Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Migrating to Docker Enterprise Edition with FIPS

FIPS mode only:

As part of the FIPS installation, Docker Community Edition (CE) must be migrated to Docker Enterprise Edition (EE) on your JSA Console and 4000 appliance.

If you have a high-availability (HA) deployment, run the Docker-EE migration after pairing the JSA Console or 4000 appliance to the HA secondary console.

Ensure you have a Docker-EE license.

The migration tool does the following tasks:

• Checks to ensure that the host is compatible with Docker-EE:

– Determines whether a Console or an App Host is selected.

– Checks that FIPS is enabled in the current host.

– Verifies the version of JSA and necessary components is correct.

– Verifies the Docker-EE license file that is provided is valid.

– Determines whether you have changes that you have not deployed.

• Installs the Docker-EE RPMs and restarts Docker services.

• If you have an HA deployment, the migration sets up the HA standby console for later activation of the Docker-EE license when it is brought online.

• Applies the Docker-EE license

Note:

Run the migration tool in all consoles and 4000 appliances, even on stand by HA consoles.

The Docker-EE migration completes on stand by HA consoles the next time that they become active.
  1. On each host, download the migration tool from Juniper Customer Support website.
  2. Download your Docker-EE license to each host.
  3. Run the following command on each host to prepare the migration tool to be run.
    chmod +x dockeree_migration
  4. Complete the precheck on the Console, 4000 appliance, and if present, their HA secondaries, by running the following command:
    ./dockeree_migration -l <Docker-EE.lic> -p
  5. Start the Docker-EE migration process on the Console, 4000 appliance, and if present, their HA secondaries, by running the following command.
    ./dockeree_migration -l <Docker-EE.lic> -m
  6. To verify the migration to Docker-EE complete the following steps:

    1. Verify that Docker-EE replaced Docker-CE by running the command:

      yum list | grep docker

    2. Ensure that your apps are running on the primary Console.

    3. Fail over to your secondary Console or 4000 appliance and repeat steps '6.a and 6.b.

    4. Successfully migrate your apps to the App Host.