Configure Docker Daemon with TLS Support

You need some steps to configure Docker daemon with TLS, because Barge has no TLS support by default.

Scenario

1. Boot up a Barge VM without TLS
2. Download generate_cert
3. Generate certificates with generate_cert
4. Set TLS parameters for Docker daemon into /etc/default/docker.
5. Restart the Docker daemon

Automation with Vagrant

Vagrant.configure(2) do |config|
  config.vm.define "barge-secure"

  config.vm.box = "ailispaw/barge"

  config.vm.network :forwarded_port, guest: 2375, host: 2375, auto_correct: true, disabled: true
  config.vm.network :forwarded_port, guest: 2376, host: 2376, auto_correct: true

  config.vm.synced_folder ".", "/vagrant"

  config.vm.provision :shell, path: "generate_certs.sh"

  config.vm.provision :shell do |sh|
    sh.privileged = false
    sh.inline = <<-EOT
      cp -R ~/.docker /vagrant/
      sudo /etc/init.d/docker restart
    EOT
  end
end

$ vagrant up

You can get certificates for Docker client at ./.docker/.

$ export DOCKER_HOST=tcp://localhost:2376
$ export DOCKER_CERT_PATH=./.docker
$ export DOCKER_TLS_VERIFY=true
$ docker version
Client:
 Version:      1.10.3
 API version:  1.22
 Go version:   go1.5.3
 Git commit:   20f81dd
 Built:        Thu Mar 10 21:49:11 2016
 OS/Arch:      darwin/amd64

Server:
 Version:      1.10.3
 API version:  1.22
 Go version:   go1.7.5
 Git commit:   20f81dd
 Built:        Sun Mar 26 21:41:23 UTC 2017
 OS/Arch:      linux/amd64

Licenses

• generate_certs.sh based on boot2docker
  Copyright 2014 Docker, Inc.
  Licensed under the Apache License, Version 2.0
  https://github.com/boot2docker/boot2docker/blob/master/LICENSE

• generate_cert
  Copyright 2014 Sven Dowideit
  Licensed under the Apache License, Version 2.0
  https://github.com/SvenDowideit/generate_cert/blob/master/LICENSE