v30.1.5

• security vulnerabilities resolved in cf-containers-broker

Deployment

releases:
- name: docker
  version: 30.1.5
  url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.1.5/docker-30.1.5.tgz
  sha1: cc1536949e5e9d857d13ba2ed0781636a46f81da

v30.1.4

• Allow config of vm.max_map_count e2592d0

• Broker does not include dashboard_client if it is not set cloudfoundry-community/cf-containers-broker@e2bc8ec

• only require tls certs if docker.tcp_address is not 127.0.0.1 (the current default) [see conversation]

  Added operator file to disable external docker access and the need for TLS certs:

  bosh deploy manifests/containers/example.yml -o manifests/op-disable-remote-docker-access.yml
  

• fix bug in containers job's job_properties.sh.erb templates

Deployment

releases:
- name: docker
  version: 30.1.4
  url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.1.4/docker-30.1.4.tgz
  sha1: f79a70452b3ddae52f5ac78dd37ff8d9e6ec19e2

v30.1.3

Reverts

This release supports older BOSH directors that do not yet support -%> erb in templates. Thanks @svennela ! [PR 84]

Deployment

Deployment manifest snippet:

releases:
- name: docker
  version: 30.1.3
  url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.1.3/docker-30.1.3.tgz
  sha1: bd6f68b9981453fbc72f50c15119f16663f27bad

Or bosh2 operator patch file:

- type: replace
  path: /releases/name=docker
  value:
    version: 30.1.3
    url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.1.3/docker-30.1.3.tgz
    sha1: bd6f68b9981453fbc72f50c15119f16663f27bad

v30.1.2

Improvements

Optional cf-containers-broker property enable_host_port_envvar=true will provide DOCKER_HOST_PORT_nnnn for each exposed port. This allows a container to discover the host port for each internal port.

For example, if a redis image exposed port 6379, then inside each container it could look up DOCKER_HOST_PORT_6379 to find out what the external port mapping is.

Deployment

Deployment manifest snippet:

releases:
- name: docker
  version: 30.1.2
  url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.1.2/docker-30.1.2.tgz
  sha1: 3bb14274fa7b72856d2e026e89af9b552e6f735e

Or bosh2 operator patch file:

- type: replace
  path: /releases/name=docker
  value:
    version: 30.1.2
    url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.1.2/docker-30.1.2.tgz
    sha1: 3bb14274fa7b72856d2e026e89af9b552e6f735e

v30.1.1

Improvements

• option to not try to docker pull images in sanity-test-broker using fetch_images: false

Deployment

releases:
- name: docker
  version: 30.1.1
  url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.1.1/docker-30.1.1.tgz
  sha1: ddcf763c4e9ddfbdda253fd270ee99d4de081286

v30.1.0

Improvements

cf-containers-broker job:

• Binding credentials now include both host and hostname (previously was only the latter).

Deployment

Deployment manifest snippet:

releases:
- name: docker
  version: 30.1.0
  url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.1.0/docker-30.1.0.tgz
  sha1: bcc2e859836415c37b5a668eff5d17761e5321b5

Or bosh2 operator patch file:

- type: replace
  path: /releases/name=docker
  value:
    version: 30.1.0
    url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.1.0/docker-30.1.0.tgz
    sha1: bcc2e859836415c37b5a668eff5d17761e5321b5

v30.0.0 - bosh loves docker - everything is easier with bosh links, cloud-config, bosh2

Introduction

The docker-boshrelease was first introduced Apr 14, 2014 - three years ago - by the legendary @frodenas. It has been used in production systems for years - both running static clusters of containers, and as an API allowing dynamic provisioning/deprovisioning of containers (historically this was via Cloud Foundry) via the https://github.com/cloudfoundry-community/cf-containers-broker companion project.

To celebrate the dual birthdays - this repository turning three and BOSH itself turning five - we've done a major upgrade to this project to bring it into line with the exciting features in BOSH 2.0.

This release also includes the introduction of a companion project https://github.com/cloudfoundry-community/docker-broker-deployment - the one-stop shop for deploying the Open Service Broker API that can deploy anything as a service, via Docker!

The git commits + comments for this work is primarily in this PR #79

In the news/blog world:

• https://www.starkandwayne.com/blog/adding-docker-based-services-to-your-cloud-foundry-with-bosh2/

Improvements

• Security - Docker is now deployed with TLS certificates. This was made very simple to add thanks to bosh2 ability to generate certificates locally or via credhub.
• Simplicity - manifests/ subfolders should all work on any BOSH director - from local virtualbox to AWS/Azure/Google/OpenStack/Vsphere. Same manifest. Incredible. xoxo to BOSH 2.0.
• Clusters - the manifests/broker/docker-broker.yml manifest assumes you'll want many Docker VMs and so includes the cf-subway broker by default, and deploys 3 docker host VMs by default.
• BOSH 2.0 - you'll be fully supported by bosh2 CLI, BOSH Links, and BOSH Cloud Config. You'll feel cooler. More awesome. You'll probably be more generous and good spirited. You'll pick up little bits of trash that you see on the street. You'll probably become fitter and healthier too. I don't have these results demonstrated in the CI system so your milage may vary.
• CI - the whole project is now covered by a CI system.

How CI looks today:

Niceness

• When you SSH into a Docker VM, you will automatically have the docker CLI preconfigured to target the local Docker daemon.
• When you SSH into a Docker VM, you will have the visually delightful ctop CLI installed.

Assumptions

Version v30 and onwards makes the exciting assumptions:

• deployment user will be targeting a modern BOSH director (for example, see https://github.com/cloudfoundry/bosh-deployment)
• deployment user will be using bosh2 CLI https://github.com/cloudfoundry/bosh-cli/
• deployment BOSH director has/will be using cloud-config
• you are excited about all things BOSH 2 and are ready to move forward
• you might want to continue deploying any of the aged service images - so they've all been kepted; but if you'd like to help upgrade them please let me know!

Warnings

This release should be a drop-in upgrade for any systems running v29. I do suggest testing any upgrades on staging environments first. Please.

If you would like assistance or hand holding during this process, please let me know.

Many many of the BOSH job properties have changed or been simplified. For example, docker. prefixes have been removed. All property namespace prefixes are gone. Manifests are so much nicer now.

I highly recommend you move away from your current manifests to the new manifests which are deliciously simple.

Unchanged

• Still docker 1.13
• Static container definitions
• Service broker should run containers the same way it did before

Deployment

See https://github.com/cloudfoundry-community/docker-boshrelease/tree/master/manifests for usage scenarios and deployment instructions for each.

If you're deploying the Docker Broker system, it has its own dedicated repo to make life simpler for you - https://github.com/cloudfoundry-community/docker-broker-deployment

Deployment manifest snippet:

releases:
- name: docker
  version: 30.0.0
  url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.0.0/docker-30.0.0.tgz
  sha1: d0936ebf27b2d7950fcc9042720b6fd28bcb631b

Or bosh2 operator patch file:

- type: replace
  path: /releases/name=docker
  value:
    version: 30.0.0
    url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.0.0/docker-30.0.0.tgz
    sha1: d0936ebf27b2d7950fcc9042720b6fd28bcb631b

v30.0.0-rc.31

Improvements

TODO

Deployment

Deployment manifest snippet:

releases:
- name: docker
  version: 30.0.0-rc.31
  url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.0.0-rc.31/docker-30.0.0-rc.31.tgz
  sha1: f39aa1143c3ee10c821b5f5adb59b76aa293fbb3

Or bosh2 operator patch file:

- type: replace
  path: /releases/name=docker
  value:
    version: 30.0.0-rc.31
    url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.0.0-rc.31/docker-30.0.0-rc.31.tgz
    sha1: f39aa1143c3ee10c821b5f5adb59b76aa293fbb3

v30.0.0-rc.21

Improvements

TODO

Deployment

Deployment manifest snippet:

releases:
- name: docker
  version: 30.0.0-rc.21
  url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.0.0-rc.21/docker-30.0.0-rc.21.tgz
  sha1: 0fc0da5857884a7a98cb537540a88ef9d2e9efa3

Or bosh2 operator patch file:

- type: replace
  path: /releases/name=docker
  value:
    version: 30.0.0-rc.21
    url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.0.0-rc.21/docker-30.0.0-rc.21.tgz
    sha1: 0fc0da5857884a7a98cb537540a88ef9d2e9efa3

v30.0.0-rc.7

Improvements

Since v30.0.0-rc.3:

• Hard code broker-registrar release into manifests https://github.com/cloudfoundry-community/broker-registrar-boshrelease/releases/tag/v3.0.0
• Manifests for hostname routes via cf deployment's nats link
• No longer embedding routing; using external https://github.com/cloudfoundry-incubator/routing-release instead
• manifests/broker/deploy-all.sh convenience wrapper to deploy all manifests/broker/services/*.yml services

Deployment

Deployment manifest snippet:

releases:
- name: docker
  version: 30.0.0-rc.7
  url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.0.0-rc.7/docker-30.0.0-rc.7.tgz
  sha1: 4badb303131906a1fec3e2ed6eaaa39e66a55b56

Or bosh2 operator patch file:

- type: replace
  path: /releases/name=docker
  value:
    version: 30.0.0-rc.7
    url: https://github.com/cloudfoundry-community/docker-boshrelease/releases/download/v30.0.0-rc.7/docker-30.0.0-rc.7.tgz
    sha1: 4badb303131906a1fec3e2ed6eaaa39e66a55b56