Cloud Foundry Docker Bosh cli

cf-bosh-cli is used to deploy several cli tools through docker image.
The container expose ssh port. Password or key (rsa only) authentication is supported.

Installed tools

Bosh tools

• bbr - Bosh Backup and Restore cli (http://docs.cloudfoundry.org/bbr/)
• bosh - Bosh cli (https://bosh.io/docs/cli-v2.html)
• bosh-gen - Bosh releases creation (https://github.com/cloudfoundry-community/bosh-gen)
• cf - Cloud Foundry cli (https://github.com/cloudfoundry/cli)
• credhub - Credhub cli (https://github.com/cloudfoundry-incubator/credhub-cli)
• fly - Concourse cli (https://github.com/concourse/fly)
• uaac - Cloud Foundry UAA cli (https://github.com/cloudfoundry/cf-uaac)
• shield - Shield cli (https://docs.pivotal.io/partners/starkandwayne-shield/)

Kubernetes tools

• argo - Kubernetes workflow management (https://argoproj.github.io/argo-workflows/)
• cilium - Kubernetes cilium network management (https://github.com/cilium/cilium-cli)
• crossplane - Kubernetes crossplane (https://docs.crossplane.io/latest/cli)
• flux - Kubernetes Gitops management (https://fluxcd.io/docs/cmd/)
• helm - Kubernetes Package Manager (https://docs.helm.sh/)
• hubble - Kubernetes Monitoring management (https://github.com/cilium/hubble/)
• kapp - Kubernetes YAML tool (https://github.com/k14s/kapp/)
• klbd - Kubernetes image build orchestrator tool (https://github.com/k14s/kbld/)
• kubectl - Kubernetes cli (https://kubernetes.io/docs/reference/generated/kubectl/overview/)
• kyverno Kubernetes policy engine (https://github.com/kyverno/kyverno/)
• k9s - Kubernetes cli (https://github.com/derailed/k9s)
• oc - Openshift cli (https://docs.openshift.com/dedicated/welcome/)

Other tools

• cmctl - Cert-manager cli (https://github.com/cert-manager/cmctl)
• gcloud - Google Cloud Platform cli (https://cloud.google.com/sdk/gcloud)
• git - Git cli
• git-filter-repo - Git rewriting history tool (https://github.com/newren/git-filter-repo)
• govc - Vsphere cli (https://github.com/vmware/govmomi/tree/master/govc/)
• mc - Minio S3 cli (https://github.com/minio/mc)
• jq - JSON processing tool (https://stedolan.github.io/jq/)
• mdless - Provides a formatted and highlighted view of Markdown files in Terminal (https://github.com/ttscoff/mdless)
• mongo - MongoDB shell cli (https://docs.mongodb.com/manual/mongo/)
• mysqlsh - MySQL shell cli (https://dev.mysql.com/doc/mysql-shell-excerpt/5.7/en/)
• redis - Redis cli (https://redis.io/topics/rediscli/)
• spruce - YAML templating tool, for Bosh deployment manifests generation (https://github.com/geofffranks/spruce)
• terraform - Terraform cli (https://www.terraform.io/)
• vendir - Define and fetch components to target directory (https://github.com/vmware-tanzu/carvel-vendir/)
• yarn - Package manager (https://yarnpkg.com/fr/)
• ytt - YAML Templating Tool (https://github.com/k14s/ytt/)

How to get it or build it

How to get it

Pull the image from github container registry:
docker pull ghcr.io/orange-cloudfoundry/orange-cf-bosh-cli:

How to build it

Clone the repository:
git clone https://github.com/orange-cloudfoundry/orange-cf-bosh-cli.git

Then, build the image:
docker build -t cf-bosh-cli: .

How to use it

Note:
When connected, you can see cli/tools/aliases list with tools command from shell interface.

How to use as standalone container (if you have a simple docker host)

With public ssh key provided to the container

Launch the image (don't miss to assign an host port to the container ssh port 22) :
docker run --name bosh-cli -d -p 2222:22 -v /home/bosh -v /data -e "SSH_PUBLIC_KEY=" orangecloudfoundry/orange-cf-bosh-cli

Then, log into the container with ssh :
ssh -p 2222 -i bosh@localhost

The password is completely disabled. By default, the file containing the public key ~/.ssh/authorized_keys is overwrited after container restart or update.

How to use it using "Docker Bosh Release"

Another option is to deploy the container threw the "Docker Bosh Release" (https://github.com/cloudfoundry-community/docker-boshrelease).

In the following example:

• We deploy 1 instance of the container.
• The homedirectory of the bosh account is a private docker volume.
• The directory /data is a shared docker volume (from the container called "data_container").
• The first container has a provided public key.

Bosh deployment manifest exmple:

deployment_name = 'bosh-cli'
static_ip = 'xx.xx.xx.xx'
dns_servers = 'xx.xx.xx.xx'
http_proxy = 'http://proxy:3128'
https_proxy = 'http://proxy:3128'
docker_image = 'orangecloudfoundry/orange-cf-bosh-cli'
docker_tag = 'latest'
---
name: <deployment_name>
director_uuid: <director_uuid>

releases:
 - name: docker
   version: latest

compilation:
  workers: 1
  network: default
  reuse_compilation_vms: true
  cloud_properties:
    cpu: 1
    disk: 8096
    ram: 2048

update:
  canaries: 0
  canary_watch_time: 30000-1200000
  update_watch_time: 30000-1200000
  max_in_flight: 32
  serial: false

networks:
- name: default
  type: manual
  subnets:
    - range: xx.xx.xx.xx/xx
      reserved:
      - xx.xx.xx.xx-xx.xx.xx.xx
      static:
      - <static_ip>
      gateway: xx.xx.xx.xx
      dns: [<dns_servers>]
      cloud_properties:
        name: NET

resource_pools:
- name: default
  stemcell:
    name: xxx
    version: latest
  network: default
  cloud_properties:
    ram: 512
    disk: 4_096
    cpu: 2

jobs:
  - name: bosh-cli
    templates:
      - name: docker
      - name: containers
    instances: 1
    resource_pool: default
    persistent_disk: 102_400
    networks:
      - name: default
        default: [dns, gateway]
        static_ips:
          - <static_ip>

properties:
  containers:
  - name: data_container
    image: <docker_image>:<docker_tag>
    bind_volumes:
    - "/data"
    volumes:
    - "/etc/ssl/certs:/etc/ssl/certs:ro"
    - "/var/vcap/data/tmp/bosh-cli:/var/tmp/bosh-cli:ro"

  - name: user1_bosh_cli
    image: <docker_image>:<image_tag>
    hostname: user1_bosh_cli
    env_vars:
    - "SSH_PUBLIC_KEY=<your_ssh-rsa_public_key>"
    bind_ports:
    - "2222:22"
    volumes:
    - /home/bosh
    depends_on:
    - data_container
    volumes_from:
    - data_container

  - name: user2_bosh_cli
    image: <docker_image>:<image_tag>
    hostname: user2_bosh_cli
    env_vars:
    - "SSH_PUBLIC_KEY=<your_ssh-rsa_public_key>"
    bind_ports:
    - "2223:22"
    volumes:
    - /home/bosh
    depends_on:
    - data_container
    volumes_from:
    - data_container

Then, log into the container you want with ssh :
ssh -i -p 2222 bosh@docker.bosh.release.deployment

To log into first container (replace docker.bosh.release.deployment with IP or dns name of docker host deployed using bosh release).

Appendices

k9s hotkeys

k9s shorcuts