container-openvpn/Dockerfile

# Original credit: https://github.com/jpetazzo/dockvpn

# Leaner build then Ubunutu
FROM alpine:3.2

MAINTAINER Kyle Manna <kyle@kylemanna.com>

RUN apk update && \
    apk add openvpn iptables curl bash && \
    rm -rf /tmp/* /var/tmp/* /var/cache/apk/*

RUN mkdir -p /usr/local/share/easy-rsa && cd /usr/local/share/easy-rsa && \
    curl -L https://github.com/OpenVPN/easy-rsa/archive/v3.0.0.tar.gz | tar xzf - easy-rsa-3.0.0/easyrsa3 && \
    mv easy-rsa-3.0.0/easyrsa3 . && rmdir easy-rsa-3.0.0 && \
    ln -s /usr/local/share/easy-rsa/easyrsa3/easyrsa /usr/local/bin

# Needed by scripts
ENV OPENVPN /etc/openvpn
ENV EASYRSA /usr/local/share/easy-rsa/easyrsa3
ENV EASYRSA_PKI $OPENVPN/pki
ENV EASYRSA_VARS_FILE $OPENVPN/vars

VOLUME ["/etc/openvpn"]

# Internally uses port 1194/udp, remap using `docker run -p 443:1194/tcp`
EXPOSE 1194/udp

WORKDIR /etc/openvpn
CMD ["ovpn_run"]

ADD ./bin /usr/local/bin
RUN chmod a+x /usr/local/bin/*
Dockerfile: Add MAINTAINER line * Add maintrainer line and credit jpetazzo 2014-06-04 03:35:44 +00:00			`# Original credit: https://github.com/jpetazzo/dockvpn`

Dockerfile: Switch to leaner Debian image * Debian testing/Jessie is approximately 30% smaller the Ubuntu, use that instead. 2014-06-04 18:42:37 +00:00			`# Leaner build then Ubunutu`
alpine: Use alpine as base image instead of Debian * Debian Jessie -> Alpine 3.2: 150MB -> 15MB 2015-09-08 02:55:12 +00:00			`FROM alpine:3.2`
Dockerfile: Add MAINTAINER line * Add maintrainer line and credit jpetazzo 2014-06-04 03:35:44 +00:00
			`MAINTAINER Kyle Manna <kyle@kylemanna.com>`

alpine: Use alpine as base image instead of Debian * Debian Jessie -> Alpine 3.2: 150MB -> 15MB 2015-09-08 02:55:12 +00:00			`RUN apk update && \`
			`apk add openvpn iptables curl bash && \`
			`rm -rf /tmp/* /var/tmp/* /var/cache/apk/*`
openvpn.sh: Add wrapper script * Add the beginning of a wrapper script that will handle cert generation and OpenVPN invocation. 2014-06-04 03:54:47 +00:00
alpine: Use alpine as base image instead of Debian * Debian Jessie -> Alpine 3.2: 150MB -> 15MB 2015-09-08 02:55:12 +00:00			`RUN mkdir -p /usr/local/share/easy-rsa && cd /usr/local/share/easy-rsa && \`
			`curl -L https://github.com/OpenVPN/easy-rsa/archive/v3.0.0.tar.gz \| tar xzf - easy-rsa-3.0.0/easyrsa3 && \`
			`mv easy-rsa-3.0.0/easyrsa3 . && rmdir easy-rsa-3.0.0 && \`
Dockerfile: Streamline tarball extraction * No point in writing it to the disk and then deleting it * Extract it in place 2015-09-08 02:21:07 +00:00			`ln -s /usr/local/share/easy-rsa/easyrsa3/easyrsa /usr/local/bin`
openvpn.sh: Add wrapper script * Add the beginning of a wrapper script that will handle cert generation and OpenVPN invocation. 2014-06-04 03:54:47 +00:00
Dockerfile: Add ENV configuration * Add ENV configuration options to Dockerfile as opposed to keeping in the wrapper script. * First step to splitting up openvpn.sh in to smaller scripts. 2014-06-04 17:52:59 +00:00			`# Needed by scripts`
			`ENV OPENVPN /etc/openvpn`
			`ENV EASYRSA /usr/local/share/easy-rsa/easyrsa3`
			`ENV EASYRSA_PKI $OPENVPN/pki`
			`ENV EASYRSA_VARS_FILE $OPENVPN/vars`

Dockerfile: Add EasyRSA-3 support * EasyRSA v3 is preferred over v2 because it includes support for elliptic curves. 2014-06-04 04:10:55 +00:00			`VOLUME ["/etc/openvpn"]`
openvpn.sh: Add wrapper script * Add the beginning of a wrapper script that will handle cert generation and OpenVPN invocation. 2014-06-04 03:54:47 +00:00
Dockerfile: Clarify port mapping * Extend comment about port mapping since everyone seems to want to run on port 443/tcp. * Accept that nobody (except the already competent) will read the comment and ask anyway. 2015-06-22 05:55:16 +00:00			# Internally uses port 1194/udp, remap using `docker run -p 443:1194/tcp`
Dockerfile: Remove unused ports * These ports are unused, remove them to reduce confusion. 2014-06-04 16:30:04 +00:00			`EXPOSE 1194/udp`
openvpn.sh: Add wrapper script * Add the beginning of a wrapper script that will handle cert generation and OpenVPN invocation. 2014-06-04 03:54:47 +00:00
Dockerfile: Set WORKDIR to /etc/openvpn * Set WORKDIR to simply admin when I run cmd `bash` * Add comment on port 2014-07-06 17:55:17 +00:00			`WORKDIR /etc/openvpn`
openvpn.sh: Split in to smaller scripts * Split soon to be massive wrapper into smaller managable scripts. * Re-organized Dockerfile to exploit cache when rebuilding 2014-06-04 18:13:59 +00:00			`CMD ["ovpn_run"]`

			`ADD ./bin /usr/local/bin`
Dockerfile: Chmod everything in /usr/local/bin * Keep it simple. * Nothing should ever be put in bin that isn't excutable. 2015-09-08 02:21:55 +00:00			`RUN chmod a+x /usr/local/bin/*`