DataNode Setup with Docker (Windows)

Prerequisites

• Installed Docker
  • Instruction - https://docs.docker.com/docker-for-windows/install/
  • Enabled "Hyper-V Windows Features"

Authentication Methods

ARACHNE DataNode supports several authentication methods in Standalone mode using Authenticator library:

• LDAP
• Active Directory
• Google Cloud Platform
• REST API
• Database Query

Configuration example below provides idea how to configure authentication with Active Directory.

Nexts steps will be executed with Powershell.

Docker Network

Docker containers will communicate with each other in Docker network. Thus, we will create one:

docker network create arachnenetwork

Docker Volumes

To keep DataNode system database on host machine we will create several Docker volumes:

docker volume create --name=datanode_postgresql_var_lib
docker volume create --name=datanode_postgresql_var_log
docker volume create --name=datanode_postgresql_etc
docker volume create --name=datanode_files
docker volume create --name=datanode_tmp

Configuration and Environment Variables File

1. Create directory

mkdir c:\datanode-ce
cd c:\datanode-ce

2. Create file in c:\datanode-ce directory with name datanode.env:

3. Populate the file with the following content:

datanode_runMode=STANDALONE
datanode.baseURL=http://<my.host.name> # In case of localhost, use http://host.docker.internal
datanode.port=80
server.ssl.enabled=false
ACHILES_STARTUP=0
jasypt.encryptor.password=arachne
jasypt.encryptor.algorythm=PBEWITHMD5ANDDES
docker.host=unix:///var/run/docker.sock
datanode.healthcheck.period=600000
datasource.healthcheck.period=600000


# Execution Engine Parameters
executionEngine.protocol=https
executionEngine.host=execution-engine
executionEngine.port=8888
executionEngine.analysisUri=/api/v1/analyze

# Active Directory Settings Example
security_method=ad
authenticator.user.registrationStrategy=CREATE_IF_NOT_EXISTS
authenticator.methods.ad.service=org.ohdsi.authenticator.service.directory.ad.AdAuthService
authenticator.methods.ad.config.baseDn=DC=example,DC=com
# Both formats works for AD either sAMAccountName (with or w/o domainSuffix) and distingueshedName
authenticator.methods.ad.config.userDn=<AD_SERVICE_ACCOUNT_USERNAME>
authenticator.methods.ad.config.password=<AD_SERVICE_ACCOUNT_PASSWORD>
authenticator.methods.ad.config.domainSuffix=<example.com>
authenticator.methods.ad.config.url=<ldap://pdc.example.com:389>
authenticator.methods.ad.config.searchFilter=(&(userPrincipalName={0})(memberOf=CN=Users,DC=example,DC=com) 
authenticator.methods.ad.config.ignorePartialResultException=true
authenticator.methods.ad.config.fieldsToExtract.firstName=givenName
authenticator.methods.ad.config.fieldsToExtract.lastName=sn

tmp.location-on-host=/tmp
datanode.httpClient.connectTimeout=120
datanode.httpClient.writeTimeout=600
datanode.httpClient.readTimeout=600
security.jwt.token.secretKey=${datanode.jwt.secret}
security.jwt.token.validityInSeconds=${datanode.jwt.expiration}

Edit properties and save file.

ARACHNE DataNode Container

Pull Docker image:

docker pull odysseusinc/arachne-datanode-ce:1.19.1

Create container with the following command:

docker create --name datanode  `
--restart=always  `
--network="arachnenetwork"  `
-p 127.0.0.1:80:8880  `
-v datanode_postgresql_var_lib:/var/lib/postgresql  `
-v datanode_postgresql_var_log:/var/log/postgresql  `
-v datanode_postgresql_etc:/etc/postgresql  `
-v datanode_files:/var/arachne/files  `
-v datanode_tmp:/tmp `
-v /var/run/docker.sock:/var/run/docker.sock   `
--env-file "c:\datanode-ce\datanode.env"  `
odysseusinc/arachne-datanode-ce:1.19.1

And start container:

docker start datanode

ARACHNE Execution Engine Container

Pull Docker image:

docker pull odysseusinc/execution_engine:1.19.1

Create Docker volume:

docker volume create --name=ee_tmp

Create Docker container:

docker create  `
--name execution-engine  `
--privileged  `
--restart=always  `
--network="arachnenetwork"  `
-p 127.0.0.1:8888:8888  `
-v ee_tmp:/tmp  `
-e "server.servlet.session.timeout=600s"  `
odysseusinc/execution_engine:1.19.1

And start container:

docker start execution-engine

UI Access

After both applications are installed you can access users web interface:

http://<my.host.name> 

or if you configured on your local machine, use

http://localhost

Open ARACHNE DataNode URL in browsers and login with your AD account.