{"id":4210,"date":"2023-06-03T15:42:13","date_gmt":"2023-06-03T13:42:13","guid":{"rendered":"https:\/\/tech.lobobrothers.com\/docker-swarm-photon-portainer\/"},"modified":"2025-02-06T13:24:17","modified_gmt":"2025-02-06T12:24:17","slug":"docker-swarm-photon-portainer","status":"publish","type":"post","link":"https:\/\/tech.lobobrothers.com\/en\/docker-swarm-photon-portainer\/","title":{"rendered":"Docker swarm with Photon and Portainer"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

INSTALL DOCKER SWARM, PORTAINER Y PHOTON<\/strong><\/h2>\n

On this occasion we are going to talk about how to make a docker cluster using Photon as an operating system, very light and has a special kernel for vmware, easily managed with Portainer CE, which has a totally free business version for up to 5 nodes.<\/p>\n

The first thing is to see what requirements we need for a docker cluster:<\/p>\n

Nodes: minimum 3 nodes where it can tolerate the fall of 1<\/p>\n

Minimum hardware: 4 core \/ 8 GB RAM \/ 200 GB hd for 3 nodes
\nRecommended hardware: 8 core \/ 16 GB RAM \/ 200 GB hd for 3 nodes
\nOptional hardware: 8 core+ \/ 16 GB RAM+ \/ 200 GB+ hd for 6 nodes<\/p>\n

As it is a laboratory we will set up 3 smaller machines in VirtualBox with Photon, I recommend you download the ISO and do the installation, since the OVA can give you some problems such as not finding the fd0 disk drive. You can find the downloads at https:\/\/github.com\/vmware\/photon\/wiki\/Downloading-Photon-OS<\/p>\n

PHOTON OS INSTALLATION<\/strong><\/p>\n

It is very simple and fast as you will see below.<\/p>\n

\"install<\/p>\n

Accept vmware terms<\/p>\n

\"photon<\/p>\n

Choose disk<\/p>\n

\"photon<\/p>\n

Which version, for production environment the minimum.<\/p>\n

\"select<\/p>\n

How do we want to configure the network, each one according to their environment but as a general rule manually to set a fixed IP<\/p>\n

\"photon<\/p>\n

We put the network data<\/p>\n

\"photon<\/p>\n

Now the name of the machine<\/p>\n

\"photon<\/p>\n

Root password and confirmation<\/p>\n

\"photon<\/p>\n

And finally confirm<\/p>\n

\"photon<\/p>\n

And that’s it, we’d have our first node, and we’d deploy 2 more. Note that if the installation were in a vmware environment there would be one more step where it asks you if you want the generic kernel or the kernel optimized for vmware.<\/p>\n

Photon comes with docker installed but disabled, simply run:<\/p>\n

systemctl enable docker<\/p>\n

systemctl start docker<\/p>\n

\"photon<\/p>\n

The following would be up to the consumer, photon comes with iptables and an English keyboard by default, so as not to go on too long we will disable iptables and set the keyboard to Spanish.<\/p>\n

On each machine run:<\/p>\n

systemctl stop iptables<\/p>\n

systemctl disable iptables<\/p>\n

\"photon<\/p>\n

In this distribution the package manager is tdnf, we execute the following for the keyboard:<\/p>\n

tdnf install kbd<\/p>\n

loadkeys es<\/p>\n

localectl set-keymap es<\/p>\n

\"photon<\/p>\n

On the other hand, the ssh service does not allow remote root login, for convenience when creating the cluster we will enable it by adding PermitRootLogin in the configuration file \/etc\/ssh\/sshd_config<\/p>\n

\"photon<\/p>\n

And we restart service<\/p>\n

systemctl restart sshd<\/p>\n

Once we have done this on the three machines we will create the cluster<\/p>\n

DOCKER SWARM<\/strong><\/p>\n

On the first node we run the following<\/p>\n

docker swarm init –advertise-addr 192.168.1.200<\/p>\n

Here I will make a clarification for those who use vmware with NSX, the default port for NSX VXLAN communication is UDP 4789 which is the one used by docker swarm for overlay network traffic, therefore we would enter into conflict and we would have a problem, therefore in vmware we would execute this command to change the port for example to 9789<\/p>\n

docker swarm init –data-path-port=9789 –advertise-addr 192.168.1.200<\/p>\n

This conflict is hard to see but when you install the portainer agent it will give you the error context deadline exceeded (Client.Timeout exceeded while awaiting headers)<\/strong><\/p>\n

Returning what we should execute on each node to add it as a worker,<\/p>\n

\"docker<\/p>\n

but we are not going to execute it in this case, we are going to add the machines as manager and they will be workers too, so we have a multi-manager and multi-node cluster, since we need 3 for the quorum. We execute<\/p>\n

docker swarm join-token manager<\/p>\n

And it returns us what we have to execute on the other two machines to be manager<\/p>\n

docker swarm join –token SWMTKN-1-0lzh7zsccaajsgeccy64osgbtkzi3b1bt2cm9ofd7kww0f375q-d24p6xhclfrp8gpxg8m4hkzy2 1
\n92.168.1.200:2377<\/p>\n

\"docker<\/p>\n

We run it on the other two and if everything is correct the following will appear:<\/p>\n

\"docker<\/p>\n

To see our cluster:<\/p>\n

docker node ls<\/p>\n

\"docker<\/p>\n

Perfect, we already have our cluster where we could start working, but we will make it easy with Portainer CE.<\/p>\n

Portainer CE<\/strong><\/p>\n

We can install portainer in the cluster itself, but it is better to have it external, so that in case of a crash we can see what is happening. To do this, we install another docker but in standalone mode and execute the following, that is, we can create another machine just like we have done but without adding it to the cluster, working independently.<\/p>\n

First we create a volume so that our data persists:<\/p>\n

docker volume create portainer_data<\/p>\n

And we deploy:<\/p>\n

\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
docker run -d -p 8000:8000 -p 9443:9443 –name portainer –restart=always -v \/var\/run\/docker.sock:\/var\/run\/docker.sock -v portainer_data:\/data portainer\/portainer-ce:latest<\/span><\/div>\n
\"deploy<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Now we have to go to the browser and open https:\/\/ipmachine:9443 and accept the certificate, since it is a self-signed one that you can replace in the web configuration.
\nIt asks us to enter the user and password or recover from a backup.<\/div>\n
\"login<\/div>\n
\n
\n
\n
\n
\n
Once inside we go to Environments and click Add Environment on the right.<\/div>\n
\"portainer<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

We select docker swarm and click on start wizard.<\/p>\n

\"portainer<\/p>\n

In the next screen we choose agent and fill in Name and Environment address with 192.168.1.200:9001, the rest of the options are to assign group, label and then user permissions to the different environments.<\/p>\n

\"portainer<\/p>\n

And now it’s as simple as copying and pasting the command that it tells us in our main node, waiting for it to install the agent docker and then clicking Connect.<\/p>\n

docker network create \\ –driver overlay \\ portainer_agent_network docker service create \\ –name portainer_agent \\ –network portainer_agent_network \\ -p 9001:9001\/tcp \\ –mode global \\ –constraint ‘node.platform.os == linux’ \\ –mount type=bind,src=\/\/var\/run\/docker.sock,dst=\/var\/run\/docker.sock \\ –mount type=bind,src=\/\/var\/lib\/docker\/volumes,dst=\/var\/lib\/docker\/volumes \\ portainer\/agent:2.18.3<\/p>\n

With this we can now manage our Docker cluster from Portainer, making our life easier. I love Portainer, congratulations Team for this great piece of software that you offer us.<\/p>\n

\"portainer<\/p>\n

From here I’ll leave it up to you to discover all the options, I can assure you that you’re going to love it.<\/p>\n

Have a nice weekend!!!<\/p>\n

TL.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

FAQS<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat is Photon OS?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

Photon OS is a lightweight operating system developed by VMware, optimized for virtualized and containerized environments. Its minimalist design and specialized kernel make it ideal for running Docker efficiently.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat is Docker Swarm?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

Docker Swarm<\/strong> is a Docker-native orchestration tool that allows you to manage multiple containers in a server cluster. With Swarm, you can easily deploy, scale, and manage applications across multiple nodes, without the need for external tools like Kubernetes.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat is Portainer?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

Portainer is a web-based user interface that simplifies the management of Docker environments. With Portainer, you can intuitively monitor and manage your Docker Swarm cluster, deploy applications, monitor resources, and manage services from a centralized platform.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tIs it recommended to install Portainer inside the Docker Swarm cluster?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

While it is possible, it is recommended to install Portainer on a separate instance outside of the cluster. This ensures that in case the cluster experiences issues, you can still access Portainer to diagnose and resolve any issues.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t