Automating Docker With Bigfix

Note: this is an overview for a presentation I gave at a BigFix User Group.

Docker

• A lightweight alternative to VMs
• Each Docker Container has access to all resources

Setup Docker Host

There are tons of options for Docker Hosts, but in this case, a Linux OS that supports BigFix specifically is best if BigFix is going to manage it, though privileged containers may provide another option for BigFix Management of a Docker Host.

• Install Ubuntu
  • Kickstart file
• Install BigFix
• Install Docker
  • Fixlets
  • Baseline

Use Docker Host

This particular use case refers to OS containers only, and specifically those which can run the BigFix client. Any container could work, but if it can’t run BigFix, then it would require a proxy agent to appear in the console.

• Create Docker Containers
• Create Docker Images -> Containers
• Create Many Containers with Docker Compose

Analize Docker Host & Containers

Most info for Docker Containers is stored as JSON on the Docker Host, which BigFix can read.

• Analyses
• Automatic Groups

Related:

• https://forum.bigfix.com/t/bay-area-bigfix-user-group-october-19th-2017-emeryville-ca/22323
• https://forum.bigfix.com/t/thin-imaging-and-installing-the-bigfix-agent/15750
• https://github.com/jgstew/tools/blob/master/bash/install_bigfix.sh
• https://docs.docker.com/engine/installation/linux/docker-ce/ubuntu/
• https://docs.docker.com/engine/reference/run/