Managing cSRX Container Firewall Containers
This section outlines basic Docker commands that you can use with a running cSRX Container Firewall container. It includes the following topics:
Pausing/Resuming Processes within a cSRX Container Firewall Container
You can suspend or resume all processes within one or more cSRX Container Firewall containers. On
Linux, this task is performed using the cgroups freezer
process.
To pause and restart a cSRX Container Firewall container:
Viewing Container Processes on a Running cSRX Container Firewall Container
Use the docker exec
command to view the details of the processes (applications,
services and status) running on a cSRX Container Firewall container.
hostOS# docker exec <csrx-container-name> ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 18048 1648 pts/8 Ss May15 0:00 /bin/bash -e /etc/rc.local init root 78 0.0 0.0 260072 968 ? Ssl May15 0:09 /usr/sbin/rsyslogd -M/usr/lib/rsyslog root 97 0.0 0.0 61376 1304 ? Ss May15 0:00 /usr/sbin/sshd root 118 0.0 0.0 108552 1304 ? Sl May15 34:12 /usr/bin/monit root 124 0.0 0.0 723392 1516 ? Ss May15 0:00 /usr/sbin/nstraced root 133 0.0 0.0 734084 4388 ? Ss May15 1:18 /usr/sbin/nsd root 135 0.0 0.0 4440 644 ? S May15 0:00 /bin/sh /etc/init.d/appidd start root 141 0.0 0.2 752132 21184 ? Sl May15 0:02 /usr/sbin/appidd -N & root 147 0.0 0.0 4440 652 ? S May15 0:00 /bin/sh /etc/init.d/idpd start root 153 0.0 0.0 730520 2768 ? S May15 0:25 /usr/sbin/idpd -N & root 170 0.0 0.1 1001088 12528 ? Sl May15 29:22 /usr/sbin/useridd -N root 211 0.0 0.0 728448 2104 ? Ss May15 0:07 /usr/sbin/mgd root 222 3.5 1.8 3943936 152920 ? Sl May15 1416:22 /usr/sbin/srxpfe -a -d root 250 0.0 0.0 4440 648 ? S May15 0:00 /bin/sh /etc/init.d/utmd start root 256 0.0 0.0 725092 3880 ? S May15 1:36 /usr/sbin/utmd -N & root 267 0.0 0.0 731556 2472 ? Ss May15 2:39 /usr/sbin/kmd root 301 0.0 0.0 18160 1916 pts/8 S+ May15 0:00 /bin/bash root 324 0.0 0.0 853708 3324 ? Sl May15 6:13 /usr/sbin/wmic -N
Removing a cSRX Container Firewall Container or Image
To remove a cSRX Container Firewall container or image:
You must first stop and remove a cSRX Container Firewall container before you can remove a cSRX Container Firewall image.