onm-shell is a privileged troubleshooting container containing the ONM
command-line tools and common Linux network and device utilities.
docker build -t openbce/onm-shell .Podman can be used instead:
podman build -t openbce/onm-shell .Host networking and privileged access are required for complete host-device, network namespace, firewall, and interface inspection:
docker run -d \
--name onm-shell \
--privileged \
--network host \
openbce/onm-shellEnter the shell:
docker exec -it onm-shell bashThe image includes ethctl, hcactl, smctl, xpuctl, kprobe, tsctl,
kubectl, tcpdump, iproute2, nftables, pciutils, and related tools.
docker stop onm-shell
docker rm onm-shellThe container is intended for interactive diagnostics. Do not expose it as a long-running network service: privileged mode and host networking grant broad access to the host.