Running portainer container management

Notakey Authentication Appliance contains built-in plugin container support that can be used to run web-based container and image management.

To start the portainer service run the following commands:

$ ntk cfg set :plugins.portainer '{"ports": ["9000:9000"], "image": "portainer/portainer:latest", "volumes": [ "/var/run/docker.sock:/var/run/docker.sock", "portainer-config:/data" ] }' --json-input
$ ntk plugins restart

The management UI will be available on the appliance IP, port 9000 (http://appliance-ip:9000). You will have to set up initial admin credentials that will be stored in a local docker volume called portainer-config. If you have a cluster of nodes, plugin restart has to be run on every node and credentials will not be synced by default. This can be fixed by using an external NFS server mount on every node that is passed as the volume for the portainer container, see below.

$ docker volume create \
    --name portainer-config \
    --opt type=nfs \
    --opt device=:<nfs export path> \
    --opt o=addr=<nfs host>