mirror of https://github.com/docker/docs.git synced 2026-11-05 00:14:17 +03:00

Files

Daniel Hiltgen 6bacb243bb Add docs explaining how to wire up certs by hand

We might want to take the time to make this work via compose, but that
will require some custom bootstrap scripts, so for now, lets just use
manual cut-and-paste for anyone who needs a "real" cert setup in dev mode.

2015-08-12 17:28:59 -07:00

1.7 KiB

Raw Blame History

Generating User certificates by Hand

This shouldn't be required once Orca can generate user certs, but might be useful in some instances...

All of these commands must be run against the engine where Orca is running E.g. Locally, or via a machine driver that mounts your home directory. If you can't mount home on the machine, then use docker-machine ssh ... to run these commands from within the host.

mkdir orca_user
cat << EOF > orca_user/client.json
{
    "hosts": [
        "127.0.0.1"
    ],
    "key": {
        "algo": "rsa",
        "size": 4096
    },
    "CN": "Orca User"
}
EOF

docker run --rm -it \
    --link=orca-ca:orca_ca \
    -v /etc/docker/ssl/orca:/etc/docker/ssl/orca \
    -v $(pwd)/orca_user:/orca_user \
    -w /orca_user \
    --entrypoint=/bin/sh \
    dockerorca/orca-cfssl -c \
    'cfssl gencert -remote $ORCA_CA_PORT_8888_TCP_ADDR -profile=client client.json | cfssljson -bare client '

cp /etc/docker/ssl/orca/orca_ca_chain.pem orca_user/ca.pem
mv orca_user/client.pem orca_user/cert.pem
mv orca_user/client-key.pem orca_user/key.pem
openssl x509 -pubkey -noout -in orca_user/cert.pem > orca_user/pub_key.pem
tar czvf orca_user.tgz orca_user

Now get the file off the machine. If you're using docker machine, something along these lines might work

NAME=node0
docker-machine ssh ${NAME} "cat orca_user.tgz" | tar zxvf -

Now login to Orca, Click on "Security" and paste in the contents of the pub_key.pem into the Public Key field

Then you should be able to run docker CLI commands with:

export DOCKER_TLS_VERIFY=1
export DOCKER_HOST=tcp://192.168.122.116:443
export DOCKER_CERT_PATH=$(pwd)/orca_user/
docker info

1.7 KiB Raw Blame History

Generating User certificates by Hand

1.7 KiB

Raw Blame History