Notakey Authentication Appliance contains builtin plugin container support that can be used to run web based container and  image management.


To start portainer service run the following commands:


$ ntk cfg set :plugins.portainer '{"ports": ["9000:9000"], "image": "portainer/portainer:latest", "volumes": [ "/var/run/docker.sock:/var/run/docker.sock", "portainer-config:/data" ] }' --json-input
$ ntk plugins restart


Management UI will be available on appliance ip, port 9000 (http://appliance-ip:9000). You will have to setup initial admin credentials that will be stored in local docker volume called "portainer-config".  If you have a cluster of nodes, plugin restart has to be run on every node and credentials will not be synced by default. This can be fixed by using external NFS server mount on every node that is passed as volume for portainer container, see below.


$ docker volume create \
    --name portainer-config \
    --opt type=nfs \
    --opt device=:<nfs export path> \
    --opt o=addr=<nfs host>