Logging on to the Docker CLI and using zCX

When a zCX instance is provisioned, it automatically starts a container that provides SSH access for zCX users to use the Docker command line interface (CLI). You can see the following messages in the joblog of the zCX started task:

Please connect to IBM z/OS Container Extensions Docker CLI via your SSH client using port 8022                                                                  
The server is listening on: 9.12.41.127

The SSH container is ready for use when you see the following message in the job log:

GLZM004I zCX Docker services for instance ZCXNAME are available

(where ZCXNAME is the name of zCX started task).

Who should have access to the zCX Docker CLI SSH container?

Through the Docker CLI, users can deploy and manage any containers in the zCX instance. This includes the ability to deploy new containers, start/stop containers, inspect container logs, delete containers, etc. In other words, an authorized user of the zCX Docker CLI acts as a zCX administrator. They have control of all containers deployed in a zCX instance. Therefore, access to the Docker CLI should be carefully granted and maintained. The User management chapter provides information and instruction on defining access to the zCX Docker CLI SSH container through local or LDAP user management.

Logging on to the zCX Docker CLI SSH container

You can access the zCX Docker CLI environment using an SSH client from your workstation/laptop or optionally, from your z/OS UNIX system services shell environment.