Apache jclouds and Docker
0 likes1,388 views
This document discusses Apache jclouds, an open source toolkit for Java that provides APIs for interacting with multiple cloud infrastructure providers. It specifically focuses on integrating jclouds with Docker, an open source containerization platform. Docker exposes its functionality through a REST API that jclouds supports through the jclouds-docker module. The document provides examples of using jclouds-docker to list Docker images and create containers, and discusses how to build and configure jclouds-docker, including how to handle Docker's encrypted TCP socket communication.
Apache jclouds and Docker
- 1. Apache jclouds and Docker Andrea Turli @turlinux
- 2. What is jclouds? An open source multi-cloud toolkit for the Java platform BlobStore and ComputeService API abstraction for 20+ IaaS providers
- 3. What is Docker? Docker Engine is an open source container virtualization technology. Virtual Machine Docker From jclouds perspective, Docker is a cloud provider which spins containers up instead of virtual machines
- 4. Docker REST API Docker 1.3.x contains Docker REST API v1.15 Docker Remote API <- supported by jclouds-docker ○ ContainerAPI ○ ImageAPI ○ MiscAPI Docker Hub API Docker Registry API The API tends to be REST, but for some complex commands, like attach or pull, the HTTP connection is hijacked to transport STDOUT, STDIN and STDERR.
- 5. Docker Engine daemon configuration By default, the Docker Engine daemon listens on unix:///var/run/docker.sock and the client must have root access to interact with the daemon. Docker Engine daemon can be set to use an (encrypted) TCP socket http://host:2375 https://host:2376 If the Docker Engine daemon is set to use an encrypted TCP socket (--tls, or -- tlsverify) then you need to add extra parameters to curl or wget when making test API requests: curl --insecure --cert ~$DOCKER_CERT_PATH/cert.pem --key ~$DOCKER_CERT_PATH/key.pem https://boot2docker:2376/images/json
- 6. Docker Remote API : supported by jclouds
- 7. Example: List Images Auto Value: Immutable value-type code generation for Java 1.6+
- 9. Building jclouds-docker official: https://github.com/jclouds/jclouds-labs/tree/master/docker latest version (1.3.2): https://github.com/andreaturli/jclouds-labs/tree/1.3.2 TLS (optional; starting from 1.3.0) If you are using boot2docker, set up the following VM options for jclouds-docker: -Dtest.docker.identity=$DOCKER_CERT_PATH/cert.pem -Dtest.docker.credential=$DOCKER_CERT_PATH/key.pem -Dtest.docker.endpoint=https://192.168.59.103:2376 # this is the default, but check with boot2docker up When using encrypted TCP socket, you should know that Docker removed sslv3 from server's TLS supported versions https://github.com/docker/docker/pull/8588/files JDK sslContext.getDefaultSSLParameters().getProtocols() 6 SSLv3, TLSv1, SSLv2Hello 7 SSLv3, TLSv1 To have more fine-grained control, OkHttp driver will be the default choice for providers that need SSL/TLS OkHttpCommandExecutorServiceModule vs JavaUrlHttpCommandExecutorServiceModule
- 10. References Apache jclouds https://jclouds.apache.org/ Apache jclouds Docker https://jclouds.apache.org/guides/docker/ Docker https://www.docker.com Docker Rest API http://goo.gl/Cuhpcx Google AutoValue https://github.com/google/auto/tree/master/value How to disable SSL v3.0 in JDK and JRE http://goo.gl/ZiK6Z7 OkHttp https://github.com/square/okhttp/