Aqbeż għall-kontenut

Installazzjoni tal-komponent Edge Gateway Docker

Importazzjoni tal-immaġni Docker

Qabel ma tkun tista’ toħloq kontenitur Edge Gateway Docker, trid timporta l-immaġni Docker. Biex tagħmel dan, iftaħ shell li minnha jkollok disponibbli l-kmandi Docker, kif ukoll il-fajl cleanroom-gateway-4.6.1-33-v4.tgz. Mix-shell, ħaddem il-kmand li ġej, u aġġusta l-mogħdija għall-fajl TGZ jekk ma jkunx fil-folder kurrenti:

1
docker load --input cleanroom-gateway-4.6.1-33-v4.tgz

Imbagħad iċċekkja li l-importazzjoni rnexxiet bil-kmand li ġej:

1
docker inspect --type=image cleanroom-gateway:4.6.1-33-v4

L-output mistenni huwa kif ġej (l-ID SHA256 jista’ jvarja skont is-sistema operattiva li fuqha huwa installat Docker; l-eżempji huma minn Debian 13). Jekk dan ma jkunx il-każ, l-importazzjoni tkun falliet:

1
2
3
4
5
6
[
    {
        "Id": "sha256:c63645a09181bc3b83958bedf2eb3d7ea5fbbc2526126edb660a519b93338974",
        "RepoTags": [
            "cleanroom-gateway:4.6.1-33-v4"
        ],
Output sħiħ
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
[
    {
        "Id": "sha256:c63645a09181bc3b83958bedf2eb3d7ea5fbbc2526126edb660a519b93338974",
        "RepoTags": [
            "cleanroom-gateway:4.6.1-33-v4"
        ],
        "RepoDigests": [
            "cleanroom-gateway@sha256:fd96104ea219a05216c90c71c39b761083c989cbab8ef1f388cac09015bd54a3"
        ],
        "Comment": "buildkit.dockerfile.v0",
        "Created": "2026-02-17T16:21:12.399890264+01:00",
        "Config": {
            "User": "root",
            "ExposedPorts": {
                "9080/tcp": {}
            },
            "Env": [
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                "DEBIAN_FRONTEND=noninteractive",
                "IMAGE_BUILD_DATE=20260217T161839",
                "IMAGE_BUILD_VERSION=4.6.1-33-v4",
                "IMAGE_IPDIPC=IPC-54826,IPC-53702,IPC-55425"
            ],
            "Entrypoint": [
                "/entrypoint.sh"
            ],
            "Volumes": {
                "/etc/ipdiva/": {},
                "/var/log/": {}
            },
            "Labels": {
                "maintainer": "contact@systancia.com",
                "org.label-schema.build-date": "20260217T161839",
                "org.label-schema.description": "Systancia Cleanroom Gateway",
                "org.label-schema.name": "Systancia Cleanroom 4.6.1-33-v4 Gateway",
                "org.label-schema.url": "http://systancia.com/",
                "org.label-schema.vendor": "Systancia",
                "version": "4.6.1-33-v4"
            },
            "Healthcheck": {
                "Test": [
                    "CMD-SHELL",
                    "/usr/lib/nagios/plugins/IPdivaSensorGateway -a isConnected -g 127.0.0.1:9080"
                ],
                "Interval": 300000000000,
                "Timeout": 10000000000,
                "Retries": 3
            }
        },
        "Architecture": "amd64",
        "Os": "linux",
        "Size": 1248982227,
        "GraphDriver": {
            "Data": {
                "LowerDir": "/var/lib/docker/overlay2/5a32af4bf30239320f2d4f04e9dde6e448d138d0e00dbcd0aa07ff859518bfd5/diff:/var/lib/docker/overlay2/da3ceed2e06933403d5e2b503f654efe58afd3067562d4991615cc79109f5000/diff:/var/lib/docker/overlay2/022f1b9fc82a6210ac50a7bf20705651a5a6bd2bfcdd8ca4993778870c4f04ce/diff:/var/lib/docker/overlay2/7675c3cb606871d89d593c5b40746256a109640e03d4846ee49392792f94c29b/diff:/var/lib/docker/overlay2/a0bc243e1069486711b74a39142def4596f99b21d00d286a2bd6212cf8902401/diff:/var/lib/docker/overlay2/fe91732a9355873a0d60ec041ea365567f0fbc963173c9428ab896b591fcb460/diff:/var/lib/docker/overlay2/d4af0110a3ab43120dea8c19e35b7552ad8f8d993d556c34143ecb3c4bd7e670/diff:/var/lib/docker/overlay2/399d72a9751679283e1435dffa5ea7b5abc07f264987815be3846e8e617cf031/diff:/var/lib/docker/overlay2/5c1723a91777858469dc540b3a91738f4b6fc6c0a3cc6686d48b4cb85a9c0400/diff:/var/lib/docker/overlay2/60b4e962507a658aa32be63de9cea55df0a45459b2f3549b3eef3443b35519b9/diff:/var/lib/docker/overlay2/9ff870b850857af52af3de1939f1abd129e96a91d608f3b8f68e0cbcd09eb181/diff",
                "MergedDir": "/var/lib/docker/overlay2/48efe7a9b5e8c4e24a395024dd0876c942b03a52ea161df553d5ee566505c4a8/merged",
                "UpperDir": "/var/lib/docker/overlay2/48efe7a9b5e8c4e24a395024dd0876c942b03a52ea161df553d5ee566505c4a8/diff",
                "WorkDir": "/var/lib/docker/overlay2/48efe7a9b5e8c4e24a395024dd0876c942b03a52ea161df553d5ee566505c4a8/work"
            },
            "Name": "overlay2"
        },
        "RootFS": {
            "Type": "layers",
            "Layers": [
                "sha256:51e78f04fd47b324ef2558bbed0cb5bc0d6d8e5ca3c56d5b98b91866a88f37bb",
                "sha256:3bb2b94a7a30506f2a91d55a04aa0e90a487b3a321d2e1df4f97dfbcfe32cfc0",
                "sha256:deb44bbc3e3d6990e142dc66532aeace714d6c191f1ede7a0f6fd8dcd7e751d3",
                "sha256:e61e4e2f89a04cb7bed974b2c8f510dd72d76e4bf998a000d082fc33bf29947e",
                "sha256:96b1236ab0e31d36a0d0fd17878770d969a11c8d4d33f8cacac568d0b0d76324",
                "sha256:989a4d7dbba1836ad30f58ca73f3101b21b80929f732d5ebdc87a69939b8cf6d",
                "sha256:1f2b05f37aceed6edd80cbe798657a7eb8fce3c7383df8d40d9fdeb273867a9d",
                "sha256:63aa193be3dc44af0057719f79991745e40d8b522a2aa49743dd04fe81b6a637",
                "sha256:02dcea7c2ed886996c81bd6980516420b90e2cdd930dc805388bcd5c7e14b5b3",
                "sha256:1f8c0ab2de5021d138baa67506b22d4d21750a23d0e9278a152daa2e7e953bff",
                "sha256:3601c2e047e3c5019a5e45fb23b478154beb6188761e31aeddb4326bfe16f81c",
                "sha256:20963ed8264d1ceaeb3680375c9c3df4045aa17af258957f3fa83f6224e62138"
            ]
        },
        "Metadata": {
            "LastTagTime": "0001-01-01T00:00:00Z"
        }
    }
]

Konfigurazzjoni tal-kontenitur

Varjabbli tal-ambjent

Varjabbli għall-iskjerament permezz ta’ pairing

Isem Obbligatorju Valur default Kumment
ENV_MEDIATION IVA Użat għall-konnessjoni permezz ta’ pairing.
Isem DNS jew indirizz IP għall-konnessjoni mal-interfaċċa web ta’ pjattaforma CyberElements Bastion.
ENV_TOKEN IVA Użat għall-konnessjoni permezz ta’ pairing.
Indikazzjoni tat-token tal-pairing li għandu jintuża għall-konnessjoni mas-servizz Mediation Controller.
ENV_NO_CHECK_CERT LE false Użat għall-konnessjonijiet permezz ta’ pairing.
Jekk il-verifika taċ-ċertifikat web tas-servizz Mediation Controller għandhiex tiġi diżattivata jew le; utli ma’ CyberElements Bastion meta l-aċċess isir permezz ta’ indirizz IP jew meta ċ-ċertifikat web mhuwiex ċertifikat rikonoxxut mill-awtoritajiet taċ-ċertifikazzjoni pubbliċi default.
Valuri aċċettati: true jew false.

Varjabbli għall-iskjerament manwali

Isem Obbligatorju Valur default Kumment
ENV_GW_CERT_NAME IVA Użat għall-konnessjoni b’konfigurazzjoni manwali.
Isem il-fajl taċ-ċertifikat għall-konnessjoni mal-komponent SSL Router.
ENV_GW_CERT_PASSWORD IVA Użat għall-konnessjoni b’konfigurazzjoni manwali.
Il-password tal-fajl taċ-ċertifikat għall-konnessjoni mal-komponent SSL Router.
ENV_CARE_CERT_NAME LE Valur ta’ ENV_GW_CERT_NAME Użat għall-konnessjoni b’konfigurazzjoni manwali.
Isem il-fajl taċ-ċertifikat għas-servizz tar-reġistrazzjoni.
ENV_CARE_CERT_PASSWORD LE Valur ta’ ENV_GW_CERT_PASSWORD Użat għall-konnessjoni b’konfigurazzjoni manwali.
Il-password tal-fajl taċ-ċertifikat tas-servizz tar-reġistrazzjoni.
ENV_SSL_ROUTER_IP IVA Użat għall-konnessjoni b’konfigurazzjoni manwali.
L-indirizz IP jew l-isem DNS tal-komponent SSL Router li miegħu se jikkonnettja l-komponent Edge Gateway.
ENV_SSL_ROUTER_PORT LE 443 Użat għall-konnessjoni b’konfigurazzjoni manwali.
Il-port fuq il-komponent SSL Router li miegħu se jikkonnettja l-komponent Edge Gateway.

Varjabbli diversi

Isem Obbligatorju Valur default Kumment
ENV_DISABLE_RSYSLOG LE false Diżattivazzjoni tas-servizz rsyslog.
Valuri aċċettati: true jew false.
ENV_KERBEROS_CONFIG_ENABLE LE false Jattiva s-settings ta’ Kerberos biex jippermetti lill-applikazzjonijiet RDP jawtentikaw ruħhom f’modalità mingħajr aġent bl-użu ta’ Kerberos.
Valuri aċċettati: true jew false.
Jekk false, il-varjabbli l-oħra ta’ Kerberos jiġu injorati.
ENV_KERBEROS_DEFAULT_REALM IVA
(jekk il-konfigurazzjoni ta’ Kerberos hija attivata)
Isem ir-realm Kerberos.
ENV_KERBEROS_DEFAULT_DOMAIN IVA
(jekk il-konfigurazzjoni ta’ Kerberos hija attivata)
Isem id-dominju Kerberos.
ENV_KERBEROS_CONTROLLER_ADDRESS IVA
(jekk il-konfigurazzjoni ta’ Kerberos hija attivata)
L-indirizz tal-konnessjoni mal-kontrollur Kerberos.

Volumi

Volum Kumment
/etc/ipdiva/ Volum tal-konfigurazzjoni tal-komponent Edge Gateway.
Nirrakkomandaw li jiġi mmuntat fuq volum bl-isem jew fuq is-sistema tal-fajls tal-kompjuter ospitanti.
/opt/certificates/ Volum li fih iċ-ċertifikat jew iċ-ċertifikati tal-komponent Edge Gateway f’konfigurazzjoni mingħajr pairing.
/var/lib/ipdiva/carerecord/archives/ Volum li fih l-arkivji grafiċi.
Nirrakkomandaw li jiġi mmuntat fuq volum bl-isem jew fuq is-sistema tal-fajls tal-kompjuter ospitanti.
/var/ipdiva/care/sshrecord/ Volum li fih l-arkivji SSH.
Nirrakkomandaw li jiġi mmuntat fuq volum bl-isem jew fuq is-sistema tal-fajls tal-kompjuter ospitanti.
/var/log/ Volum li fih ir-reġistri tal-komponent Edge Gateway.

Portijiet

Port Kumment
2222 (jew kwalunkwe port ieħor disponibbli magħżul mill-amministratur) Port tas-smigħ għas-servizz tal-aċċess dirett SSH/SFTP.
3389 Port tas-smigħ għas-servizz tal-aċċess dirett RDP.
8443 Port tas-smigħ għas-servizz tar-reġistrazzjoni, li għandu jiġi espost meta jintuża l-aġent tar-reġistrazzjoni għal Windows.

Skjerament tal-komponent Edge Gateway Docker

Skjerament bil-pairing

Prerekwiżiti

Qabel ma tiskjera l-komponent Edge Gateway Docker, trid tikseb token tal-pairing.

L-iskjerament deskritt hawn taħt se juża l-volumi disponibbli kollha (ħlief /opt/certificates/, li mhuwiex utli f’dan il-kuntest) u se jesponi l-portijiet kollha.
Il-volumi se jiġu mmuntati fuq is-sistema tal-fajls tal-kompjuter ospitanti fil-post EDGE_GATEWAY_REP. F’dan il-post hemm is-sottofolders li ġejjin:

  • config
  • graphical_archives
  • ssh_archives
  • log

Tista’ tippersonalizza l-varjabbli għall-kmandi li ġejjin:

Valur personalizzat Varjabbli Kumment
DOCKER_NAME Isem il-kontenitur Docker.
EDGE_GATEWAY_REP Il-post fis-sistema tal-fajls fejn jiġu mmuntati l-volumi.
ENV_MEDIATION_VALUE Il-valur tal-varjabbli tal-ambjent ENV_MEDIATION.
ENV_TOKEN_VALUE Il-valur tal-varjabbli tal-ambjent ENV_TOKEN.
ENV_NO_CHECK_CERT_VALUE Il-valur tal-varjabbli tal-ambjent ENV_NO_CHECK_CERT.
ENV_KERBEROS_CONFIG_ENABLE_VALUE Il-valur tal-varjabbli tal-ambjent ENV_KERBEROS_CONFIG_ENABLE.
ENV_KERBEROS_DEFAULT_REALM_VALUE Il-valur tal-varjabbli tal-ambjent ENV_KERBEROS_DEFAULT_REALM.
ENV_KERBEROS_DEFAULT_DOMAIN_VALUE Il-valur tal-varjabbli tal-ambjent ENV_KERBEROS_DEFAULT_DOMAIN.
ENV_KERBEROS_CONTROLLER_ADDRESS_VALUE Il-valur tal-varjabbli tal-ambjent ENV_KERBEROS_CONTROLLER_ADDRESS.

Oħloq is-siġra tal-folders meħtieġa għall-immuntar tal-volumi fuq is-sistema tal-fajls:

1
2
3
4
mkdir -p EDGE_GATEWAY_REP/config
mkdir EDGE_GATEWAY_REP/graphical_archives
mkdir EDGE_GATEWAY_REP/ssh_archives
mkdir EDGE_GATEWAY_REP/log
1
New-Item -ItemType Directory -Force -Path "EDGE_GATEWAY_REP\config", "EDGE_GATEWAY_REP\graphical_archives", "EDGE_GATEWAY_REP\ssh_archives", "EDGE_GATEWAY_REP\log"

U fl-aħħar, ibda kontenitur ġdid:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
docker run -d --restart unless-stopped --name "DOCKER_NAME" \
-e ENV_MEDIATION="ENV_MEDIATION_VALUE" \
-e ENV_TOKEN="ENV_TOKEN_VALUE" \
-e ENV_NO_CHECK_CERT="ENV_NO_CHECK_CERT_VALUE" \
-e ENV_KERBEROS_CONFIG_ENABLE="ENV_KERBEROS_CONFIG_ENABLE_VALUE" \
-e ENV_KERBEROS_DEFAULT_REALM="ENV_KERBEROS_DEFAULT_REALM_VALUE" \
-e ENV_KERBEROS_DEFAULT_DOMAIN="ENV_KERBEROS_DEFAULT_DOMAIN_VALUE" \
-e ENV_KERBEROS_CONTROLLER_ADDRESS="ENV_KERBEROS_CONTROLLER_ADDRESS_VALUE" \
-v "EDGE_GATEWAY_REP/config/:/etc/ipdiva/:rw" \
-v "EDGE_GATEWAY_REP/graphical_archives/:/var/lib/ipdiva/carerecord/archives/:rw" \
-v "EDGE_GATEWAY_REP/ssh_archives/:/var/ipdiva/care/sshrecord/:rw" \
-v "EDGE_GATEWAY_REP/log/:/var/log/:rw" \
-p 2222:2222 \
-p 3389:3389 \
-p 8443:8443 \
cleanroom-gateway:4.6.1-33-v4
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
docker run -d --restart unless-stopped --name "DOCKER_NAME" `
-e "ENV_MEDIATION=ENV_MEDIATION_VALUE" `
-e "ENV_TOKEN=ENV_TOKEN_VALUE" `
-e "ENV_NO_CHECK_CERT=ENV_NO_CHECK_CERT_VALUE" `
-e "ENV_KERBEROS_CONFIG_ENABLE=ENV_KERBEROS_CONFIG_ENABLE_VALUE" `
-e "ENV_KERBEROS_DEFAULT_REALM=ENV_KERBEROS_DEFAULT_REALM_VALUE" `
-e "ENV_KERBEROS_DEFAULT_DOMAIN=ENV_KERBEROS_DEFAULT_DOMAIN_VALUE" `
-e "ENV_KERBEROS_CONTROLLER_ADDRESS=ENV_KERBEROS_CONTROLLER_ADDRESS_VALUE" `
-v "EDGE_GATEWAY_REP\config:/etc/ipdiva/:rw" `
-v "EDGE_GATEWAY_REP\graphical_archives:/var/lib/ipdiva/carerecord/archives/:rw" `
-v "EDGE_GATEWAY_REP\ssh_archives:/var/ipdiva/care/sshrecord/:rw" `
-v "EDGE_GATEWAY_REP\log:/var/log/:rw" `
-p 2222:2222 `
-p 3389:3389 `
-p 8443:8443 `
cleanroom-gateway:4.6.1-33-v4

Ir-reġistri tal-kontenitur jistgħu jiġu kkonsultati bil-kmand li ġej:

1
docker logs -f DOCKER_NAME

Skjerament manwali

Prerekwiżiti

Qabel ma tiskjera l-komponent Edge Gateway Docker, irid ikollok iċ-ċertifikati meħtieġa għall-komponent Edge Gateway u għas-servizz tar-reġistrazzjoni.

Passwords viżibbli b’docker inspect

Il-varjabbli tal-ambjent ta’ kontenitur, inklużi l-passwords taċ-ċertifikati, jibqgħu jinqraw minn kull min huwa awtorizzat iħaddem docker inspect fuq is-server Docker. Għalhekk għandu jiġi ppreferut l-iskjerament bil-pairing, li ma juża l-ebda password ta’ ċertifikat.

L-iskjerament deskritt hawn taħt se juża l-volumi kollha disponibbli u jesponi l-portijiet kollha.
Il-volumi se jiġu mmuntati fis-sistema tal-fajls tal-kompjuter ospitanti fil-post MANUAL_REP. F’dan il-post hemm is-sottodirettorji li ġejjin:

  • config
  • graphical_archives
  • ssh_archives
  • log
  • certificates

Tista’ tippersonalizza l-varjabbli għall-kmandi li ġejjin:

Valur personalizzat Varjabbli Kumment
MANUAL_NAME Isem il-kontenitur Docker.
MANUAL_REP Post fis-sistema tal-fajls fejn jiġu mmuntati l-volumi.
ENV_GW_CERT_NAME_VALUE Valur tal-varjabbli tal-ambjent ENV_GW_CERT_NAME.
ENV_CARE_CERT_NAME_VALUE Valur tal-varjabbli tal-ambjent ENV_CARE_CERT_NAME.
ENV_SSL_ROUTER_IP_VALUE Valur tal-varjabbli tal-ambjent ENV_SSL_ROUTER_IP.
ENV_SSL_ROUTER_PORT_VALUE Valur tal-varjabbli tal-ambjent ENV_SSL_ROUTER_PORT.
ENV_KERBEROS_CONFIG_ENABLE_MANUAL_VALUE Valur tal-varjabbli tal-ambjent ENV_KERBEROS_CONFIG_ENABLE.
ENV_KERBEROS_DEFAULT_REALM_MANUAL_VALUE Valur tal-varjabbli tal-ambjent ENV_KERBEROS_DEFAULT_REALM.
ENV_KERBEROS_DEFAULT_DOMAIN_MANUAL_VALUE Valur tal-varjabbli tal-ambjent ENV_KERBEROS_DEFAULT_DOMAIN.
ENV_KERBEROS_CONTROLLER_ADDRESS_MANUAL_VALUE Valur tal-varjabbli tal-ambjent ENV_KERBEROS_CONTROLLER_ADDRESS.

Oħloq is-siġra tal-folders meħtieġa għall-immuntar tal-volumi fuq is-sistema tal-fajls:

1
2
3
4
5
mkdir -p MANUAL_REP/config
mkdir MANUAL_REP/graphical_archives
mkdir MANUAL_REP/ssh_archives
mkdir MANUAL_REP/log
mkdir MANUAL_REP/certificates
1
New-Item -ItemType Directory -Force -Path "MANUAL_REP\config", "MANUAL_REP\graphical_archives", "MANUAL_REP\ssh_archives", "MANUAL_REP\log", "MANUAL_REP\certificates"

Imbagħad poġġi ċ-ċertifikati tal-komponent Edge Gateway u tas-servizz tar-reġistrazzjoni fil-folder MANUAL_REP/certificates.

Biex il-passwords taċ-ċertifikati ma jinżammux fl-istorja tax-shell, daħħalhom f’varjabbli tal-ambjent tas-sessjoni attwali (dak li tikteb ma jintweriex):

1
2
3
read -rsp "Edge Gateway certificate password: " ENV_GW_CERT_PASSWORD; echo
read -rsp "Recording service certificate password: " ENV_CARE_CERT_PASSWORD; echo
export ENV_GW_CERT_PASSWORD ENV_CARE_CERT_PASSWORD
1
2
$env:ENV_GW_CERT_PASSWORD = [Net.NetworkCredential]::new('', (Read-Host -AsSecureString "Edge Gateway certificate password")).Password
$env:ENV_CARE_CERT_PASSWORD = [Net.NetworkCredential]::new('', (Read-Host -AsSecureString "Recording service certificate password")).Password

Fl-aħħar, ibda kontenitur ġdid:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
docker run -d --restart unless-stopped --name "MANUAL_NAME" \
-e ENV_GW_CERT_NAME="ENV_GW_CERT_NAME_VALUE" \
-e ENV_GW_CERT_PASSWORD \
-e ENV_CARE_CERT_NAME="ENV_CARE_CERT_NAME_VALUE" \
-e ENV_CARE_CERT_PASSWORD \
-e ENV_SSL_ROUTER_IP="ENV_SSL_ROUTER_IP_VALUE" \
-e ENV_SSL_ROUTER_PORT="ENV_SSL_ROUTER_PORT_VALUE" \
-e ENV_KERBEROS_CONFIG_ENABLE="ENV_KERBEROS_CONFIG_ENABLE_MANUAL_VALUE" \
-e ENV_KERBEROS_DEFAULT_REALM="ENV_KERBEROS_DEFAULT_REALM_MANUAL_VALUE" \
-e ENV_KERBEROS_DEFAULT_DOMAIN="ENV_KERBEROS_DEFAULT_DOMAIN_MANUAL_VALUE" \
-e ENV_KERBEROS_CONTROLLER_ADDRESS="ENV_KERBEROS_CONTROLLER_ADDRESS_MANUAL_VALUE" \
-v "MANUAL_REP/config/:/etc/ipdiva/:rw" \
-v "MANUAL_REP/graphical_archives/:/var/lib/ipdiva/carerecord/archives/:rw" \
-v "MANUAL_REP/ssh_archives/:/var/ipdiva/care/sshrecord/:rw" \
-v "MANUAL_REP/log/:/var/log/:rw" \
-v "MANUAL_REP/certificates/:/opt/certificates/:ro" \
-p 2222:2222 \
-p 3389:3389 \
-p 8443:8443 \
cleanroom-gateway:4.6.1-33-v4
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
docker run -d --restart unless-stopped --name "MANUAL_NAME" `
-e "ENV_GW_CERT_NAME=ENV_GW_CERT_NAME_VALUE" `
-e ENV_GW_CERT_PASSWORD `
-e "ENV_CARE_CERT_NAME=ENV_CARE_CERT_NAME_VALUE" `
-e ENV_CARE_CERT_PASSWORD `
-e "ENV_SSL_ROUTER_IP=ENV_SSL_ROUTER_IP_VALUE" `
-e "ENV_SSL_ROUTER_PORT=ENV_SSL_ROUTER_PORT_VALUE" `
-e "ENV_KERBEROS_CONFIG_ENABLE=ENV_KERBEROS_CONFIG_ENABLE_MANUAL_VALUE" `
-e "ENV_KERBEROS_DEFAULT_REALM=ENV_KERBEROS_DEFAULT_REALM_MANUAL_VALUE" `
-e "ENV_KERBEROS_DEFAULT_DOMAIN=ENV_KERBEROS_DEFAULT_DOMAIN_MANUAL_VALUE" `
-e "ENV_KERBEROS_CONTROLLER_ADDRESS=ENV_KERBEROS_CONTROLLER_ADDRESS_MANUAL_VALUE" `
-v "MANUAL_REP\config:/etc/ipdiva/:rw" `
-v "MANUAL_REP\graphical_archives:/var/lib/ipdiva/carerecord/archives/:rw" `
-v "MANUAL_REP\ssh_archives:/var/ipdiva/care/sshrecord/:rw" `
-v "MANUAL_REP\log:/var/log/:rw" `
-v "MANUAL_REP\certificates:/opt/certificates/:ro" `
-p 2222:2222 `
-p 3389:3389 `
-p 8443:8443 `
cleanroom-gateway:4.6.1-33-v4

Ladarba l-kontenitur ikun beda, neħħi dawn il-varjabbli mis-sessjoni:

1
unset ENV_GW_CERT_PASSWORD ENV_CARE_CERT_PASSWORD
1
Remove-Item Env:ENV_GW_CERT_PASSWORD, Env:ENV_CARE_CERT_PASSWORD

Ir-reġistri tal-kontenitur jistgħu jiġu kkonsultati bil-kmand li ġej:

1
docker logs -f MANUAL_NAME