DevOps - Provisoinning

Author: PEM--

Vagrantfile

@@ -0,0 +1,20 @@
+hosts = {
+  "dev" => "192.168.1.50",
+  "pre" => "192.168.1.51"
+}
+
+Vagrant.configure(2) do |config|
+  config.vm.box = "ubuntu/vivid64"
+  config.ssh.insert_key = false
+  hosts.each do |name, ip|
+    config.vm.define name do |vm|
+      vm.vm.hostname = "%s" % name
+      # vm.vm.network "private_network", ip: ip
+      vm.vm.network "public_network", bridge: "en0: Wi-Fi (AirPort)", ip: ip
+      vm.vm.provider "virtualbox" do |v|
+        v.name = name
+      end
+      vm.vm.provision "shell", path: "provisioning.sh"
+    end
+  end
+end

postProvisioning.sh

@@ -0,0 +1,24 @@
+#!/bin/bash
+# Install Docker Machine
+#curl -L https://github.com/docker/machine/releases/download/v0.4.0/docker-machine_linux-amd64 | sudo tee /usr/local/bin/docker-machine > /dev/null
+#sudo chmod u+x /usr/local/bin/docker-machine
+
+# Install Firewall
+sudo apt-get install -y ufw
+yes | sudo ufw reset
+# Deny everything else
+sudo ufw default deny incoming
+# Allow outgoing traffic (for logs, updates, ...)
+sudo ufw default allow outgoing
+# Allow SSH
+sudo ufw allow ssh
+# Allow HTTP and WS
+sudo ufw allow 80/tcp
+# Allow HTTPS and WSS
+sudo ufw allow 443/tcp
+# Allow Docker daemon port and forwarding policy
+sudo ufw allow 2376/tcp
+#sudo sed -i -e "s/^DEFAULT_FORWARD_POLICY=\"DROP\"/DEFAULT_FORWARD_POLICY=\"ACCEPT\"/" /etc/default/ufw
+# Enable and reload
+yes | sudo ufw enable
+sudo ufw reload

provisioning.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+# Overriding bad Systemd default in Docker startup script
+sudo mkdir -p /etc/systemd/system/docker.service.d
+echo -e '[Service]\n# workaround to include default options\nEnvironmentFile=-/etc/default/docker\nExecStart=\nExecStart=/usr/bin/docker -d -H fd:// $DOCKER_OPTS' | sudo tee /etc/systemd/system/docker.service.d/ubuntu.conf
+# Set Docker daemon with the following properties:
+# * Daemon listen to external request and is exposed on port 2376, the default Docker port.
+# * Docker uses the AUFS driver for file storage.
+# * Daemon uses Docker's provided certification chain.
+# * Dameon has a generic label.
+# * Daemon is able to resolve DNS query using Google's DNS.
+echo 'DOCKER_OPTS="-H tcp://0.0.0.0:2376 -H unix:///var/run/docker.sock --storage-driver aufs --tlsverify --tlscacert /etc/docker/ca.pem --tlscert /etc/docker/server.pem --tlskey /etc/docker/server-key.pem --label provider=generic --dns 8.8.8.8 --dns 8.8.4.4"'  | sudo tee /etc/default/docker
+sudo systemctl daemon-reload
+sudo systemctl restart docker
+# Enable Docker on server reboot
+sudo systemctl enable docker
+# Remove and clean unused packages
+sudo apt-get autoremove -y
+sudo apt-get autoclean -y