Offline (air-gapped) installation

Domino provides offline installation bundles for air-gapped environments without internet access to upstream image and chart sources. These bundles contain all the container images needed to deploy Domino in air-gapped environments.

Prerequisites

Download the installation bundle

Bundle URLs are available on the Releases page. Contact your Domino account team for download credentials.

Set the release tag for your Domino version as specified on the releases page. Download only the versioned image collection (docker-images-6.2.x.tar) which contains all required images:

export RELEASE_TAG=6.2.x.catalog-xxxxxxx


Two download options are available:

  • Full bundle: A single large file. Use this option if you have a stable network connection.

  • Partitioned bundle: Multiple smaller files that you combine after download. Use this option if your connection is unstable or has size limits that prevent downloading the full bundle.

Download the full bundle

Use curl to download the bundle:

curl -u username:password -#SfLOJ https://mirrors.domino.tech/s3/domino-artifacts/offline/fleetcommand-agent-${RELEASE_TAG}/docker-images-6.2.x.tar


If you experience network issues, use wget with the --continue or -c option to resume interrupted downloads:

wget -c --user domino-registry --password xxxxxxx https://mirrors.domino.tech/s3/domino-artifacts/offline/fleetcommand-agent-${RELEASE_TAG}/docker-images-6.2.x.tar

Download the partitioned bundle

If you can’t download the full bundle, use the partitioned version instead.

  1. Download the list of part filenames:

    curl -u username:password -#SfLOJ https://mirrors.domino.tech/s3/domino-artifacts/offline/fleetcommand-agent-${RELEASE_TAG}/docker-images-6.2.x.parts.txt


  1. Download each part:

    while read part; do curl -u username:password -#SfLOJ "https://mirrors.domino.tech/s3/domino-artifacts/offline/fleetcommand-agent-${RELEASE_TAG}/$part"; done < docker-images-6.2.x.parts.txt


  1. Combine the downloaded parts into the full bundle:

    cat docker-images-6.2.x.tar[0-9]* > docker-images-6.2.x.tar

Verify the download

Use SHA-256 checksums to verify your downloaded bundle wasn’t corrupted or tampered with.


Example for the full bundle:

curl -u username:password -#SfLOJ https://mirrors.domino.tech/s3/domino-artifacts/offline/fleetcommand-agent-${RELEASE_TAG}/docker-images-6.2.x.tar.sha256sum
sha256sum -c docker-images-6.2.x.tar.sha256sum


Example for the partitioned bundle:

curl -u username:password -#SfLOJ https://mirrors.domino.tech/s3/domino-artifacts/offline/fleetcommand-agent-${RELEASE_TAG}/docker-images-6.2.x.parts.sha256sum
sha256sum -c docker-images-6.2.x.parts.sha256sum


Expected result: The output displays <filename>: OK. If verification fails, re-download the bundle and try again.

Extract and load images

The images bundle is a .tar archive that must be extracted before you use it.

  1. Extract the bundle:

    tar -xvf docker-images-6.2.x.tar

    The extracted bundle contains:

    • Individual Docker image .tar files

    • An images.json metadata file

    • A domino-load-images.py script

  2. Load images into your private registry by running the script from the same director as the extracted files. Example:

    python domino-load-images.py your-registry-url.domain:port

Once images have been loaded into your private registry you’re ready to install Domino.

Install Domino

After loading images into your private registry, create your configuration file with custom registry settings.

Run ddlctl create config with the --offline flag and specify your registry URL:

ddlctl create config --offline --agent-version ${RELEASE_TAG} --agent-repository "your-registry-url.domain:port/custom-repository" --image-registry "your-registry-url.domain:port" --username "your-username" --password "your-password"


Note: If you’re using ddlctl version 0.4.4, you must specify dummy values for --username and --password when using the --offline flag. This requirement is removed in later versions.

If your registry requires authentication, verify the image_registries section in your generated configuration contains the correct credentials:

helm:
  image_registries:
  - server: your-registry-url.domain:port
    username: '<username>'
    password: '<password>'


Helm charts come prepackaged within the fleetcommand-agent image that runs reconciliation jobs for the Platform Operator. No additional fields are required in the helm configuration object besides image_registries.

With your configuration file ready, you can proceed with the installation as outlined in Install Domino.

Get the images list (optional)

To download a list of images contained in a Domino release:

curl -u username:password -#SfLOJ https://mirrors.domino.tech/s3/domino-artifacts/offline/fleetcommand-agent-${RELEASE_TAG}/images.json

The JSON file contains key-value pairs of Domino versions and their associated images.

To extract image names for a specific version using jq:

jq -r '.["6.2.x"][].name' images.json

Related information