Docker Compose

[tad]

Dear Sir,

Can 'Docker Compose' be used from the Terminal section of netFIELD Device Manager?
As far as I tried with netFIELD On-Premise, there is no problem found.
If I can create and run containers by Docker Compose, it must be useful when setting up several netFIELD Connect(s) with the same containers.

Thank you very much for your information.
Best regards,

[Armin@netPI]

Yes the feature "docker-compose" is integrated in any netFIELD OS driven edge device made by hilscher. Concrete the netFIELD Connect and netFIELD OnPremise gateway devices both support the command "docker-compose".

You can use the command via the embedded web terminal as you said or via SSH over a remote terminal session.

[tad]

Dear Armin,

Thank you very much for your quick response.
I think use of Docker Compose is advantage against netPI.

And, could I ask you one more question?
In case of netPI, I can follow IEC 62443 security policy easily.
I think one of reasons is that SSH is permanently disabled.
But, in case of netFIELD, can I follow IEC 62443 even though SSH is enabled.

Thank you very much for your advice.
Best regards,

[Armin@netPI]

Yes of course you can. The IEC 62443 defines

a.) that all communications to a device needs to be encrypted using TLS security
b.) that all open ports like 22 for SSH or 80/443 for web user interface need to be protected by a username and password

Both prerequisites are fulfilled with the SSH port on netFIELD devices.

And if a customer feels very strong vulnerability across the default open SSH port ... then he can disable the service easily in all netFIELD devices with "sudo systemctl stop ssh" and "sudo systemctl disable ssh". Then the service is no more active. So you see it is customer dependent and the customer has a choice. With netPI he did not have any choice ... it was always disable ... so what do you feel is better. Choice or no choice?

Thx
Armin

[tad]

Dear Armin,

Thank you very much for explanation of IEC 62443 on SSH.
Of course, I prefer to be able to choose enabling/disabling SSH.

Best regards,