![Page 1: Legacy To Docker - Lessons learned and demo of OpenUnison](https://reader036.vdocument.in/reader036/viewer/2022062822/587cb7351a28ab38028b5c6b/html5/thumbnails/1.jpg)
Legacy to Docker: Lessons Learned Containerizing Unison
and OpenUnison and S2I
With Demo of Identity Management for OpenShift
![Page 2: Legacy To Docker - Lessons learned and demo of OpenUnison](https://reader036.vdocument.in/reader036/viewer/2022062822/587cb7351a28ab38028b5c6b/html5/thumbnails/2.jpg)
What is Unison/OpenUnison?• Identity Management Solution• User Provisioning• Self Service• LDAP Virtual Directory • SSO & Web Access Management
• Java Application• Multiple Services• Reverse Proxy / Identity Provider• LDAP Virtual Directory• Administrative Interface• Web Services
![Page 3: Legacy To Docker - Lessons learned and demo of OpenUnison](https://reader036.vdocument.in/reader036/viewer/2022062822/587cb7351a28ab38028b5c6b/html5/thumbnails/3.jpg)
OpenUnison Source2Image• J2EE Application• War File• Built using Maven• Requires Keystore• Image Requirements• Servlet Container• TLS• Java 1.8
• Source2Image - https://github.com/openshift/source-to-image
![Page 4: Legacy To Docker - Lessons learned and demo of OpenUnison](https://reader036.vdocument.in/reader036/viewer/2022062822/587cb7351a28ab38028b5c6b/html5/thumbnails/4.jpg)
OpenUnison Source2Image
![Page 5: Legacy To Docker - Lessons learned and demo of OpenUnison](https://reader036.vdocument.in/reader036/viewer/2022062822/587cb7351a28ab38028b5c6b/html5/thumbnails/5.jpg)
First Rule of Creating Docker Images
![Page 6: Legacy To Docker - Lessons learned and demo of OpenUnison](https://reader036.vdocument.in/reader036/viewer/2022062822/587cb7351a28ab38028b5c6b/html5/thumbnails/6.jpg)
First Rule of Creating Docker Images
Don’t Talk About Creating Docker Images
![Page 7: Legacy To Docker - Lessons learned and demo of OpenUnison](https://reader036.vdocument.in/reader036/viewer/2022062822/587cb7351a28ab38028b5c6b/html5/thumbnails/7.jpg)
First Rule of Creating Docker Images
Don’t Treat Containers Like VMs
![Page 8: Legacy To Docker - Lessons learned and demo of OpenUnison](https://reader036.vdocument.in/reader036/viewer/2022062822/587cb7351a28ab38028b5c6b/html5/thumbnails/8.jpg)
Challenges• No Static IP Addresses• Persistent Volumes• File System Permissions• Consistency• Not Requiring “Base” Image• RHEL vs CentOS• OpenShift• Logging
![Page 9: Legacy To Docker - Lessons learned and demo of OpenUnison](https://reader036.vdocument.in/reader036/viewer/2022062822/587cb7351a28ab38028b5c6b/html5/thumbnails/9.jpg)
Architecture (Pre-Docker)
![Page 10: Legacy To Docker - Lessons learned and demo of OpenUnison](https://reader036.vdocument.in/reader036/viewer/2022062822/587cb7351a28ab38028b5c6b/html5/thumbnails/10.jpg)
Architecture (Docker)
![Page 11: Legacy To Docker - Lessons learned and demo of OpenUnison](https://reader036.vdocument.in/reader036/viewer/2022062822/587cb7351a28ab38028b5c6b/html5/thumbnails/11.jpg)
Lessons Learned• Security• Users in container vs host• Don’t run as root• OpenShift – Running as a random user• Conflict with Dockerhub images
• Persistent Volumes• OpenShift – Can’t guaruntee PV->PVC Mapping• Minimize number of peristent volumes
• Permissions – Other readable• Odd issues
![Page 12: Legacy To Docker - Lessons learned and demo of OpenUnison](https://reader036.vdocument.in/reader036/viewer/2022062822/587cb7351a28ab38028b5c6b/html5/thumbnails/12.jpg)
Demo Environment