Manage cSRX in Bare-Metal Linux Server
This section outlines basic Docker commands that you can use with a running cSRX Container Firewall container. It includes the following topics:
Pause or Resume Processes Within cSRX
You can suspend or resume all processes within one or more cSRX containers. On Linux, this task
is performed using the cgroups freezer
process.
To pause and restart a cSRX container:
View Processes on a Running cSRX Container
Use the docker exec
command to view the details of the processes (applications,
services and status) running on a cSRX container.
hostOS# docker exec <csrx-container-name> ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 18048 1648 pts/8 Ss May15 0:00 /bin/bash -e /etc/rc.local init root 78 0.0 0.0 260072 968 ? Ssl May15 0:09 /usr/sbin/rsyslogd -M/usr/lib/rsyslog root 97 0.0 0.0 61376 1304 ? Ss May15 0:00 /usr/sbin/sshd root 118 0.0 0.0 108552 1304 ? Sl May15 34:12 /usr/bin/monit root 124 0.0 0.0 723392 1516 ? Ss May15 0:00 /usr/sbin/nstraced root 133 0.0 0.0 734084 4388 ? Ss May15 1:18 /usr/sbin/nsd root 135 0.0 0.0 4440 644 ? S May15 0:00 /bin/sh /etc/init.d/appidd start root 141 0.0 0.2 752132 21184 ? Sl May15 0:02 /usr/sbin/appidd -N & root 147 0.0 0.0 4440 652 ? S May15 0:00 /bin/sh /etc/init.d/idpd start root 153 0.0 0.0 730520 2768 ? S May15 0:25 /usr/sbin/idpd -N & root 170 0.0 0.1 1001088 12528 ? Sl May15 29:22 /usr/sbin/useridd -N root 211 0.0 0.0 728448 2104 ? Ss May15 0:07 /usr/sbin/mgd root 222 3.5 1.8 3943936 152920 ? Sl May15 1416:22 /usr/sbin/srxpfe -a -d root 250 0.0 0.0 4440 648 ? S May15 0:00 /bin/sh /etc/init.d/utmd start root 256 0.0 0.0 725092 3880 ? S May15 1:36 /usr/sbin/utmd -N & root 267 0.0 0.0 731556 2472 ? Ss May15 2:39 /usr/sbin/kmd root 301 0.0 0.0 18160 1916 pts/8 S+ May15 0:00 /bin/bash root 324 0.0 0.0 853708 3324 ? Sl May15 6:13 /usr/sbin/wmic -N
Remove a cSRX Container or Image
To remove a cSRX container or image:
Note:
You must first stop and remove a cSRX container before you can remove a cSRX image.