Marek Grzenkowicz chopeen

Docker(-compose) with shorewall

The shorewall documentation explains in http://shorewall.org/Docker.html how to configure shorewall for use with docker. The problem with the configuration is that it only allows connections from the host to the main bridge docker0. Connections to other networks on dynamically created bridges, with names starting by default with br-, is blocked. Instead of the recommended contents of /etc/shorewall/interfaces, use wild-card interface names as follows:

#ZONE	INTERFACE	OPTIONS
#dock	docker0		bridge     # disabled default recommendation
dock 	docker0		physical=docker+,routeback=1
dock 	br		physical=br-+,routeback=1

	#base image in which all stages are executed
	image: alpine
	# Ordered stages of the CI pipeline
	stages:
	- build_and_push

	build and push docker image:
	stage: build_and_push
	only:
	variables:

	#!/usr/bin/env bash

	# global parameters
	g_tmp_folder="ncdc_tmp";
	g_output_folder="ncdc_data";

	g_remote_host="ftp.ncdc.noaa.gov";
	g_remote_path="pub/data/noaa";