Dockerfile with OPNsense

Started by heavymeza, August 16, 2018, 12:58:55 PM

Previous topic - Next topic
Hi there, I was asked to write a Dockerfile that eventually will implement a OPNsense firewall in the future.
Has anyone idea how to achieve that? I have already "googled" it, however it is still not so clear for me. I have seen a couple of OPNsense files in Docker Hub, however they are kind of scripts and not full implementations.

Thanks in advance!
Cheers,
Luis.

It just does not work because it is not a single application (docker is designed for running single process applications). You need more something like LXC where a environment is running. OPNsense is an operating system, not an application.

August 16, 2018, 05:46:54 PM #2 Last Edit: August 16, 2018, 05:51:02 PM by qinohe
Hey Louis, Docker is container software to create separated 'space' to run apps like a webserver or browser.
In the future Docker may even become a hypervisor and this is probably what you want to use for OPNsense.

Have a look at the following to Wikipedia pages to get a more clear view about this.

Here you see in what category Docker is placed.
https://en.wikipedia.org/wiki/Comparison_of_platform_virtualization_software#See_also

The title of the page says it all
https://en.wikipedia.org/wiki/Operating-system-level_virtualization

Greetings mark

;) ninjad, I didn't see you already replied fabian

Quote from: fabian on August 16, 2018, 05:40:26 PM
It just does not work because it is not a single application (docker is designed for running single process applications). You need more something like LXC where a environment is running. OPNsense is an operating system, not an application.

Thanks for clarifying. I was taking a look and probably the most suitable would be to use "jails", the native virtualization technology for FreeBSD/OPNsense

Quote from: qinohe on August 16, 2018, 05:46:54 PM
Hey Louis, Docker is container software to create separated 'space' to run apps like a webserver or browser.
In the future Docker may even become a hypervisor and this is probably what you want to use for OPNsense.

Have a look at the following to Wikipedia pages to get a more clear view about this.

Here you see in what category Docker is placed.
https://en.wikipedia.org/wiki/Comparison_of_platform_virtualization_software#See_also

The title of the page says it all
https://en.wikipedia.org/wiki/Operating-system-level_virtualization

Greetings mark

;) ninjad, I didn't see you already replied fabian

Thank you mark! Now this is more clear for me, I will start using jails so let's see how it goes...

Hi Luis, well no, I mean you can use jails to containerize a FreeBSD OS, though, you don't want that..

What you want is to  emulate a complete computer, including hardware.

So, what you are looking for is a software/system like Virtualbox(oracle) or ESXi (VMware) or even XEN(Citrix), or a compairable one  :P

Good luck, mark