OPNsense Forum

English Forums => General Discussion => Topic started by: heavymeza on August 16, 2018, 12:58:55 pm

Title: Dockerfile with OPNsense
Post by: heavymeza on August 16, 2018, 12:58:55 pm

Hi there, I was asked to write a Dockerfile that eventually will implement a OPNsense firewall in the future.
Has anyone idea how to achieve that? I have already "googled" it, however it is still not so clear for me. I have seen a couple of OPNsense files in Docker Hub, however they are kind of scripts and not full implementations.

Thanks in advance!
Cheers,
Luis.

Title: Re: Dockerfile with OPNsense
Post by: fabian on August 16, 2018, 05:40:26 pm

It just does not work because it is not a single application (docker is designed for running single process applications). You need more something like LXC where a environment is running. OPNsense is an operating system, not an application.

Title: Re: Dockerfile with OPNsense
Post by: qinohe on August 16, 2018, 05:46:54 pm

Hey Louis, Docker is container software to create separated 'space' to run apps like a webserver or browser.
In the future Docker may even become a hypervisor and this is probably what you want to use for OPNsense.

Have a look at the following to Wikipedia pages to get a more clear view about this.

Here you see in what category Docker is placed.
https://en.wikipedia.org/wiki/Comparison_of_platform_virtualization_software#See_also

The title of the page says it all
https://en.wikipedia.org/wiki/Operating-system-level_virtualization

Greetings mark

;) ninjad, I didn't see you already replied fabian

Title: Re: Dockerfile with OPNsense
Post by: heavymeza on September 10, 2018, 06:26:34 pm

Quote from: fabian on August 16, 2018, 05:40:26 pm

It just does not work because it is not a single application (docker is designed for running single process applications). You need more something like LXC where a environment is running. OPNsense is an operating system, not an application.

Thanks for clarifying. I was taking a look and probably the most suitable would be to use "jails", the native virtualization technology for FreeBSD/OPNsense

Title: Re: Dockerfile with OPNsense
Post by: heavymeza on September 10, 2018, 06:27:50 pm

Quote from: qinohe on August 16, 2018, 05:46:54 pm

Hey Louis, Docker is container software to create separated 'space' to run apps like a webserver or browser.
In the future Docker may even become a hypervisor and this is probably what you want to use for OPNsense.

Have a look at the following to Wikipedia pages to get a more clear view about this.

Here you see in what category Docker is placed.
https://en.wikipedia.org/wiki/Comparison_of_platform_virtualization_software#See_also

The title of the page says it all
https://en.wikipedia.org/wiki/Operating-system-level_virtualization

Greetings mark

;) ninjad, I didn't see you already replied fabian

Thank you mark! Now this is more clear for me, I will start using jails so let's see how it goes...

Title: Re: Dockerfile with OPNsense
Post by: qinohe on September 11, 2018, 02:11:09 pm

Hi Luis, well no, I mean you can use jails to containerize a FreeBSD OS, though, you don't want that..

What you want is to  emulate a complete computer, including hardware.

So, what you are looking for is a software/system like Virtualbox(oracle) or ESXi (VMware) or even XEN(Citrix), or a compairable one  :P

Good luck, mark