSL dockerfile Dockerfile FROM mariadb:latest ADD --chown=mysql:root ./data/certs/server-key.pem /etc/mysql/certs/server.key ADD ./data/certs/server-cert.pem /etc/mysql/certs/server.crt ADD ./data/certs/ca-cert.pem /etc/mysql/certs/CA.crt ADD ./data/certs/ssl.cnf /etc/mysql/conf.d/ssl.cnf

docker daemon TLS

Anonymous (anonymous@undisclosed.example.com) — 2021-12-04T06:03:42+00:00

docker daemon TLS * create directories: mkdir -p ${HOME}/.docker mkdir -p /etc/docker/certs * create certificates: docker run --rm -v $(pwd)/.docker:/certs paulczar/omgwtfssl sudo cp ~/.docker/ca.pem /etc/docker/ssl/ca.pem chown -R $USER ~/.docker # añadir IPs correspondientes docker run --rm -v /etc/docker/ssl:/server \ -v $(pwd)/.docker:/certs \ -e SSL_IP=127.0.0.1,172.17.8.101 \ -e SSL_DNS=docker.local -e SSL_KEY=/server/key.pem \ -e SSL_CERT=/server/cert.pem paulczar/o…

docker-compose

Anonymous (anonymous@undisclosed.example.com) — 2025-12-11T09:31:02+00:00

docker-compose related * docker-compose casos de uso comandos * detached start docker-compose up -d [service] * docker-compose up -d --scale = estado servicio docker compose ps docker compose ps -a docker compose ps --status=exited reiniciar servicio

docker run

Anonymous (anonymous@undisclosed.example.com) — 2019-11-27T08:43:42+00:00

docker run usos útiles #!/bin/bash docker run \ --detach \ --publish 9000:9000 \ --name portainer \ --restart unless-stopped \ --volume /var/run/docker.sock:/var/run/docker.sock \ --volume ${PWD}/data:/data \ portainer/portainer

docker scan

Anonymous (anonymous@undisclosed.example.com) — 2023-01-24T13:40:49+00:00

docker scan * Instalación: apt-get update && apt-get install docker-scan-plugin * Aceptar licencia: docker scan --accept-license --version * Es necesario hacer login en Docker Hub: docker login --username matebcn * Scan: docker scan hello-world

docker TLS (OLD)

Anonymous (anonymous@undisclosed.example.com) — 2021-11-28T20:24:59+00:00

docker TLS (OLD) * SSL, TLS: * * * docker context -> * * docker run --rm -v $(pwd)/.docker:/certs paulczar/omgwtfssl * creación certific…

dockerd

Anonymous (anonymous@undisclosed.example.com) — 2020-02-13T21:27:44+00:00

dockerd * dockerd remote tls access info sudo systemctl start docker sudo service docker start # si hay cambios en los ficheros de configuración de configuración de los servicios systemd sudo systemctl daemon-reload sudo systemctl restart docker { "data-root": "/mnt/docker-data", "storage-driver": "overlay", # autorizar docker-registry no seguros "insecure-registries" : ["10.29.66.85:5000"] }

docker context

Anonymous (anonymous@undisclosed.example.com) — 2022-05-06T09:15:57+00:00

docker context connectar con dockerd remoto a través conexión SSH docker context create --docker host=ssh:// --description "server docker daemon" docker context create --docker host=ssh://@ --description "server docker daemon" docker context use docker context ls docker context use default docker context remove

Dockerfile run script

Anonymous (anonymous@undisclosed.example.com) — 2021-11-16T07:40:57+00:00

Dockerfile run script dockerfile /via: destacable completo #!/bin/sh # execute any pre-init scripts for i in /scripts/pre-init.d/*sh do if [ -e "${i}" ]; then echo "[i] pre-init.d - processing $i" . "${i}" fi done if [ -d "/run/mysqld" ]; then echo "[i] mysqld already present, skipping creation" chown -R mysql:mysql /run/mysqld else echo "[i] …

Dockerfile

Anonymous (anonymous@undisclosed.example.com) — 2021-11-16T07:34:36+00:00

Dockerfile * * mirar: nombre contenedores * [a-zA-Z0-9][a-zA-Z0-9_.-] * max. 30 caracteres * zona horaria * Zona Horaria (TZ) * crear volumenes a /etc/localtime, /etc/timezone para que coincida con el host: *

miguel angel torres egea