Connecting to a TLS protected Docker server

[kennu]

I have a private Docker server protected by a TLS certificate. I use these options to connect:

docker --tls --tlscert=$HOME/.docker/client.crt --tlskey=$HOME/.docker/client.key

Is this possible with Fig? I couldn't find any option to do it.

[howitzers]

I looked and it's not supported in the current docker python driver code. It's http-only.

This really should be supported though, since it's the only sane way to do auth to a docker remote. Preferably with the same flags docker uses.

Doesn't seem like too much work to add an https-flavor adapter. I might end up opening a PR.

[dnephin]

It actually is supported in the docker-py client as of version 0.3.3-dev , see docker/docker-py#250. Unfortunately fig has a vendored copy of docker-py that is a couple months old.

I'd like to call out #375 which was never merged, and actually resolves this situation.

[howitzers]

Cool. +1 for the devendor (I agree with you).

After that, it's just a small shim to tramp in an env var or something to the py client for the key/cert paths and it works clean (checked on my fork).

Hopefully your PR goes in.

[joemiller]

+1. would love to see this feature too

[jkingyens]

@howitzers I added the same thing (I couldn't find your fork) but I am having difficulty with streaming pseudo ttys. I think the dockerpty python module needs to be updated to support docker-py returning these ssl.SSLSockets instead of plain sockets objects from the attach_socket() method. Without this support, dockerpty crashes with:

Traceback (most recent call last):
File "/usr/local/bin/fig", line 9, in
load_entry_point('fig==0.5.2', 'console_scripts', 'fig')()
File "/Library/Python/2.7/site-packages/fig/cli/main.py", line 30, in main
command.sys_dispatch()
File "/Library/Python/2.7/site-packages/fig/cli/docopt_command.py", line 21, in sys_dispatch
self.dispatch(sys.argv[1:], None)
File "/Library/Python/2.7/site-packages/fig/cli/command.py", line 30, in dispatch
super(Command, self).dispatch(_args, *_kwargs)
File "/Library/Python/2.7/site-packages/fig/cli/docopt_command.py", line 24, in dispatch
self.perform_command(_self.parse(argv, global_options))
File "/Library/Python/2.7/site-packages/fig/cli/command.py", line 51, in perform_command
handler(project, command_options)
File "/Library/Python/2.7/site-packages/fig/cli/main.py", line 295, in run
dockerpty.start(project.client, container.id)
File "/Library/Python/2.7/site-packages/dockerpty/init.py", line 27, in start
PseudoTerminal(client, container).start()
File "/Library/Python/2.7/site-packages/dockerpty/pty.py", line 144, in start
flags = [io.set_blocking(p, False) for p in pumps]
File "/Library/Python/2.7/site-packages/dockerpty/io.py", line 31, in set_blocking
old_flag = fcntl.fcntl(fd, fcntl.F_GETFL)
File "/Library/Python/2.7/site-packages/dockerpty/io.py", line 248, in fileno
return self.from_stream.fileno()
File "/Library/Python/2.7/site-packages/dockerpty/io.py", line 101, in fileno
return self.fd.fileno()
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/socket.py", line 224, in meth
return getattr(self._sock,name)(_args)
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/socket.py", line 170, in _dummy
raise error(EBADF, 'Bad file descriptor')
socket.error: [Errno 9] Bad file descriptor

[mosquito]

This may be fixed by that #977

[dnephin]

This has been supported for a while http://docs.docker.com/compose/reference/overview/#environment-variables