IBM MQ FARGATE ECS CONTAINER

[Sampath6677]

Hi, I'm not quite sure of the right place to ask about this. Out of curiosity asked i need to know how to configure ibm mq in fargate ecs container using developer license i tried by using this here is my docker file FROM ibmcom/mq:latest ENV LICENSE=accept ENV MQ_QMGR_NAME=QM2 VOLUME MQ_DEV EXPOSE 1414/tcp EXPOSE 9443/tcp CMD ["tail", "-f", "/dev/null"]

i got this error AMQ9645E: Certificate label 'ibmwebspheremqqm2' not found for channel '????'. [ArithInsert1(407), CommentInsert1
i am unable to login to ibm web console ,

i need step by step documentation for configuration and running ibm mq in fargate ecs container with developer license and logging to ibm web console , please help me in using this ibm mq in fargate ecs container thanks

[Sampath6677]

Hi @Arthur Barr arthurbarr , could u help in this above issue thanks

[d861je]

Hi - it is possible to run the MQ container in ECS Fargate however this is a completely different operational model, such as:

• Task Definition
• Run Task
• Service For instance, here is an example for a Task Definition (this assumes you are EFS):

  {
  "executionRoleArn": "$ecsTaskExecutionRoleArn",
  "containerDefinitions": [
      {
          "logConfiguration": {
              "logDriver": "awslogs",
              "options": {
                  "awslogs-group": "ibmmqfargate",
                  "awslogs-region": "eu-west-2",
                  "awslogs-stream-prefix": "ibmmq/fargate"
              }
          },
          "portMappings": [
              {
                  "hostPort": 9443,
                  "protocol": "tcp",
                  "containerPort": 9443
              },
              {
                  "hostPort": 1414,
                  "protocol": "tcp",
                  "containerPort": 1414
              }
          ],
          "environment": [
              {
                  "name": "LICENSE",
                  "value": "accept"
              },
              {
                  "name": "MQ_APP_PASSWORD",
                  "value": "password"
              },
              {
                  "name": "MQ_QMGR_NAME",
                  "value": "QM1"
              }
          ],
          "ulimits": [
              {
                  "name": "nofile",
                  "softLimit": 10240,
                  "hardLimit": 10240
              },
              {
                  "name": "nproc",
                  "softLimit": 4096,
                  "hardLimit": 4096
              }
          ],
          "user": "1001:0",
          "mountPoints": [
              {
                  "sourceVolume": "queuemanager",
                  "containerPath": "/mnt/mqm",
                  "readOnly": false
              }
          ],
          "image": "ibmcom/mq:9.2.3.0-r1-amd64",
          "healthCheck": {
              "command": [
                  "CMD-SHELL",
                  "chkmqhealthy || exit 1"
              ],
              "startPeriod": 300
          },
          "essential": true,
          "name": "ibmmq922"
      }
  ],
  "memory": "1024",
  "family": "ibmmq",
  "requiresCompatibilities": [
      "FARGATE"
  ],
  "networkMode": "awsvpc",
  "cpu": "512",
  "volumes": [
      {
          "efsVolumeConfiguration": {
              "transitEncryption": "ENABLED",
              "authorizationConfig": {
                  "iam": "DISABLED",
                  "accessPointId": "$awsaccesspoint"
              },
              "fileSystemId": "$awsefsid"
          },
          "name": "queuemanager"
      }
  ],
  "tags": [
     {
         "key": "productId",
         "value": " f3beb980b6ca487ea6a3db33262afa3c"
     }
  ]
  }

  If you are interested in licensing MQ in ECS Fargate (which is required for non-production and production workload) then please reach out to askmessaging@uk.ibm.om for details.

[Sampath6677]

@d861je , thanks for your reply ,can I know Nproc and product I'd and value you mentioned above used for ? , and I need to add is there any use of config.mqsc file here Thanks

[Sampath6677]

@d861je , i started the ecs fargate container with the above taskdefinition , getting this errors in logs of the container

2021-10-22T04:03:22.490Z AMQ8060I: IBM MQ queue manager 'QM1' started as a standby instance. [CommentInsert3(QM1)] 2021-10-22T04:03:41.796Z AMQ9645E: Certificate label 'ibmwebspheremqqm1' not found for channel '????'. [ArithInsert1(407), CommentInsert1(????), CommentInsert2(ibmwebspheremqqm1)] 2021-10-22T04:03:41.796Z AMQ9999E: Channel '????' can you please help , thanks

[d861je]

The above appears to suggest that you are trying to use TLS on a MQ channel, but you have not provided a key/trust store. This isn't really a ECS Fargate issue, simply that you either need to disable TLS on the channel, or provide and configure the required certificates.

[Sampath6677]

@d861je , I see the channel isn't starting and it is giving like ??? In the name of the channel , if possible ,can you provide me the step by step procedure for Ibmmq to be run in fargate without any certs , if certs required , can you please help Thanks