16.5 Downloading and Running the GroupWise Web Image

The first time you run the GroupWise Web image, you need to specify the folder that has the files created when the web-config utility ran and (optionally) your TLS certificates. For convenience, the Web Client can create certificates for your system. For information about certificate best practices and troubleshooting certificate issues in GroupWise and GroupWise Web, see Certificate Best Practices in the GroupWise Administration Guide.

There are two options to download and run the web-config utility:

16.5.1 Option 1 - Using a Docker Run Command

To download and run the GroupWise Web image using Docker:

  1. Run the following command to pull down the GroupWise Web image:

    docker pull mfgroupwise/web

  2. Run the following command to run the image (use the information from the GroupWise Web Worksheet to fill out the command):

    docker run -d -v <Web-config Location>:/etc/nginx/gw --name gwweb --rm -e FQDN=<Docker Server Name> -e DNS_SERVER=<DNS Server> -p 80:80 -p 443:443 -v <(Optional) Server Certificate>:/certs mfgroupwise/web:latest

    EXAMPLES:

    • To run with GroupWise self-signed certificates:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 80:80 -p 443:443 mfgroupwise/web:24.3-xxx

    • To run with commercially signed certificates:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 80:80 -p 443:443 -v /opt/novell/gw/certs:/certs mfgroupwise/web:24.3-xxx

    • To run with commercial certificates while disabling DVA verification:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 80:80 -p 443:443 -v /opt/novell/gw/certs:/certs -e GWDVA_SSL_VERIFY=off mfgroupwise/web

    NOTE:/opt/novell/gw/certs should contain the server.key and server.crt files.

    You can add --restart always after run -d in the command to have the image restart automatically after rebooting the Docker server. However, if you use --restart, you must remove --rm from your command as they do not work together.

  3. (Optional) The following examples show optional switches you can use based on your organizations environment. For brevity, these examples are all using commercial certificates.

    • Run GroupWise Web on different ports: If you want to run GroupWise Web on different ports than 80 and 443 (this is useful if you have more than one server running in Docker), you should change the port numbers (i.e. -p <port>:80 -p <TLS_port>:443) and add -e TLS_REDIR_PORT=<TLS_port> to the run command.

      EXAMPLE:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 8080:80 -p 8443:443 -e TLS_REDIR_PORT=8443 -v /opt/novell/gw/certs:/certs mfgroupwise/web:24.3-xxx

    • Add Secure Messaging Gateway (SMG) host: Add the SMG host server to the run command for integration with GroupWise Administration: --add-host=<host name:IPaddress>. The host should already be configured in the GroupWise Administration Console before running the Docker command.

      EXAMPLE:

      docker run -it -v /root/autoUpdate/gw-smg:/etc/nginx/gw --name j110-add --rm -e FQDN=webacc.acme.com -e DNS_SERVER=137.65.247.1 -p 2112:443 -e TLS REDIR=2112 --add-host=j110.qa.gwava.com:151.155.210.110 -v /root/autoUpdate:/certs img-collaboration-docker-dev.svartifactory.swinfra.net/gwbuild/webacc-ng:feature-smg

      NOTE:For information about configuring Secure Messaging Gateway in the GroupWise Administration Console, see Configuring Secure Messaging Gateway in the GroupWise Administration Guide.

    • Disable SSL when using SMG: If you are using Secure Messaging Gateway (SMG) and want to disable SSL for SMG, add -e SMG_SSL_VERIFY=off to the run command.

      EXAMPLE:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 8080:80 -p 8443:443 -e SMG_SSL_VERIFY=off -v /opt/novell/gw/certs:/certs mfgroupwise/web:24.3-xxx

    • Disable DVA verification: If you want to disable DVA certificate verification when you run the web image, follow this command example:

      EXAMPLE:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 80:80 -p 443:443 -v /opt/novell/gw/certs:/certs -e GWDVA_SSL_VERIFY=off mfgroupwise/web:24.3-xxx

    • Store logs locally: If you want logs from the GroupWise Web client to be available on the local copy of the Docker server, add -v <logsDirectoryPath>/:/var/log/nginx/ to the run command.

      EXAMPLE:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 80:80 -p 443:443 -v /var/log/gwweb/:/var/log/nginx/ -v /opt/novell/gw/certs:/certs mfgroupwise/web:24.2-xxx

16.5.2 Option 2 - Using the OpenText GroupWise Download Site

To download and run the Docker image from the GroupWise download site:

  1. Download the <gw.version>-xxx-web_docker.tar.gz from the GroupWise download site on your Docker server.

  2. Run the following command to load the Docker image (make sure to replace the xxx in the file name):

    docker load -i <gw.version>-xxx-web_docker.tar.gz

  3. Run the following command to view a list of your Docker images. Make sure the GroupWise Web image is in the list:

    docker image list

  4. Run the following command to run the image (use the information from the GroupWise Web Worksheet to fill out the command):

    docker run -d -v <Web-config Location>:/etc/nginx/gw --name gwweb --rm -e FQDN=<Docker Server Name> -e DNS_SERVER=<DNS Server> -p 80:80 -p 443:443 -v <(Optional) Server Certificate>:/certs mfgroupwise/web:<gw.version>-xxx

    EXAMPLES:

    • To run with GroupWise self-signed certificates:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 80:80 -p 443:443 mfgroupwise/web:24.3-xxx

    • To run with commercially signed certificates:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 80:80 -p 443:443 -v /opt/novell/gw/certs:/certs mfgroupwise/web:24.3-xxx

    NOTE:/opt/novell/gw/certs should contain the server.key and server.crt files.

    You can add --restart always after run -d in the command to have the image restart automatically after rebooting the Docker server. However, if you use --restart, you must remove --rm from your command as they do not work together.

  5. (Optional) The following examples show optional switches you can use based on your organizations environment. For brevity, these examples are all using commercial certificates.

    • Run GroupWise Web on different ports: If you want to run GroupWise Web on different ports than 80 and 443 (this is useful if you have more than one server running in Docker), you should change the port numbers (i.e. -p <port>:80 -p <TLS_port>:443) and add -e TLS_REDIR_PORT=<TLS_port> to the run command.

      EXAMPLE:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 8080:80 -p 8443:443 -e TLS_REDIR_PORT=8443 -v /opt/novell/gw/certs:/certs mfgroupwise/web:24.3-xxx

    • Add Secure Messaging Gateway (SMG) host: Add the SMG host server to the run command for integration with GroupWise Administration: --add --host <host name>. The host should already be configured in the GroupWise Administration Console before running the Docker command.

      EXAMPLE:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 8080:80 -p 8443:443 --add --host DNS_SERVER=198.144.2.4 -v /opt/novell/gw/certs:/certs mfgroupwise/web:24.3-xxx

      NOTE:For information about configuring Secure Messaging Gateway in the GroupWise Administration Console, see Configuring Secure Messaging Gateway in the GroupWise Administration Guide.

    • Disable SSL when using SMG: If you are using Secure Messaging Gateway (SMG) and want to disable SSL for SMG, add -e SMG_SSL_VERIFY=off to the run command.

      EXAMPLE:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 8080:80 -p 8443:443 -e SMG_SSL_VERIFY=off -v /opt/novell/gw/certs:/certs mfgroupwise/web:24.3-xxx

    • Disable DVA verification: If you want to disable DVA certificate verification when you run the web image, follow this command example:

      EXAMPLE:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 80:80 -p 443:443 -v /opt/novell/gw/certs:/certs -e GWDVA_SSL_VERIFY=off mfgroupwise/web:24.3-xxx

    • Store logs locally: If you want logs from the GroupWise Web client to be available on the local copy of the Docker server, add -v <logsDirectoryPath>/:/var/log/nginx/ to the run command.

      EXAMPLE:

      docker run -d --rm -v /opt/novell/gw:/etc/nginx/gw --name gwweb -e FQDN=webacc.acme.com -e DNS_SERVER=192.168.1.5 -p 80:80 -p 443:443 -v /var/log/gwweb/:/var/log/nginx/ -v /opt/novell/gw/certs:/certs mfgroupwise/web:24.2-xxx