orangecloudfoundry/orange-cf-bosh-cli

Cloud Foundry Docker Bosh CLI

概述

cf-bosh-cli是一个集成多种CLI工具的Docker镜像，旨在通过容器化方式提供部署和管理Cloud Foundry及相关基础设施所需的各类命令行工具。容器暴露SSH端口，支持密码或RSA密钥认证。

已安装工具

通用工具

• apg - 自动密码生成器
• bosh - Bosh命令行工具（[***]
• bosh-gen - Bosh发布包创建工具（https://github.com/cloudfoundry-community/bosh-gen%EF%BC%89
• cf - Cloud Foundry命令行工具（https://github.com/cloudfoundry/cli%EF%BC%89
• credhub - Credhub命令行工具（https://github.com/cloudfoundry-incubator/credhub-cli%EF%BC%89
• fly - Concourse命令行工具（https://github.com/concourse/fly%EF%BC%89
• git - Git命令行工具
• jq - JSON处理工具（https://stedolan.github.io/jq/%EF%BC%89
• spruce - YAML模板工具，用于生成Bosh部署清单（https://github.com/geofffranks/spruce%EF%BC%89
• terraform - Terraform命令行工具（[***]
• uaac - Cloud Foundry UAA命令行工具（https://github.com/cloudfoundry/cf-uaac%EF%BC%89
• vendir - 定义并获取组件到目标目录的工具（https://github.com/vmware-tanzu/carvel-vendir/%EF%BC%89
• yarn - 包管理器（[***]

管理工具

• bbr - Bosh备份与恢复命令行工具（[***]
• gof3r - S3 bucket的快速、并行化流访问客户端（https://github.com/rlmcpherson/s3gof3r%EF%BC%89
• mc - Minio S3命令行工具（https://github.com/minio/mc%EF%BC%89
• mongo - MongoDB shell命令行工具（[***]
• mysqlsh - MySQL shell命令行工具（[***]
• redis - Redis命令行工具（[***]
• shield - Shield命令行工具（[***]

Kubernetes工具

• helm - Kubernetes包管理器（[***]
• kapp - Kubernetes YAML工具（https://github.com/k14s/kapp/%EF%BC%89
• klbd - Kubernetes镜像构建编排工具（https://github.com/k14s/kbld/%EF%BC%89
• kubectl - Kubernetes命令行工具（[***]
• kustomize - Kubernetes YAML文件模板自定义工具（https://github.com/kubernetes-sigs/kustomize/%EF%BC%89
• k9s - Kubernetes命令行工具（https://github.com/derailed/k9s%EF%BC%89
• svcat - Kubernetes服务目录命令行工具（https://github.com/kubernetes-sigs/service-catalog/%EF%BC%89
• ytt - YAML模板工具（https://github.com/k14s/ytt/%EF%BC%89
• velero - Kubernetes集群资源备份/恢复命令行工具（https://github.com/vmware-tanzu/velero%EF%BC%89

获取或构建镜像

获取镜像

从Docker Hub拉取镜像：

bash
docker pull orangecloudfoundry/orange-cf-bosh-cli:<image_tag>

构建镜像

克隆仓库：

bash
git clone https://github.com/orange-cloudfoundry/orange-cf-bosh-cli.git

构建镜像：

bash
docker build -t cf-bosh-cli:<image_tag> .

使用方法

注意：
连接容器后，可通过shell界面的tools命令查看已安装的CLI工具和别名列表。

作为独立容器使用（适用于简单Docker主机）

向容器提供公钥

启动镜像，注意将容器SSH端口（22）映射到主机端口：

bash
docker run --name bosh-cli -d -p 2222:22 -v /home/bosh -v /data -e "SSH_PUBLIC_KEY=<path_to_your_public_ssh-rsa_key>" orangecloudfoundry/orange-cf-bosh-cli

通过SSH登录容器：

bash
ssh -p 2222 -i <path_to_your_rsa_private_key> bosh@localhost

此时密码登录已完全禁用。默认情况下，容器重启或更新后，包含公钥的文件~/.ssh/authorized_keys会被覆盖。

使用Docker Bosh Release部署

另一种选择是通过"Docker Bosh Release"（https://github.com/cloudfoundry-community/docker-boshrelease%EF%BC%89%E9%83%A8%E7%BD%B2%E5%AE%B9%E5%99%A8%E3%80%82

以下示例中：

• 部署1个容器实例
• bosh账户的主目录是私有Docker卷
• /data目录是共享Docker卷（来自名为"data_container"的容器）
• 第一个容器提供了公钥

Bosh部署清单示例：

yaml
deployment_name = 'bosh-cli'
static_ip = 'xx.xx.xx.xx'
dns_servers = 'xx.xx.xx.xx'
http_proxy = 'http://proxy:3128'
https_proxy = 'http://proxy:3128'
docker_image = 'orangecloudfoundry/orange-cf-bosh-cli'
docker_tag = 'latest'
---
name: <deployment_name>
director_uuid: <director_uuid>

releases:
 - name: docker
   version: latest

compilation:
  workers: 1
  network: default
  reuse_compilation_vms: true
  cloud_properties:
    cpu: 1
    disk: 8096
    ram: 2048

update:
  canaries: 0
  canary_watch_time: 30000-1200000
  update_watch_time: 30000-1200000
  max_in_flight: 32
  serial: false

networks:
- name: default
  type: manual
  subnets:
    - range: xx.xx.xx.xx/xx
      reserved:
      - xx.xx.xx.xx-xx.xx.xx.xx
      static:
      - <static_ip>
      gateway: xx.xx.xx.xx
      dns: [<dns_servers>]
      cloud_properties:
        name: NET

resource_pools:
- name: default
  stemcell:
    name: xxx
    version: latest
  network: default
  cloud_properties:
    ram: 512
    disk: 4_096
    cpu: 2

jobs:
  - name: bosh-cli
    templates:
      - name: docker
      - name: containers
    instances: 1
    resource_pool: default
    persistent_disk: 102_400
    networks:
      - name: default
        default: [dns, gateway]
        static_ips:
          - <static_ip>

properties:
  containers:
  - name: data_container
    image: <docker_image>:<docker_tag>
    bind_volumes:
    - "/data"
    volumes:
    - "/etc/ssl/certs:/etc/ssl/certs:ro"
    - "/var/vcap/data/tmp/bosh-cli:/var/tmp/bosh-cli:ro"

  - name: user1_bosh_cli
    image: <docker_image>:<image_tag>
    hostname: user1_bosh_cli
    env_vars:
    - "SSH_PUBLIC_KEY=<your_ssh-rsa_public_key>"
    bind_ports:
    - "2222:22"
    volumes:
    - /home/bosh
    depends_on:
    - data_container
    volumes_from:
    - data_container

  - name: user2_bosh_cli
    image: <docker_image>:<image_tag>
    hostname: user2_bosh_cli
    env_vars:
    - "SSH_PUBLIC_KEY=<your_ssh-rsa_public_key>"
    bind_ports:
    - "2223:22"
    volumes:
    - /home/bosh
    depends_on:
    - data_container
    volumes_from:
    - data_container

通过SSH登录目标容器：

bash
ssh -i <path_to_your_rsa_private_key> -p 2222 bosh@docker.bosh.release.deployment

（将docker.bosh.release.deployment替换为使用Bosh Release部署的Docker主机的IP或DNS名称）