CF Local - cf CLI Plugin
Note: Image download/build only occurs when a new root FS is available.
CF Local is a Cloud Foundry CLI plugin that enables you to:
- Build and launch CF application droplets locally in Docker
- Download droplets from Cloud Foundry and run them locally in Docker
- Build droplets locally in Docker and push them to Cloud Foundry
- Automatically tunnel service connections from a local app to an app running in Cloud Foundry
- Launch droplets with their active app root mounted to a local directory
- Export droplets as Docker images that do not require CF Local to run
Notably, CF Local:
- Does not require the Docker CLI
- Can run against a remote Docker daemon
- Uses the latest official CF buildpack releases by default
- Always uses the latest CF root filesystem (cflinuxfs2) release
USAGE:
cf local stage <name> [ (-b <name> | -b <URL>) (-p <dir> | -p <zip>) ]
[ (-s <app> | -f <app>) ]
cf local run <name> [ (-i <ip>) (-p <port>) (-d <dir>) ]
[ (-s <app>) (-f <app>) ]
cf local export <name> [ (-r <ref>) ]
cf local pull <name>
cf local push <name> [-e -k]
cf local help
cf local version
STAGE OPTIONS:
stage <name> Build a droplet using the app in the current directory and
the environment variables and service bindings specified
in local.yml.
Droplet filename: <name>.droplet
-b <name> Use an official CF buildpack, specified by name.
Default: (uses detection)
-b <url> Use a buildpack specified by URL (git or zip-over-HTTP).
Default: (uses detection)
-p <dir> Use the specified directory as the app directory.
Default: current working directory
-p <zip> Use the specified zip file contents as the app directory.
Default: current working directory
-s <app> Use the service bindings from the specified remote CF app
instead of the service bindings in local.yml.
Default: (uses local.yml)
-f <app> Same as -s, but re-writes the service bindings to match
what they would be if they were tunneled through the app
with cf local run <name> -f <app>.
Default: (uses local.yml)
RUN OPTIONS:
run <name> Run a droplet with the configuration specified in local.yml.
Droplet filename: <name>.droplet
-i <ip> Listen on the specified interface IP
Default: localhost
-p <port> Listen on the specified port
Default: (arbitrary free port)
-d <dir> Mount the specified directory into the app at the app root.
If empty, the app root is copied into the directory.
If not empty, the app root is replaced by the directory.
Default: none
-s <app> Use the service bindings from the specified remote CF app
instead of the service bindings in local.yml.
Default: (uses local.yml or app provided by -f)
-f <app> Tunnel service connections through the specified remote CF
app. This re-writes the service bindings in the container
environment in order to use the tunnel. The service
bindings from the specified app will be used if -s is not
also passed.
Default: (uses local.yml)
EXPORT OPTIONS:
export <name> Export a standalone Docker image using the specified droplet
and configuration from local.yml.
Droplet filename: <name>.droplet
-r <ref> Tag the exported image with the provided reference.
Default: none
PULL OPTIONS:
pull <name> Download the droplet, environment variables, environment
variable groups, and start command of the named remote
CF app. The local.yml file is updated with the downloaded
configuration.
Droplet filename: <name>.droplet
PUSH OPTIONS:
push <name> Push a droplet to a remote CF app and restart the app.
Droplet filename: <name>.droplet
-e Additionally replace the remote app environment variables
with the environment variables from local.yml. This does
not read or replace environment variable groups.
Default: false
-k Do not restart the application after pushing the droplet.
The current droplet will continue to run until the next
restart.
Default: false
ENVIRONMENT:
DOCKER_HOST Docker daemon address
Default: /var/run/docker.sock
SAMPLE: local.yml
applications:
- name: first-app
command: "some start command"
staging_env:
SOME_STAGING_VAR: "some staging value"
running_env:
SOME_RUNNING_VAR: "some running value"
env:
SOME_VAR: "some value"
services:
(( contents of VCAP_SERVICES ))
Install
$ ./cflocal-v0.11.0-macos
Plugin successfully installed. Current version: 0.11.0
Or
$ cf install-plugin cflocal-0.11.0-macos
**Attention: Plugins are binaries written by potentially untrusted authors. Install and use plugins at your own risk.**
Do you want to install the plugin cflocal-0.11.0-macos?> y
Installing plugin cflocal-0.11.0-macos...
OK
Plugin cflocal v0.11.0 successfully installed.
Or
$ cf install-plugin -r CF-Community cflocal
**Attention: Plugins are binaries written by potentially untrusted authors. Install and use plugins at your own risk.**
Do you want to install the plugin cflocal?> y
Looking up 'cflocal' from repository 'CF-Community'
11354404 bytes downloaded...
Installing plugin cflocal-0.11.0-macos...
OK
Plugin cflocal v0.11.0 successfully installed.
Note: The version available in the 'CF-Community' plugin repo may not always be the latest available.
Uninstall
$ cf uninstall-plugin cflocal
Uninstalling plugin cflocal...
OK
Plugin cflocal successfully uninstalled.
Security Notes
- Service forwarding tunnels are not active during staging
- Containers are never exported with remote service credentials
- Service credentials from remote apps are never stored in local.yml
- CF Local should not be used to download untrusted CF applications
- CF Local is not intended for production use and is offered without warranty
TODO
- Allow specification of resource limits
- Re-establish SSH tunnel if it closes
- Allow local buildpacks to be specified
- Permit specification of cflinuxfs2 version
- Add warnings about mismatched Docker client / server versions