Cryptlex Forums

VM detection in Docker

X
xavier.allaume

Hello,

Having deployed our Cryptlex-containing app in BitBucket pipes so as to perform DevOps on our project, we noticed that VM detection of these app instances running in docker containers doesn’t detect such a situation. Although we set a VM detection and forbidding in the license policy, Cryptlex doesn’t preclude the code from being executed in these docker containers. This seems special since we can’t reproduce the issue with our own docker images or VMs.

Cordially,

S
Syed Faizan

Hi,

Since Docker is not a virtual machine so AllowVm property doesn’t affect the application run in Docker.

X
xavier.allaume

Hi and thanks for your quick reply,

OK, we understand our local test was wrong since we were running docker inside a VM, Cryptlex blocking, and us thinking that AllowVm=false would block docker execution. Is there anyway we can prevent this or is the 200$/month floating server our only option to control the execution in docker images with your technology?

Cordially,

A
Adnan KamiliCryptlex team

Hi Xavier,

We will see if we can add support for the same in node-locked/hosted-floating licenses too. Will keep you posted.

X
xavier.allaume

Thank you very much. At least, the hosted-floating license is clearly the most important for industrial (non connected) uses.

X
xavier.allaume

Hi,

Digging a bit further, I can’t find a way to offer my customers a trial period with a trial policy that prevents them from running the trial inside docker. Then they would simply rerun a docker of the trial app before the end of the trial and have a continuous use of the app for free. Or is there something, most probably, that we don’t understand correctly.

Thanks for your help,

Cordially,

Xavier

A
Adnan KamiliCryptlex team

Hi Xavier,

We have added server side support for this. We will add the support in LexActivator in the next release, may take a week or two.

X
xavier.allaume

Wundershön!!!

Eagerly waiting for it, our launch depends on it!

Thank you!
Xavier

A
Adnan KamiliCryptlex team

Hi Xavier,

We have added the required feature. Please use the latest version of the LexActivator.

In your policies/licenses you can set allowContainerActivation to false, through Web API.

https://docs.cryptlex.com/license-management/license-policies#allow-container-activations

X
xavier.allaume

Thank you so much Adnan

X
xavier.allaume

OK, trying this this morning, I can’t find the checkbox with “Allow Container Activation” when creating a Trial Policy. How do I create this policy? Thank you

A
Adnan KamiliCryptlex team

You need to update the policy using the web API. The option is not exposed in the dashboard.

P
pat

Hi Adnan,
I haven’t been able to find out how to set “ALLOW CONTAINER ACTIVATION” to false from the dashboard. Am i missing something?
Thanks in advance,
Patrice

A
Ahmad Kemsan

Hi pat,

The option “ALLOW CONTAINER ACTIVATION” is not exposed in the dashboard. You can only do it using the web API. Below is the link which can help you know how you can do it using the web API:

← Back to all topics · 14 posts · 1877 views · opened 2020-12-04