Shipyard部署

shipyard是一个docker的管理平台,新版本更新后,功能有很大的提升。

部署方式:容器部署master+slave

一:管理端master部署

#sh shipyard_master.sh

   

shipyard_master.sh

#!/bin/bash########################################Need Images#shipyard/shipyard:latest#swarm:latest#ehazlett/docker-proxy:latest#alpine:latest#microbox/etcd:latest#rethinkdb#######################################if [ "$1" != "" ] && [ "$1" = "-h" ]; then    echo "Shipyard Deploy uses the following environment variables:"    echo "  ACTION: this is the action to use (deploy, upgrade, node, remove)"    echo "  DISCOVERY: discovery system used by Swarm (only if using 'node' action)"    echo "  IMAGE: this overrides the default Shipyard p_w_picpath"    echo "  PREFIX: prefix for container names"    echo "  SHIPYARD_ARGS: these are passed to the Shipyard controller container as controller args"    echo "  TLS_CERT_PATH: path to certs to enable TLS for Shipyard"    echo "  PORT: specify the listen port for the controller (default: 8080)"    echo "  PROXY_PORT: port to run docker proxy (default: 2375)"    exit 1fiif [ -z "`which docker`" ]; then    echo "You must have the Docker CLI installed on your \$PATH"    echo "  See http://docs.docker.com for details"    exit 1fiACTION=${ACTION:-deploy}IMAGE=${IMAGE:-shipyard/shipyard:latest}PREFIX=${PREFIX:-shipyard}SHIPYARD_ARGS=${SHIPYARD_ARGS:-""}TLS_CERT_PATH=${TLS_CERT_PATH:-}CERT_PATH="/etc/shipyard"PROXY_PORT=${PROXY_PORT:-2375}SWARM_PORT=3375SHIPYARD_PROTOCOL=httpSHIPYARD_PORT=${PORT:-8080}DISCOVERY_BACKEND=etcdDISCOVERY_PORT=4001DISCOVERY_PEER_PORT=7001ENABLE_TLS=0CERT_FINGERPRINT=""LOCAL_CA_CERT=""LOCAL_SSL_CERT=""LOCAL_SSL_KEY=""LOCAL_SSL_CLIENT_CERT=""LOCAL_SSL_CLIENT_KEY=""SSL_CA_CERT=""SSL_CERT=""SSL_KEY=""SSL_CLIENT_CERT=""SSL_CLIENT_KEY=""show_cert_help() {    echo "To use TLS in Shipyard, you must have existing certificates."    echo "The certs must be named ca.pem, server.pem, server-key.pem, cert.pem and key.pem"    echo "If you need to generate certificates, see https://github.com/ehazlett/certm for examples."}check_certs() {    if [ -z "$TLS_CERT_PATH" ]; then        return    fi    if [ ! -e $TLS_CERT_PATH ]; then        echo "Error: unable to find certificates in $TLS_CERT_PATH"        show_cert_help        exit 1    fi    if [ "$PROXY_PORT" = "2375" ]; then        PROXY_PORT=2376    fi    SWARM_PORT=3376    SHIPYARD_PROTOCOL=https    LOCAL_SSL_CA_CERT="$TLS_CERT_PATH/ca.pem"    LOCAL_SSL_CERT="$TLS_CERT_PATH/server.pem"    LOCAL_SSL_KEY="$TLS_CERT_PATH/server-key.pem"    LOCAL_SSL_CLIENT_CERT="$TLS_CERT_PATH/cert.pem"    LOCAL_SSL_CLIENT_KEY="$TLS_CERT_PATH/key.pem"    SSL_CA_CERT="$CERT_PATH/ca.pem"    SSL_CERT="$CERT_PATH/server.pem"    SSL_KEY="$CERT_PATH/server-key.pem"    SSL_CLIENT_CERT="$CERT_PATH/cert.pem"    SSL_CLIENT_KEY="$CERT_PATH/key.pem"    CERT_FINGERPRINT=$(openssl x509 -noout -in $LOCAL_SSL_CERT -fingerprint -sha256 | awk -F= '{print $2;}')    if [ ! -e $LOCAL_SSL_CA_CERT ] || [ ! -e $LOCAL_SSL_CERT ] || [ ! -e $LOCAL_SSL_KEY ] || [ ! -e $LOCAL_SSL_CLIENT_CERT ] || [ ! -e $LOCAL_SSL_CLIENT_KEY ]; then        echo "Error: unable to find certificates"        show_cert_help        exit 1    fi    ENABLE_TLS=1}# container functionsstart_certs() {    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-certs \        -v $CERT_PATH \        alpine \        sh)    if [ $ENABLE_TLS = 1 ]; then        docker cp $LOCAL_SSL_CA_CERT $PREFIX-certs:$SSL_CA_CERT        docker cp $LOCAL_SSL_CERT $PREFIX-certs:$SSL_CERT        docker cp $LOCAL_SSL_KEY $PREFIX-certs:$SSL_KEY        docker cp $LOCAL_SSL_CLIENT_CERT $PREFIX-certs:$SSL_CLIENT_CERT        docker cp $LOCAL_SSL_CLIENT_KEY $PREFIX-certs:$SSL_CLIENT_KEY    fi}remove_certs() {    docker rm -fv $PREFIX-certs > /dev/null 2>&1}get_ip() {    SHIPYARD_IP=`docker run --rm --net=host alpine ip route get 8.8.8.8 | awk '{ print $7;  }'`}start_discovery() {    get_ip    ID=$(docker run \        -ti \        -d \        -p 4001:4001 \        -p 7001:7001 \        --restart=always \        --name $PREFIX-discovery \        microbox/etcd:latest -addr $SHIPYARD_IP:$DISCOVERY_PORT -peer-addr $SHIPYARD_IP:$DISCOVERY_PEER_PORT)}remove_discovery() {    docker rm -fv $PREFIX-discovery > /dev/null 2>&1}start_rethinkdb() {    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-rethinkdb \        rethinkdb)}remove_rethinkdb() {    docker rm -fv $PREFIX-rethinkdb > /dev/null 2>&1}start_proxy() {    TLS_OPTS=""    if [ $ENABLE_TLS = 1 ]; then        TLS_OPTS="-e SSL_CA=$SSL_CA_CERT -e SSL_CERT=$SSL_CERT -e SSL_KEY=$SSL_KEY -e SSL_SKIP_VERIFY=1"    fi    # Note: we add SSL_SKIP_VERIFY=1 to skip verification of the client    # certificate in the proxy p_w_picpath.  this will pass it to swarm that    # does verify.  this helps with performance and avoids certificate issues    # when running through the proxy.  ultimately if the cert is invalid    # swarm will fail to return.    ID=$(docker run \        -ti \        -d \        -p $PROXY_PORT:$PROXY_PORT \        --hostname=$HOSTNAME \        --restart=always \        --name $PREFIX-proxy \        -v /var/run/docker.sock:/var/run/docker.sock \        -e PORT=$PROXY_PORT \        --volumes-from=$PREFIX-certs $TLS_OPTS\        ehazlett/docker-proxy:latest)}remove_proxy() {    docker rm -fv $PREFIX-proxy > /dev/null 2>&1}start_swarm_manager() {    get_ip    TLS_OPTS=""    if [ $ENABLE_TLS = 1 ]; then        TLS_OPTS="--tlsverify --tlscacert=$SSL_CA_CERT --tlscert=$SSL_CERT --tlskey=$SSL_KEY"    fi    EXTRA_RUN_OPTS=""    if [ -z "$DISCOVERY" ]; then        DISCOVERY="$DISCOVERY_BACKEND://discovery:$DISCOVERY_PORT"        EXTRA_RUN_OPTS="--link $PREFIX-discovery:discovery"    fi    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-swarm-manager \        --volumes-from=$PREFIX-certs $EXTRA_RUN_OPTS \        swarm:latest \        m --replication --addr $SHIPYARD_IP:$SWARM_PORT --host tcp://0.0.0.0:$SWARM_PORT $TLS_OPTS $DISCOVERY)}remove_swarm_manager() {    docker rm -fv $PREFIX-swarm-manager > /dev/null 2>&1}start_swarm_agent() {    get_ip    if [ -z "$DISCOVERY" ]; then        DISCOVERY="$DISCOVERY_BACKEND://discovery:$DISCOVERY_PORT"        EXTRA_RUN_OPTS="--link $PREFIX-discovery:discovery"    fi    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-swarm-agent $EXTRA_RUN_OPTS \        swarm:latest \        j --addr $SHIPYARD_IP:$PROXY_PORT $DISCOVERY)}remove_swarm_agent() {    docker rm -fv $PREFIX-swarm-agent > /dev/null 2>&1}start_controller() {    #-v $CERT_PATH:/etc/docker:ro \    TLS_OPTS=""    if [ $ENABLE_TLS = 1 ]; then        TLS_OPTS="--tls-ca-cert $SSL_CA_CERT --tls-cert=$SSL_CERT --tls-key=$SSL_KEY --shipyard-tls-ca-cert=$SSL_CA_CERT --shipyard-tls-cert=$SSL_CERT --shipyard-tls-key=$SSL_KEY"    fi    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-controller \        --link $PREFIX-rethinkdb:rethinkdb \        --link $PREFIX-swarm-manager:swarm \        -p $SHIPYARD_PORT:$SHIPYARD_PORT \        --volumes-from=$PREFIX-certs \        $IMAGE \        --debug \        server \        --listen :$SHIPYARD_PORT \        -d tcp://swarm:$SWARM_PORT $TLS_OPTS $SHIPYARD_ARGS)}wait_for_available() {    set +e     IP=$1    PORT=$2    echo Waiting for Shipyard on $IP:$PORT    docker pull ehazlett/curl > /dev/null 2>&1    TLS_OPTS=""    if [ $ENABLE_TLS = 1 ]; then        TLS_OPTS="-k"    fi    until $(docker run --rm ehazlett/curl --output /dev/null --connect-timeout 1 --silent --head --fail $TLS_OPTS $SHIPYARD_PROTOCOL://$IP:$PORT/ > /dev/null 2>&1); do        printf '.'        sleep 1     done    printf '\n'}remove_controller() {    docker rm -fv $PREFIX-controller > /dev/null 2>&1}if [ "$ACTION" = "deploy" ]; then    set -e    check_certs    get_ip     echo "Deploying Shipyard"    echo " -> Starting Database"    start_rethinkdb    echo " -> Starting Discovery"    start_discovery    echo " -> Starting Cert Volume"    start_certs    echo " -> Starting Proxy"    start_proxy    echo " -> Starting Swarm Manager"    start_swarm_manager    echo " -> Starting Swarm Agent"    start_swarm_agent    echo " -> Starting Controller"    start_controller    wait_for_available $SHIPYARD_IP $SHIPYARD_PORT    echo "Shipyard available at $SHIPYARD_PROTOCOL://$SHIPYARD_IP:$SHIPYARD_PORT"    if [ $ENABLE_TLS = 1 ] && [ ! -z "$CERT_FINGERPRINT" ]; then        echo "SSL SHA-256 Fingerprint: $CERT_FINGERPRINT"    fi    echo "Username: admin Password: shipyard"elif [ "$ACTION" = "node" ]; then    set -e    if [ -z "$DISCOVERY" ]; then        echo "You must set the DISCOVERY environment variable"        echo "with the discovery system used with Swarm"        exit 1    fi    check_certs    echo "Adding Node"    echo " -> Starting Cert Volume"    start_certs    echo " -> Starting Proxy"    start_proxy    echo " -> Starting Swarm Manager"    start_swarm_manager $DISCOVERY    echo " -> Starting Swarm Agent"    start_swarm_agent    echo "Node added to Swarm: $SHIPYARD_IP"    elif [ "$ACTION" = "upgrade" ]; then    set -e    check_certs    get_ip    echo "Upgrading Shipyard"    echo " -> Pulling $IMAGE"    docker pull $IMAGE    echo " -> Upgrading Controller"    remove_controller    start_controller    wait_for_available $SHIPYARD_IP 8080    echo "Shipyard controller updated"elif [ "$ACTION" = "remove" ]; then    # ignore errors    set +e    echo "Removing Shipyard"    echo " -> Removing Database"    remove_rethinkdb    echo " -> Removing Discovery"    remove_discovery    echo " -> Removing Cert Volume"    remove_certs    echo " -> Removing Proxy"    remove_proxy    echo " -> Removing Swarm Agent"    remove_swarm_agent    echo " -> Removing Swarm Manager"    remove_swarm_manager    echo " -> Removing Controller"    remove_controller    echo "Done"else    echo "Unknown action $ACTION"    exit 1fi

二:部署slave端(添加host)

#sh shipyard_slave.sh

shipyard_slave.sh   (修改DISCOVERY=etcd://master_ip:4001)

#!/bin/bash########################################Need Images#shipyard/shipyard:latest#swarm:latest#ehazlett/docker-proxy:latest#alpine:latest#microbox/etcd:latest#rethinkdb#######################################ACTION=node########################################IP is master ipDISCOVERY=etcd://10.64.5.167:4001#######################################if [ "$1" != "" ] && [ "$1" = "-h" ]; then    echo "Shipyard Deploy uses the following environment variables:"    echo "  ACTION: this is the action to use (deploy, upgrade, node, remove)"    echo "  DISCOVERY: discovery system used by Swarm (only if using 'node' action)"    echo "  IMAGE: this overrides the default Shipyard p_w_picpath"    echo "  PREFIX: prefix for container names"    echo "  SHIPYARD_ARGS: these are passed to the Shipyard controller container as controller args"    echo "  TLS_CERT_PATH: path to certs to enable TLS for Shipyard"    echo "  PORT: specify the listen port for the controller (default: 8080)"    echo "  PROXY_PORT: port to run docker proxy (default: 2375)"    exit 1fiif [ -z "`which docker`" ]; then    echo "You must have the Docker CLI installed on your \$PATH"    echo "  See http://docs.docker.com for details"    exit 1fiACTION=${ACTION:-deploy}IMAGE=${IMAGE:-shipyard/shipyard:latest}PREFIX=${PREFIX:-shipyard}SHIPYARD_ARGS=${SHIPYARD_ARGS:-""}TLS_CERT_PATH=${TLS_CERT_PATH:-}CERT_PATH="/etc/shipyard"PROXY_PORT=${PROXY_PORT:-2375}SWARM_PORT=3375SHIPYARD_PROTOCOL=httpSHIPYARD_PORT=${PORT:-8080}DISCOVERY_BACKEND=etcdDISCOVERY_PORT=4001DISCOVERY_PEER_PORT=7001ENABLE_TLS=0CERT_FINGERPRINT=""LOCAL_CA_CERT=""LOCAL_SSL_CERT=""LOCAL_SSL_KEY=""LOCAL_SSL_CLIENT_CERT=""LOCAL_SSL_CLIENT_KEY=""SSL_CA_CERT=""SSL_CERT=""SSL_KEY=""SSL_CLIENT_CERT=""SSL_CLIENT_KEY=""show_cert_help() {    echo "To use TLS in Shipyard, you must have existing certificates."    echo "The certs must be named ca.pem, server.pem, server-key.pem, cert.pem and key.pem"    echo "If you need to generate certificates, see https://github.com/ehazlett/certm for examples."}check_certs() {    if [ -z "$TLS_CERT_PATH" ]; then        return    fi    if [ ! -e $TLS_CERT_PATH ]; then        echo "Error: unable to find certificates in $TLS_CERT_PATH"        show_cert_help        exit 1    fi    if [ "$PROXY_PORT" = "2375" ]; then        PROXY_PORT=2376    fi    SWARM_PORT=3376    SHIPYARD_PROTOCOL=https    LOCAL_SSL_CA_CERT="$TLS_CERT_PATH/ca.pem"    LOCAL_SSL_CERT="$TLS_CERT_PATH/server.pem"    LOCAL_SSL_KEY="$TLS_CERT_PATH/server-key.pem"    LOCAL_SSL_CLIENT_CERT="$TLS_CERT_PATH/cert.pem"    LOCAL_SSL_CLIENT_KEY="$TLS_CERT_PATH/key.pem"    SSL_CA_CERT="$CERT_PATH/ca.pem"    SSL_CERT="$CERT_PATH/server.pem"    SSL_KEY="$CERT_PATH/server-key.pem"    SSL_CLIENT_CERT="$CERT_PATH/cert.pem"    SSL_CLIENT_KEY="$CERT_PATH/key.pem"    CERT_FINGERPRINT=$(openssl x509 -noout -in $LOCAL_SSL_CERT -fingerprint -sha256 | awk -F= '{print $2;}')    if [ ! -e $LOCAL_SSL_CA_CERT ] || [ ! -e $LOCAL_SSL_CERT ] || [ ! -e $LOCAL_SSL_KEY ] || [ ! -e $LOCAL_SSL_CLIENT_CERT ] || [ ! -e $LOCAL_SSL_CLIENT_KEY ]; then        echo "Error: unable to find certificates"        show_cert_help        exit 1    fi    ENABLE_TLS=1}# container functionsstart_certs() {    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-certs \        -v $CERT_PATH \        alpine \        sh)    if [ $ENABLE_TLS = 1 ]; then        docker cp $LOCAL_SSL_CA_CERT $PREFIX-certs:$SSL_CA_CERT        docker cp $LOCAL_SSL_CERT $PREFIX-certs:$SSL_CERT        docker cp $LOCAL_SSL_KEY $PREFIX-certs:$SSL_KEY        docker cp $LOCAL_SSL_CLIENT_CERT $PREFIX-certs:$SSL_CLIENT_CERT        docker cp $LOCAL_SSL_CLIENT_KEY $PREFIX-certs:$SSL_CLIENT_KEY    fi}remove_certs() {    docker rm -fv $PREFIX-certs > /dev/null 2>&1}get_ip() {    SHIPYARD_IP=`docker run --rm --net=host alpine ip route get 8.8.8.8 | awk '{ print $7;  }'`}start_discovery() {    get_ip    ID=$(docker run \        -ti \        -d \        -p 4001:4001 \        -p 7001:7001 \        --restart=always \        --name $PREFIX-discovery \        microbox/etcd:latest -addr $SHIPYARD_IP:$DISCOVERY_PORT -peer-addr $SHIPYARD_IP:$DISCOVERY_PEER_PORT)}remove_discovery() {    docker rm -fv $PREFIX-discovery > /dev/null 2>&1}start_rethinkdb() {    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-rethinkdb \        rethinkdb)}remove_rethinkdb() {    docker rm -fv $PREFIX-rethinkdb > /dev/null 2>&1}start_proxy() {    TLS_OPTS=""    if [ $ENABLE_TLS = 1 ]; then        TLS_OPTS="-e SSL_CA=$SSL_CA_CERT -e SSL_CERT=$SSL_CERT -e SSL_KEY=$SSL_KEY -e SSL_SKIP_VERIFY=1"    fi    # Note: we add SSL_SKIP_VERIFY=1 to skip verification of the client    # certificate in the proxy p_w_picpath.  this will pass it to swarm that    # does verify.  this helps with performance and avoids certificate issues    # when running through the proxy.  ultimately if the cert is invalid    # swarm will fail to return.    ID=$(docker run \        -ti \        -d \        -p $PROXY_PORT:$PROXY_PORT \        --hostname=$HOSTNAME \        --restart=always \        --name $PREFIX-proxy \        -v /var/run/docker.sock:/var/run/docker.sock \        -e PORT=$PROXY_PORT \        --volumes-from=$PREFIX-certs $TLS_OPTS\        ehazlett/docker-proxy:latest)}remove_proxy() {    docker rm -fv $PREFIX-proxy > /dev/null 2>&1}start_swarm_manager() {    get_ip    TLS_OPTS=""    if [ $ENABLE_TLS = 1 ]; then        TLS_OPTS="--tlsverify --tlscacert=$SSL_CA_CERT --tlscert=$SSL_CERT --tlskey=$SSL_KEY"    fi    EXTRA_RUN_OPTS=""    if [ -z "$DISCOVERY" ]; then        DISCOVERY="$DISCOVERY_BACKEND://discovery:$DISCOVERY_PORT"        EXTRA_RUN_OPTS="--link $PREFIX-discovery:discovery"    fi    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-swarm-manager \        --volumes-from=$PREFIX-certs $EXTRA_RUN_OPTS \        swarm:latest \        m --replication --addr $SHIPYARD_IP:$SWARM_PORT --host tcp://0.0.0.0:$SWARM_PORT $TLS_OPTS $DISCOVERY)}remove_swarm_manager() {    docker rm -fv $PREFIX-swarm-manager > /dev/null 2>&1}start_swarm_agent() {    get_ip    if [ -z "$DISCOVERY" ]; then        DISCOVERY="$DISCOVERY_BACKEND://discovery:$DISCOVERY_PORT"        EXTRA_RUN_OPTS="--link $PREFIX-discovery:discovery"    fi    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-swarm-agent $EXTRA_RUN_OPTS \        swarm:latest \        j --addr $SHIPYARD_IP:$PROXY_PORT $DISCOVERY)}remove_swarm_agent() {    docker rm -fv $PREFIX-swarm-agent > /dev/null 2>&1}start_controller() {    #-v $CERT_PATH:/etc/docker:ro \    TLS_OPTS=""    if [ $ENABLE_TLS = 1 ]; then        TLS_OPTS="--tls-ca-cert $SSL_CA_CERT --tls-cert=$SSL_CERT --tls-key=$SSL_KEY --shipyard-tls-ca-cert=$SSL_CA_CERT --shipyard-tls-cert=$SSL_CERT --shipyard-tls-key=$SSL_KEY"    fi    ID=$(docker run \        -ti \        -d \        --restart=always \        --name $PREFIX-controller \        --link $PREFIX-rethinkdb:rethinkdb \        --link $PREFIX-swarm-manager:swarm \        -p $SHIPYARD_PORT:$SHIPYARD_PORT \        --volumes-from=$PREFIX-certs \        $IMAGE \        --debug \        server \        --listen :$SHIPYARD_PORT \        -d tcp://swarm:$SWARM_PORT $TLS_OPTS $SHIPYARD_ARGS)}wait_for_available() {    set +e     IP=$1    PORT=$2    echo Waiting for Shipyard on $IP:$PORT    docker pull ehazlett/curl > /dev/null 2>&1    TLS_OPTS=""    if [ $ENABLE_TLS = 1 ]; then        TLS_OPTS="-k"    fi    until $(docker run --rm ehazlett/curl --output /dev/null --connect-timeout 1 --silent --head --fail $TLS_OPTS $SHIPYARD_PROTOCOL://$IP:$PORT/ > /dev/null 2>&1); do        printf '.'        sleep 1     done    printf '\n'}remove_controller() {    docker rm -fv $PREFIX-controller > /dev/null 2>&1}if [ "$ACTION" = "deploy" ]; then    set -e    check_certs    get_ip     echo "Deploying Shipyard"    echo " -> Starting Database"    start_rethinkdb    echo " -> Starting Discovery"    start_discovery    echo " -> Starting Cert Volume"    start_certs    echo " -> Starting Proxy"    start_proxy    echo " -> Starting Swarm Manager"    start_swarm_manager    echo " -> Starting Swarm Agent"    start_swarm_agent    echo " -> Starting Controller"    start_controller    wait_for_available $SHIPYARD_IP $SHIPYARD_PORT    echo "Shipyard available at $SHIPYARD_PROTOCOL://$SHIPYARD_IP:$SHIPYARD_PORT"    if [ $ENABLE_TLS = 1 ] && [ ! -z "$CERT_FINGERPRINT" ]; then        echo "SSL SHA-256 Fingerprint: $CERT_FINGERPRINT"    fi    echo "Username: admin Password: shipyard"elif [ "$ACTION" = "node" ]; then    set -e    if [ -z "$DISCOVERY" ]; then        echo "You must set the DISCOVERY environment variable"        echo "with the discovery system used with Swarm"        exit 1    fi    check_certs    echo "Adding Node"    echo " -> Starting Cert Volume"    start_certs    echo " -> Starting Proxy"    start_proxy    echo " -> Starting Swarm Manager"    start_swarm_manager $DISCOVERY    echo " -> Starting Swarm Agent"    start_swarm_agent    echo "Node added to Swarm: $SHIPYARD_IP"    elif [ "$ACTION" = "upgrade" ]; then    set -e    check_certs    get_ip    echo "Upgrading Shipyard"    echo " -> Pulling $IMAGE"    docker pull $IMAGE    echo " -> Upgrading Controller"    remove_controller    start_controller    wait_for_available $SHIPYARD_IP 8080    echo "Shipyard controller updated"elif [ "$ACTION" = "remove" ]; then    # ignore errors    set +e    echo "Removing Shipyard"    echo " -> Removing Database"    remove_rethinkdb    echo " -> Removing Discovery"    remove_discovery    echo " -> Removing Cert Volume"    remove_certs    echo " -> Removing Proxy"    remove_proxy    echo " -> Removing Swarm Agent"    remove_swarm_agent    echo " -> Removing Swarm Manager"    remove_swarm_manager    echo " -> Removing Controller"    remove_controller    echo "Done"else    echo "Unknown action $ACTION"    exit 1fi