build on host net

Signed-off-by: Ava Hahn <a.hahn@f5.com>

compose.yaml

@@ -2,6 +2,7 @@ services:
   kasvc-0: &kasvc
     build:
       context: kasvc
+      network: host
       platforms:
         - linux/x86_64
     platform: linux/x86_64
@@ -53,6 +54,7 @@ services:
   kaproxy:
     build:
       context: kaproxy
+      network: host
       platforms:
         - linux/x86_64
     platform: linux/x86_64
@@ -68,6 +70,7 @@ services:
   kaclient:
     build:
       context: kaclient
+      network: host
       platforms:
         - linux/x86_64
     platform: linux/x86_64

kaclient/Dockerfile

@@ -1,6 +1,6 @@
 FROM archlinux:latest
-RUN pacman -Syyu --noconfirm
+
-RUN pacman -S curl --noconfirm
+RUN pacman -Sy curl --noconfirm
 
 COPY run.sh /
 CMD ["/run.sh"]

kaproxy/Dockerfile

@@ -12,6 +12,87 @@ RUN auto/configure \
 RUN make
 RUN make install
 COPY nginx.conf /
+WORKDIR /
+
+RUN openssl req -x509 \
+	-newkey rsa:4096  \
+	-keyout key0.pem  \
+	-out cert0.pem    \
+	-sha256 -nodes    \
+	-days 3650        \
+	-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
+
+RUN openssl req -x509 \
+	-newkey rsa:4096  \
+	-keyout key1.pem  \
+	-out cert1.pem    \
+	-sha256 -nodes    \
+	-days 3650        \
+	-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
+
+RUN openssl req -x509 \
+	-newkey rsa:4096  \
+	-keyout key2.pem  \
+	-out cert2.pem    \
+	-sha256 -nodes    \
+	-days 3650        \
+	-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
+
+RUN openssl req -x509 \
+	-newkey rsa:4096  \
+	-keyout key3.pem  \
+	-out cert3.pem    \
+	-sha256 -nodes    \
+	-days 3650        \
+	-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
+
+RUN openssl req -x509 \
+	-newkey rsa:4096  \
+	-keyout key4.pem  \
+	-out cert4.pem    \
+	-sha256 -nodes    \
+	-days 3650        \
+	-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
+
+RUN openssl req -x509 \
+	-newkey rsa:4096  \
+	-keyout key5.pem  \
+	-out cert5.pem    \
+	-sha256 -nodes    \
+	-days 3650        \
+	-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
+
+RUN openssl req -x509 \
+	-newkey rsa:4096  \
+	-keyout key6.pem  \
+	-out cert6.pem    \
+	-sha256 -nodes    \
+	-days 3650        \
+	-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
+
+RUN openssl req -x509 \
+	-newkey rsa:4096  \
+	-keyout key7.pem  \
+	-out cert7.pem    \
+	-sha256 -nodes    \
+	-days 3650        \
+	-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
+
+RUN openssl req -x509 \
+	-newkey rsa:4096  \
+	-keyout key8.pem  \
+	-out cert8.pem    \
+	-sha256 -nodes    \
+	-days 3650        \
+	-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
+
+RUN openssl req -x509 \
+	-newkey rsa:4096  \
+	-keyout key9.pem  \
+	-out cert9.pem    \
+	-sha256 -nodes    \
+	-days 3650        \
+	-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
 
 COPY dhparam.pem /
 COPY www.example.com.crt /

kaproxy/nginx.conf

@@ -15,44 +15,65 @@ http {
 		ssl_certificate /www.example.com.crt;
 		ssl_certificate_key /www.example.com.key;
 		access_log /tmp/access.log;
+		proxy_socket_keepalive on;
 
 		location /0 {
+			proxy_ssl_certificate /cert0.pem;
+			proxy_ssl_certificate_key /key0.pem;
 			proxy_pass http://kasvc-0:8080;
 		}
 
 		location /1 {
+			proxy_ssl_certificate /cert1.pem;
+			proxy_ssl_certificate_key /key1.pem;
 			proxy_pass http://kasvc-1:8080;
 		}
 
 		location /2 {
+			proxy_ssl_certificate /cert2.pem;
+			proxy_ssl_certificate_key /key2.pem;
 			proxy_pass http://kasvc-2:8080;
 		}
 
 		location /3 {
+			proxy_ssl_certificate /cert3.pem;
+			proxy_ssl_certificate_key /key3.pem;
 			proxy_pass http://kasvc-3:8080;
 		}
 
 		location /4 {
+			proxy_ssl_certificate /cert4.pem;
+			proxy_ssl_certificate_key /key4.pem;
 			proxy_pass http://kasvc-4:8080;
 		}
 
 		location /5 {
+			proxy_ssl_certificate /cert5.pem;
+			proxy_ssl_certificate_key /key5.pem;
 			proxy_pass http://kasvc-5:8080;
 		}
 
 		location /6 {
+			proxy_ssl_certificate /cert6.pem;
+			proxy_ssl_certificate_key /key6.pem;
 			proxy_pass http://kasvc-6:8080;
 		}
 
 		location /7 {
+			proxy_ssl_certificate /cert7.pem;
+			proxy_ssl_certificate_key /key7.pem;
 			proxy_pass http://kasvc-7:8080;
 		}
 
 		location /8 {
+			proxy_ssl_certificate /cert8.pem;
+			proxy_ssl_certificate_key /key8.pem;
 			proxy_pass http://kasvc-8:8080;
 		}
 
 		location /9 {
+			proxy_ssl_certificate /cert9.pem;
+			proxy_ssl_certificate_key /key9.pem;
 			proxy_pass http://kasvc-9:8080;
 		}
 	}

kasvc/Dockerfile

@@ -1,6 +1,5 @@
 FROM archlinux:latest
-RUN pacman -Syyu --noconfirm
+RUN pacman -Sy glibc gcc-libs --noconfirm
-RUN pacman -S glibc gcc-libs --noconfirm
 EXPOSE 8080
 COPY keepalive-svc /
 CMD ["/keepalive-svc"]