This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
| cloudflare:zero_trust_docker [2022/10/03 15:59] – created tingalls | cloudflare:zero_trust_docker [2025/10/24 17:53] (current) – tingalls | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ===== Cloudflare Zero Trust Docker ===== | ===== Cloudflare Zero Trust Docker ===== | ||
| - | {{tag> | + | {{tag> |
| Using host networking may not be the most secure way, but it is what was needed to get WARP routing when using quic to be able to proxy UDP traffic for proper DNS lookups on the private networks. | Using host networking may not be the most secure way, but it is what was needed to get WARP routing when using quic to be able to proxy UDP traffic for proper DNS lookups on the private networks. | ||
| Line 13: | Line 13: | ||
| <code sh> | <code sh> | ||
| running_container=$(docker container ls -f ancestor=cloudflare/ | running_container=$(docker container ls -f ancestor=cloudflare/ | ||
| + | running_image=$(docker image ls --filter=reference=cloudflare/ | ||
| + | running_token=$(docker inspect $running_container --format=' | ||
| docker pull cloudflare/ | docker pull cloudflare/ | ||
| - | docker run --network host -d --restart=unless-stopped | + | docker run --network host -d --restart=unless-stopped |
| docker container ls -f ancestor=cloudflare/ | docker container ls -f ancestor=cloudflare/ | ||
| + | docker container ls -f ancestor=$running_image -a # verify two running | ||
| docker stop $running_container | docker stop $running_container | ||
| - | # reconnect | + | # |
| + | # reconnect | ||
| + | # | ||
| old_image=$(docker image ls --filter=reference=cloudflare/ | old_image=$(docker image ls --filter=reference=cloudflare/ | ||
| old_container=$(docker container ls -f ancestor=$old_image -f status=exited -q) | old_container=$(docker container ls -f ancestor=$old_image -f status=exited -q) | ||