Commit 0551f36d by Toshio Kuratomi

Have selinux allow docker<=>nginx communication

parent cfda5690
...@@ -72,5 +72,8 @@ ...@@ -72,5 +72,8 @@
that: that:
- "'hello world' in docker_output.stdout_lines" - "'hello world' in docker_output.stdout_lines"
- name: Remove the busybox image from the local docker - name: Remove containers
shell: "docker rm $(docker ps -aq)"
- name: Remove all images from the local docker
shell: "docker rmi -f $(docker images -q)" shell: "docker rmi -f $(docker images -q)"
...@@ -90,6 +90,20 @@ ...@@ -90,6 +90,20 @@
that: that:
- "{{ docker_output.stdout_lines| length }} <= 1" - "{{ docker_output.stdout_lines| length }} <= 1"
#
# Private registry secured with an SSL proxy
#
- name: Set selinux to allow docker to connect to nginx
seboolean:
name: docker_connect_any
state: yes
- name: Set selinux to allow nginx to connect to docker
seboolean:
name: httpd_can_network_connect
state: yes
- name: Setup nginx with a user/password - name: Setup nginx with a user/password
copy: copy:
src: docker-registry.htpasswd src: docker-registry.htpasswd
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment