What about Docker on NethServer 7?

[alefattorini (Alessio Fattorini)]

Who has a deep knowledge about docker? How can be useful on NethServer 7? What goals and use cases?
Please share your skills

[alefattorini (Alessio Fattorini)]

No knowledge about docker? No one? Unbelieveble

[davidep (Davide Principi)]

@fasttech

My point is the most robust server in the world is worth squat without some useful apps, modules, whatever, now I keep using oC as an example but it’s a relevant example of what makes the server useful. oC depends on other modules, libraries, in NS’s case, apache, php, openssl, samba, etc, etc, as oC advances it’s requirements, like php as the most relevant example, NS becomes less and less of an option because it can’t support an application’s advances.

Luckily we have Docker! It would be great if someone contributes with experiments and shares knowledge!

ownCloud is the typical example of application that requries latest libraries, thus can’t run with the official libraries on NethServer.

https://hub.docker.com/_/owncloud/

@fasttech, @alep do you want give it a try?

[Jim]

Hello,

I don’t know a lot about docker… It’s seem like the jail concept in BSD.
If it’s really the same thing, I think it could be a great security improvemnt in Netserver, separating de gateway rule with the server rule(s).

[fasttech]

Ummmmm… I don’t know Docker but my quick scan of the docs makes me ask, doesn’t NS already have a module to server as a virtual host?

If I were to install Docker and then the Docker oC image I don’t see how the usefulness of an integrated oC in NS is present because the oC Docker image wouldn’t be integrated into NS users and groups anymore than it would be if I just installed any oC iso into a vm under NS.

Correct?

[alefattorini (Alessio Fattorini)]

I mean using docker for have the last owncloud version? It may be a way… We need to go deeper

[dz00te]

yes absolutely
but it’s not easy task (well, at least for me )

• docker doesn’t support centos 6 (while a not so old version can be found on epel) so i don’t know if it’s worthwhile make test on nethserver 6.6/7
• probably some work must be done to shorewall config to integrate docker0

but i think it could be a great addon, keep us updated

[davidep (Davide Principi)]

You’re right, it seems like the Docker support on RHEL 6 is not guaranteed even with the new kernel in 6.7 and the new docker-io 1.7 package in epel-testing.

• Does Red Hat provide docker for RHEL 6? - Red Hat Customer Portal
• Drop support for RHEL6/CentOS6 · Issue #14365 · moby/moby · GitHub

I hope this is not the last word:

The Red Hat provided, maintained and supported version of Docker is only available on RHEL 7.

…and, I agree, Shorewall integration with Docker is not easy but perhaps we’ll find a solution for it.

[dz00te]

just for testing purpose… is there an easy way to add all docker0 to trusted green zone?

[davidep (Davide Principi)]

Perhaps should be listed into /etc/shorewall/interfaces

[davidep (Davide Principi)]

To simplify, we could start by assuming Docker is not available on gateway servers!

[alefattorini (Alessio Fattorini)]

@davidep

You’re right, it seems like the Docker support on RHEL 6 is not guaranteed even with the new kernel in 6.7 and the new docker-io 1.7 package in epel-testing.

This point isn’t quite clear to me, do we need to move Docker support to 7 only?

[davidep (Davide Principi)]

Yep! It seems we can only play with old Docker versions on 6!

NethServer rule #1: follow upstream

[dz00te]

yes i’m in server-only mode…
tnx for the hint… with a new search i found

Docker & Shorewall

and
https://github.com/pixelated/pixelated-platform/issues/44
last post, but on centos6 in /etc/sysconfig/docker, other_args instead of DOCKER_OPTS.
now finally the owncloud container can contact the ldap on host…
but i need to study/evaluate docker for work so i think i’ll start to do some test on centos7

[davidep (Davide Principi)]

Do you remember? NethServer 7 alpha1 is waiting for us

Looking forward to NethServer 7

v7-alpha1 update 2015-05-22 I managed to have: installation procedure on CentOS 7.1.1503 minal networking (with lokkit) server-manager running I also made an attempt with ISO building, but decided to not release the ISO as only unattended installation works! just to have a taste of NethServer 7, install the official CentOS 7.1.1503 Minimal ISO, then type the following commands: # yum localinstall http://mirror.nethserver.org/nethserver/7.1.1503/base/x86_…

[alefattorini (Alessio Fattorini)]

@dz00te

but i need to study/evaluate docker for work so i think i’ll start to do some test on centos7

Good, please keep us in touch if you like to move forward on NethServer 7 could be really helpful.

[dz00te]

@davidep

Do you remember? NethServer 7 alpha1 is waiting for us

yes i remember, the vm is up and running (i like the alpha/beta stage ) ready to test docker… one info on nethserver rule #1:
on centos7 i can install docker from:
1: Docker (recompiled from RHEL 7) is included in the CentOS-Extras repository (docker.x86_64-1.7.1-108)
2: a more up to date version of docker, on the virt SIG repository (docker-1.8.1-5.git32b8b25)
3: from docker repo (docker-engine-1.8.1-1)
so the preferred way on nethserver shoud be the 1st option, right?
and… there also other rules?
tnx

[davidep (Davide Principi)]

I’d prefer the one from RHEL.

I don’t know why the virt SIG has its own QA process and provide a more recent version. The point is what does the SIG compile? RHEL or Docker?

…and of course there are other rules (and exceptions), I love exceptions

[JOduMonT (Jonathan Dumont)]

I was hoping Docker will be in NethServer
I’m exploring Docker these days (doing a Online Course)
Rancher give a nice interface and propose apps : http://docs.rancher.com/rancher/latest/en/quick-start-guide/

[alefattorini (Alessio Fattorini)]

Looks amazing. Managing Docker in a easy way would be awesome. How are your test going?

BTW happy to see you still around man.