rancher/os
1
0
Fork 1
mirror of https://github.com/rancher/os.git synced 2025-09-16 06:59:12 +00:00
Code Issues Releases Wiki Activity

wire up tls config

Browse Source
This commit is contained in:
sidharthamani
2015-02-17 17:05:03 -08:00
parent 529ce4336d
commit 597a46c574
5 changed files with 46 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
scripts/dockerimages/scripts/docker.sh
View File

@@ -1,4 +1,4 @@
#!/bin/sh
#!/bin/bash
set -x -e
CGROUPS="perf_event net_cls freezer devices blkio memory cpuacct cpu cpuset"
@@ -16,4 +16,33 @@ if ! lsmod | grep -q br_netfilter; then
fi
rm -f /var/run/docker.pid
exec docker -d -s overlay
USE_TLS=$(rancherctl config get userdocker.use_tls)
if [ "$USE_TLS" == "true" ]; then
TLS_CA_CERT=$(rancherctl config get userdocker.tls_ca_cert)
TLS_SERVER_CERT=$(rancherctl config get userdocker.tls_server_cert)
TLS_SERVER_KEY=$(rancherctl config get userdocker.tls_server_key)
TLS_PATH=/etc/docker/tls
mkdir -p $TLS_PATH
if [ -n "$TLS_CA_CERT" ] && [ -n "$TLS_SERVER_CERT" ] && [ -n "$TLS_SERVER_KEY" ]; then
echo "$TLS_CA_CERT" > $TLS_PATH/ca.pem
echo "$TLS_SERVER_CERT" > $TLS_PATH/server-cert.pem
echo "$TLS_SERVER_KEY" > $TLS_PATH/server-key.pem
else
tlsconf
TLS_CA_CERT="$(cat $TLS_PATH/ca.pem)"
TLS_SERVER_CERT="$(cat $TLS_PATH/server-cert.pem)"
TLS_SERVER_KEY="$(cat $TLS_PATH/server-key.pem)"
fi
rancherctl config set -- userdocker.tls_ca_cert "$TLS_CA_CERT"
rancherctl config set -- userdocker.tls_server_cert "$TLS_SERVER_CERT"
rancherctl config set -- userdocker.tls_server_key "$TLS_SERVER_KEY"
exec docker -d -s overlay --tlsverify --tlscacert=$TLS_PATH/ca.pem --tlscert=$TLS_PATH/server-cert.pem --tlskey=$TLS_PATH/server-key.pem -H=0.0.0.0:2376 -H=unix:///var/run/docker.sock
else
exec docker -d -s overlay
fi