| |
| # Copyright 2017-present Open Networking Foundation |
| # |
| # Licensed under the Apache License, Version 2.0 (the "License"); |
| # you may not use this file except in compliance with the License. |
| # You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| |
| |
| # ONOS dockerfile with XOS/CORD additions |
| |
| FROM {{ onos_docker_image }} |
| MAINTAINER Zack Williams <zdw@cs.arizona.edu> |
| |
| # Add SSL certs |
| COPY cord_root_ca.crt /usr/local/share/ca-certificates/cord_root_ca.crt |
| COPY cord_{{ site_name }}_im_ca.crt /usr/local/share/ca-certificates/cord_{{ site_name }}_im_ca.crt |
| RUN update-ca-certificates |
| |
| # Create Java KeyStore from certs |
| RUN openssl x509 -in /usr/local/share/ca-certificates/cord_root_ca.crt \ |
| -outform der -out /usr/local/share/ca-certificates/cord_root_ca.der && \ |
| openssl x509 -in /usr/local/share/ca-certificates/cord_{{ site_name }}_im_ca.crt \ |
| -outform der -out /usr/local/share/ca-certificates/cord_{{ site_name }}_im_ca.der && \ |
| keytool -import -noprompt -storepass {{ trust_store_pw }} -alias cord_root_ca \ |
| -file /usr/local/share/ca-certificates/cord_root_ca.der \ |
| -keystore /usr/local/share/ca-certificates/cord_ca_certs.jks && \ |
| keytool -import -noprompt -storepass {{ trust_store_pw }} -alias cord_{{ site_name }}_im_ca \ |
| -file /usr/local/share/ca-certificates/cord_{{ site_name }}_im_ca.der \ |
| -keystore /usr/local/share/ca-certificates/cord_ca_certs.jks |
| |
| # Let ONOS know where the keystore is |
| ENV JAVA_OPTS="-Djavax.net.ssl.trustStore=/usr/local/share/ca-certificates/cord_ca_certs.jks -Djavax.net.ssl.trustStorePassword={{ trust_store_pw }}" |
| |
| # Configure ONOS to log with log4j to ElasticStack |
| COPY org.ops4j.pax.logging.cfg /root/onos/apache-karaf-3.0.5/etc/org.ops4j.pax.logging.cfg |
| |