Merge pull request #37 from lowescott/docker-ipvlan-l3

Commit files for IPVLAN L3 environment with Docker

docker-ipvlan-l3/README.md

@@ -0,0 +1,69 @@
+# Using IPVLAN L3 Interfaces with Docker Containers
+
+These files were created to allow users to use Vagrant ([http://www.vagrantup.com](http://www.vagrantup.com)) to build an environment for working with Docker containers using IPVLAN L3 interfaces (IPVLAN interfaces running in L3 mode instead of L2 mode). This configuration was tested using Vagrant 1.8.1, VMware Fusion 8.1.0, and version 4.0.5 of the Vagrant VMware plugin.
+
+## Contents
+
+* **docker-01-setup.sh**: This shell script configures the Docker host VM named "docker-01" with an experimental build of the Docker binary. No changes to this file are necessary.
+
+* **docker-02-setup.sh**: This shell script configures the Docker host VM named "docker-02" with an experimental build of the Docker binary. No changes to this file are necessary.
+
+* **machines.yml**: This is a YAML file containing the configuration data used by Vagrant when creating and provisioning VMs. This particular Vagrant environment requires four (4) values in this file for each VM: `name` (name to be assigned to the box as well as used for hostname), `box` (the name of the Vagrant box), `ram` (desired RAM), and `vcpu` (number of virtual CPUs).
+
+* **README.md**: The file you're currently reading.
+
+* **Vagrantfile**: This file is used by Vagrant to spin up the virtual machines for this environment. No changes need to be made to this document, as all the configuration data is found in other files (like `machines.yml`). However, if you are using a virtualization solution _other_ than VMware Fusion, you might need to make changes to this file.
+
+## Instructions
+
+These instructions assume you've already installed VMware Fusion, Vagrant, and the Vagrant VMware plugin. Please refer to the documentation for those products for more information on installation or configuration. Note that Internet access is required when using `vagrant up` to create this environment.
+
+1. Use `vagrant box add` to install a 64-bit Ubuntu 15.10 box. I have an Ubuntu 15.10 base box you can use; to use my base box, add the box with `vagrant box add slowe/ubuntu-15.10-server-amd64`.
+
+2. Place the files from the `docker-ipvlan-l3` directory of this GitHub repository into a directory on your local system. You can clone the entire "learning-tools" repository (using `git clone`) or just download the specific files from the the `docker-ipvlan-l3` folder.
+
+3. If necessary, edit `machines.yml` to specify the name of the Vagrant boxes downloaded in step 1. Editing this file is only necessary if you are _not_ using my base boxes. Please note that a box with a minimum of version 4.2 of the Linux kernel is needed.
+
+4. Run `vagrant up` to instantiate the learning environment. This will spin up two (2) VMs based on the Vagrant boxes you downloaded in step 1 and specified in `machines.yml` in step 3. Vagrant will also appropriately configure each VM and start the necessary services. Depending on the speed of your system and your Internet connection, this may take a few minutes.
+
+5. Use `vagrant ssh docker-01` to connect to the Docker host VM. Run `sudo docker pull alpine:latest` to pull down the latest Alpine image for Docker.
+
+6. While still logged into "docker-01", run this command to create a Docker network backed by the IPVLAN driver:
+
+        sudo docker network create -d ipvlan \
+        --subnet=10.1.100.0/24 --gateway=10.1.100.1 \
+        -o ipvlan_mode=l3 -o parent=ens33 ipvlan100
+
+7. In a separate terminal window, change to the directory where the files from the `docker-ipvlan-l3` folder are stored and run `vagrant ssh docker-02` to log into the second Docker host VM.
+
+8. Create the IPVLAN-backed Docker network:
+
+        sudo docker network create -d ipvlan \
+        --subnet=10.1.101.0/24 --gateway=10.1.101.1 \
+        -o ipvlan_mode=l3 -o parent=ens33 ipvlan101
+
+9. On `docker-01`, launch a "target" container to use in verifying connectivity:
+
+        sudo docker run --net=ipvlan100 --ip=10.1.100.10 -itd alpine /bin/sh
+
+10. From `docker-02`, use `ping` to try to connect to the "target" container on `docker-01`. The ping should fail.
+
+11. Still on `docker-02`, add a route to the "target" container:
+
+        ip route add 10.1.100.10/32 via 192.168.100.100 dev ens33
+
+12. Repeat step #10. The ping should succeed this time.
+
+13. On `docker-02`, launch a "target" container to use in verifying connectivity:
+
+        sudo docker run --net=ipvlan101 --ip=10.1.101.10 -itd alpine /bin/sh
+
+14. From `docker-01`, try to ping the "target" container you just launched in the previous step. The ping should fail.
+
+15. Add a route on `docker-01` to the "target" container you launched in step #13:
+
+        ip route add 10.1.101.10/32 via 192.168.100.101 dev ens33
+
+16. Repeat step #14. The connectivity test should succeed.
+
+You've just deployed IPVLAN L3 interfaces with Docker. Enjoy!

docker-ipvlan-l3/Vagrantfile

@@ -0,0 +1,66 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# Specify Vagrant version, Vagrant API version, and desired clone location
+Vagrant.require_version '>= 1.6.0'
+VAGRANTFILE_API_VERSION = '2'
+ENV['VAGRANT_DEFAULT_PROVIDER'] = 'vmware_fusion'
+ENV['VAGRANT_VMWARE_CLONE_DIRECTORY'] = '~/.vagrant'
+#ENV['VAGRANT_DEFAULT_PROVIDER'] = 'virtualbox'
+
+# Require 'yaml' module
+require 'yaml'
+
+# Read YAML file with VM details (box, CPU, RAM, IP addresses)
+machines = YAML.load_file(File.join(File.dirname(__FILE__), 'machines.yml'))
+
+# Create and configure the VMs
+Vagrant.configure(VAGRANTFILE_API_VERSION) do |config|
+
+  # Always use Vagrant's default insecure key
+  config.ssh.insert_key = false
+
+  # Iterate through entries in YAML file to create VMs
+  machines.each do |machine|
+    config.vm.define machine['name'] do |srv|
+
+      # Don't check for box updates
+      srv.vm.box_check_update = false
+      srv.vm.hostname = machine['name']
+      srv.vm.box = machine['box']
+
+      # Disable default synced folder
+      srv.vm.synced_folder '.', '/vagrant', disabled: true
+
+      # Assign additional private network, but don't auto-configure
+      srv.vm.network 'private_network', auto_config: false
+
+      # Configure CPU & RAM per settings in machines.yml (Fusion)
+      srv.vm.provider :vmware_fusion do |vmw|
+        vmw.vmx['memsize'] = machine['ram']
+        vmw.vmx['numvcpus'] = machine['vcpu']
+        if machine['nested'] == true
+          vmw.vmx['vhv.enable'] = 'TRUE'
+        end #if machine['nested']
+      end # srv.vm.provider vmware_fusion
+
+      # Configure CPU & RAM per settings in machines.yml (VirtualBox)
+      srv.vm.provider :virtualbox do |vb|
+        vb.memory = machine['ram']
+        vb.cpus = machine['vcpu']
+      end # srv.vm.provider virtualbox
+
+      # Provision 'docker-01'
+      if machine['name'] == 'docker-01'
+        srv.vm.provision 'docker'
+        srv.vm.provision 'shell', path: 'docker-01-setup.sh'
+      end # if machine['name']
+
+      # Provision 'docker-02'
+      if machine['name'] == 'docker-02'
+        srv.vm.provision 'docker'
+        srv.vm.provision 'shell', path: 'docker-02-setup.sh'
+      end # if machine['name']
+    end # config.vm.define
+  end # machines.each
+end # Vagrant.configure

docker-ipvlan-l3/docker-01-setup.sh

@@ -0,0 +1,32 @@
+#!/bin/bash
+
+# Provision secondary network interface
+sudo ip addr add 192.168.100.100/24 dev ens33
+sudo ip link set ens33 up
+
+# Install curl if needed
+if [[ ! -e /usr/bin/curl ]]; then
+  apt-get update
+  apt-get -yqq install curl
+fi
+
+if [[ ! -e /usr/local/bin/docker-latest ]]; then
+  # Get download of experimental Docker binary
+  curl -sLO https://experimental.docker.com/builds/Linux/x86_64/docker-latest
+
+  # Set properties on Docker binary
+  chmod a+x docker-latest
+
+  # Move etcd and etcdctl to /usr/local/bin
+  sudo mv docker-latest /usr/local/bin/
+
+  # Stop existing Docker daemon
+  sudo systemctl stop docker
+
+  # Substitute experimental Docker binary for existing version
+  sudo mv /usr/bin/docker /usr/bin/docker-old
+  sudo ln -s /usr/local/bin/docker-latest /usr/bin/docker
+
+  # Restart Docker service
+  sudo systemctl start docker
+fi

docker-ipvlan-l3/docker-02-setup.sh

@@ -0,0 +1,32 @@
+#!/bin/bash
+
+# Provision secondary network interface
+sudo ip addr add 192.168.100.101/24 dev ens33
+sudo ip link set ens33 up
+
+# Install curl if needed
+if [[ ! -e /usr/bin/curl ]]; then
+  apt-get update
+  apt-get -yqq install curl
+fi
+
+if [[ ! -e /usr/local/bin/docker-latest ]]; then
+  # Get download of experimental Docker binary
+  curl -sLO https://experimental.docker.com/builds/Linux/x86_64/docker-latest
+
+  # Set properties on Docker binary
+  chmod a+x docker-latest
+
+  # Move etcd and etcdctl to /usr/local/bin
+  sudo mv docker-latest /usr/local/bin/
+
+  # Stop existing Docker daemon
+  sudo systemctl stop docker
+
+  # Substitute experimental Docker binary for existing version
+  sudo mv /usr/bin/docker /usr/bin/docker-old
+  sudo ln -s /usr/local/bin/docker-latest /usr/bin/docker
+
+  # Restart Docker service
+  sudo systemctl start docker
+fi

docker-ipvlan-l3/machines.yml

@@ -0,0 +1,9 @@
+---
+- name: docker-01
+  box: slowe/ubuntu-15.10-server-amd64
+  ram: 1024
+  vcpu: 1
+- name: docker-02
+  box: slowe/ubuntu-15.10-server-amd64
+  ram: 1024
+  vcpu: 1