History

Julio Castillo 1e11c670f5 Update copyright to 2021		2021-02-15 09:38:10 +01:00
..
Dockerfile	Update copyright to 2021	2021-02-15 09:38:10 +01:00
README.md	Move top-level docker images folder to the onprem module (#96 )	2020-06-17 05:41:13 +02:00
cloudbuild.yaml	Update copyright to 2021	2021-02-15 09:38:10 +01:00
entrypoint.sh	Update copyright to 2021	2021-02-15 09:38:10 +01:00
ipsec-vti.sh	Update copyright to 2021	2021-02-15 09:38:10 +01:00

README.md

StrongSwan docker container

Build

gcloud builds submit . --config=cloudbuild.yaml

Docker compose example

version: "3"
services:
  vpn:
    image: gcr.io/pso-cft-fabric/strongswan:latest
    networks:
      default:
        ipv4_address: 192.168.0.2
    cap_add:
      - NET_ADMIN
    ports:
      - "500:500/udp"
      - "4500:4500/udp"
      - "179:179/tcp"
    privileged: true
    volumes:
      - "/lib/modules:/lib/modules:ro"
      - "/etc/localtime:/etc/localtime:ro"
      - "/var/lib/docker-compose/onprem/ipsec/ipsec.conf:/etc/ipsec.conf:ro"
      - "/var/lib/docker-compose/onprem/ipsec/ipsec.secrets:/etc/ipsec.secrets:ro"
      - "/var/lib/docker-compose/onprem/ipsec/vti.conf:/etc/strongswan.d/vti.conf:ro"
  bird:
    image: pierky/bird
    network_mode: service:vpn
    cap_add:
      - NET_ADMIN
      - NET_BROADCAST
      - NET_RAW
    privileged: true
    volumes:
      - "/var/lib/docker-compose/onprem/bird/bird.conf:/etc/bird/bird.conf:ro"