Custom docker deployment script

[kesawi]

I've written a custom bash deployment script to update multiple docker containers that use the same wildcard certificate. Each container has slighltly differing requirements for certificate location, format, certificate name, etc. To manage this I've assigned labels to the containers with the different configuration settings, which the script is meant to read and then apply to each individual container on a case by case basis.

What I'm finding is that the $CERTTYPE_LABEL variable which controls how the certificates are installed doesn't appear to be working.

I generate the label using the following command:

CERTTYPE_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_CERTTYPELABEL"}}' "$container_id")

When I try using this command from the shell, if returns a blank value. However, if I replace it with the actual string sh.acme.autoload.certtype instead of the variable $DEPLOY_DOCKERMULTI_CONTAINER_CERTTYPELABEL it returns the correct value:

CERTTYPE_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.certtype"}}' "$container_id")

I know I could just replace the variable with the actual value in the script, but was hoping keep the variable so it only needs to be modified in one spot should I ever need to change it.

Any suggestions as to what I'm doing wrong?

Full script is below:

#!/bin/bash

# Additional variables added
DEPLOY_DOCKERMULTI_CONTAINER_CERTPATHLABEL='sh.acme.autoload.certpath'
DEPLOY_DOCKERMULTI_CONTAINER_DOMAINLABEL='sh.acme.autoload.domain'
DEPLOY_DOCKERMULTI_CONTAINER_CERTTYPELABEL='sh.acme.autoload.certtype'
DEPLOY_DOCKERMULTI_CONTAINER_CERTNAMELABEL='sh.acme.autoload.certname'
DEPLOY_DOCKERMULTI_CONTAINER_KEYNAMELABEL='sh.acme.autoload.keyname'
DEPLOY_DOCKERMULTI_CONTAINER_VNCNAMELABEL='sh.acme.autoload.vncname'
DEPLOY_DOCKERMULTI_CONTAINER_FULLCHAINNAMELABEL='sh.acme.autoload.fullchainname'
DEPLOY_DOCKERMULTI_CONTAINER_CANAMELABEL='sh.acme.autoload.caname'
DEPLOY_DOCKERMULTI_CONTAINER_P12NAMELABEL='sh.acme.autoload.p12name'
DEPLOY_DOCKERMULTI_CONTAINER_P12PASS='somepassword'

# Define the dockermulti_deploy function
dockermulti_deploy() {

    _cdomain="$1"
    _ckey="$2"
    _ccert="$3"
    _cca="$4"
    _cfullchain="$5"

    _debug _cdomain "$_cdomain"
    _debug _ckey "$_ckey"
    _debug _ccert "$_ccert"
    _debug _cca "$_cca"
    _debug _cfullchain "$_cfullchain"

    _getdeployconf DEPLOY_DOCKERMULTI_CONTAINER_CERTPATHLABEL
    _getdeployconf DEPLOY_DOCKERMULTI_CONTAINER_DOMAINLABEL
    _getdeployconf DEPLOY_DOCKERMULTI_CONTAINER_CERTTYPELABEL
    _getdeployconf DEPLOY_DOCKERMULTI_CONTAINER_CERTNAMELABEL
    _getdeployconf DEPLOY_DOCKERMULTI_CONTAINER_KEYNAMELABEL
    _getdeployconf DEPLOY_DOCKERMULTI_CONTAINER_VNCNAMELABEL
    _getdeployconf DEPLOY_DOCKERMULTI_CONTAINER_FULLCHAINNAMELABEL
    _getdeployconf DEPLOY_DOCKERMULTI_CONTAINER_CANAMELABEL
    _getdeployconf DEPLOY_DOCKERMULTI_CONTAINER_P12NAMELABEL
    _getdeployconf DEPLOY_DOCKERMULTI_CONTAINER_P12PASS

    _debug2 DEPLOY_DOCKERMULTI_CONTAINER_CERTPATHLABEL "$DEPLOY_DOCKERMULTI_CONTAINER_CERTPATHLABEL"
    _debug2 DEPLOY_DOCKERMULTI_CONTAINER_DOMAINLABEL "$DEPLOY_DOCKERMULTI_CONTAINER_DOMAINLABEL"
    _debug2 DEPLOY_DOCKERMULTI_CONTAINER_CERTTYPELABEL "$DEPLOY_DOCKERMULTI_CONTAINER_CERTTYPELABEL"
    _debug2 DEPLOY_DOCKERMULTI_CONTAINER_CERTNAMELABEL "$DEPLOY_DOCKERMULTI_CONTAINER_CERTNAMELABEL"
    _debug2 DEPLOY_DOCKERMULTI_CONTAINER_KEYNAMELABEL "$DEPLOY_DOCKERMULTI_CONTAINER_KEYNAMELABEL"
    _debug2 DEPLOY_DOCKERMULTI_CONTAINER_VNCNAMELABEL "$DEPLOY_DOCKERMULTI_CONTAINER_VNCNAMELABEL"
    _debug2 DEPLOY_DOCKERMULTI_CONTAINER_FULLCHAINNAMELABEL "$DEPLOY_DOCKERMULTI_CONTAINER_FULLCHAINNAMELABEL"
    _debug2 DEPLOY_DOCKERMULTI_CONTAINER_CANAMELABEL "$DEPLOY_DOCKERMULTI_CONTAINER_CANAMELABEL"
    _debug2 DEPLOY_DOCKERMULTI_CONTAINER_P12NAMELABEL "$DEPLOY_DOCKERMULTI_CONTAINER_P12NAMELABEL"
    _debug2 DEPLOY_DOCKERMULTI_CONTAINER_P12PASS "$DEPLOY_DOCKERMULTI_CONTAINER_P12PASS"

    # Flag to track errors
    ERROR_FLAG=false

    # Generate pkcs12 file
    _debug "Generate import pkcs12"
    _import_pkcs12="$(_mktemp)"
    _toPkcs "$_import_pkcs12" "$_ckey" "$_ccert" "$_cca" "$DEPLOY_DOCKERMULTI_CONTAINER_P12PASS"
    # shellcheck disable=SC2181
    if [ "$?" != "0" ]; then
        _err "Error generating pkcs12. Please re-run with --debug and report a bug."
        return 1
    fi

    # Iterate over running containers with the specified label
    while IFS= read -r container_id; do
        # Get the CERTPATH & CERTTPYE label from the container
        if ! CERTPATH_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_CERTPATHLABEL"}}' "$container_id"); then
            echo "Error getting CERTPATH_LABEL for $container_id"
            ERROR_FLAG=true
            continue
        fi
        if ! CERTTYPE_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_CERTTYPELABEL"}}' "$container_id"); then
            echo "Error getting CERTTYPE_LABEL for $container_id"
            ERROR_FLAG=true
            continue
        fi
				
        # Use CERTPATH_LABEL or /config if not set
        DESTINATION_PATH="${CERTPATH_LABEL:-/config}"

        # Copy files based on CERTTYPELABEL
        if [ "$CERTTYPE_LABEL" == "p12" ]; then
            # Get P12NAME label
            if ! P12NAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_P12NAMELABEL"}}' "$container_id"); then
                echo "Error getting P12NAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi

            # Copy the _import_pkcs12 file into the container
            docker cp "$_import_pkcs12" "$container_id:$DESTINATION_PATH/$P12NAME_LABEL" || { echo "Error copying file to $container_id"; ERROR_FLAG=true; continue; }
            echo "File copied to container: $container_id"

        elif [ "$CERTTYPE_LABEL" == "ca" ]; then
            # Get KEYNAME, CERTNAME, and CANAME labels
            if ! KEYNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_KEYNAMELABEL"}}' "$container_id"); then
                echo "Error getting KEYNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! CERTNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_CERTNAMELABEL"}}' "$container_id"); then
                echo "Error getting CERTNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! CANAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_CANAMELABEL"}}' "$container_id"); then
                echo "Error getting CANAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi

            # Copy the _ckey, _ccert, and _cca files into the container
            docker cp "$_ckey" "$container_id:$DESTINATION_PATH/$KEYNAME_LABEL" || { echo "Error copying key file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_ccert" "$container_id:$DESTINATION_PATH/$CERTNAME_LABEL" || { echo "Error copying cert file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_cca" "$container_id:$DESTINATION_PATH/$CANAME_LABEL" || { echo "Error copying ca file to $container_id"; ERROR_FLAG=true; continue; }
            echo "Files copied to container: $container_id"

        elif [ "$CERTTYPE_LABEL" == "all" ]; then
            # Get KEYNAME, CERTNAME, CANAME, and FULLCHAINNAME labels
            if ! KEYNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_KEYNAMELABEL"}}' "$container_id"); then
                echo "Error getting KEYNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! CERTNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_CERTNAMELABEL"}}' "$container_id"); then
                echo "Error getting CERTNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! CANAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_CANAMELABEL"}}' "$container_id"); then
                echo "Error getting CANAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! FULLCHAINNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_FULLCHAINNAMELABEL"}}' "$container_id"); then
                echo "Error getting FULLCHAINNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi

            # Copy the _ckey, _ccert, _cca, and _cfullchain files into the container
            docker cp "$_ckey" "$container_id:$DESTINATION_PATH/$KEYNAME_LABEL" || { echo "Error copying key file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_ccert" "$container_id:$DESTINATION_PATH/$CERTNAME_LABEL" || { echo "Error copying cert file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_cca" "$container_id:$DESTINATION_PATH/$CANAME_LABEL" || { echo "Error copying ca file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_cfullchain" "$container_id:$DESTINATION_PATH/$FULLCHAINNAME_LABEL" || { echo "Error copying fullchain file to $container_id"; ERROR_FLAG=true; continue; }
            echo "Files copied to container: $container_id"

        elif [ "$CERTTYPE_LABEL" == "cert" ]; then
            # Get KEYNAME and CERTNAME labels
            if ! KEYNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_KEYNAMELABEL"}}' "$container_id"); then
                echo "Error getting KEYNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! CERTNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_CERTNAMELABEL"}}' "$container_id"); then
                echo "Error getting CERTNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi

            # Copy the _ckey and _ccert files into the container
            docker cp "$_ckey" "$container_id:$DESTINATION_PATH/$KEYNAME_LABEL" || { echo "Error copying key file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_ccert" "$container_id:$DESTINATION_PATH/$CERTNAME_LABEL" || { echo "Error copying cert file to $container_id"; ERROR_FLAG=true; continue; }

            echo "Files copied to container: $container_id"

        elif [ "$CERTTYPE_LABEL" == "fullchain" ]; then
            # Get KEYNAME and FULLCHAINNAME labels
            if ! KEYNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_KEYNAMELABEL"}}' "$container_id"); then
                echo "Error getting KEYNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! FULLCHAINNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_FULLCHAINNAMELABEL"}}' "$container_id"); then
                echo "Error getting FULLCHAINNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi

            # Copy the _ckey and _ccert files into the container
            docker cp "$_ckey" "$container_id:$DESTINATION_PATH/$KEYNAME_LABEL" || { echo "Error copying key file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_cfullchain" "$container_id:$DESTINATION_PATH/$FULLCHAINNAME_LABEL" || { echo "Error copying cert file to $container_id"; ERROR_FLAG=true; continue; }

            echo "Files copied to container: $container_id"


        elif [ "$CERTTYPE_LABEL" == "crashplan" ]; then
            # Get KEYNAME, VNCNAME and FULLCHAINNAME labels
            if ! KEYNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_KEYNAMELABEL"}}' "$container_id"); then
                echo "Error getting KEYNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! VNCNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_VNCNAMELABEL"}}' "$container_id"); then
                echo "Error getting VNCNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! FULLCHAINNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "$DEPLOY_DOCKERMULTI_CONTAINER_FULLCHAINNAMELABEL"}}' "$container_id"); then
                echo "Error getting FULLCHAINNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi

			# Create combined VNC Key
			cat $_ckey > /tmp/vnc.pem
			if [ "$?" != "0" ]; then
				echo "Error generating combined key for $container_id"
                ERROR_FLAG=true
                continue
			fi
			cat $_cfullchain >> /tmp/vnc.pem
			if [ "$?" != "0" ]; then
				echo "Error generating combined key for $container_id"
                ERROR_FLAG=true
                continue
			fi
            # Copy the _ckey, _ccert files into the container
            docker cp "$_ckey" "$container_id:$DESTINATION_PATH/$KEYNAME_LABEL" || { echo "Error copying key file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_cfullchain" "$container_id:$DESTINATION_PATH/$FULLCHAINNAME_LABEL" || { echo "Error copying cert file to $container_id"; ERROR_FLAG=true; continue; }
			docker cp "/tmp/vnc.pem" "$container_id:$DESTINATION_PATH/$VNCNAME_LABEL" || { echo "Error copying VNC cert file to $container_id"; ERROR_FLAG=true; continue; }
			rm /tmp/vnc.pem
            echo "Files copied to container: $container_id"

        else
            # Set error flag and print error message
            ERROR_FLAG=true
            echo "Error, incorrect certificate type label defined for $container_id"
			continue
        fi
		
		echo "Restarting container: $container_id"
        docker restart "$container_id" || { echo "Error restarting $container_id"; ERROR_FLAG=true; continue; }
    
        echo "Container restarted: $container_id"
    done < <(docker ps --filter "label=$DEPLOY_DOCKERMULTI_CONTAINER_DOMAINLABEL=$_cdomain" --quiet)

    # Check if any errors occurred during processing
    if [ "$ERROR_FLAG" = true ]; then
        _err "Docker Multi Deploy script completed with errors."
        return 1
    fi
}

[kesawi]

I ended up abandoning using variables for docker labels and just hard coded them in the script. Didn't really see much benefit in using them as variables since they don't really change.

Final script.

#!/bin/bash

# About this script
#
# This script will deploy a single certificate to multiple docker continers
# where the cert domain matches the container label sh.acme.autoload.domain
#
# It will then read a series of container labels to determine the format of
# the private key and certificates required by the container, the path to
# the private key and certificates in the container, and the filenames for the
# private key and certtificate in the container.
#
# The only variable required from the user is the P12 password where this is
# used.


# Variables
#DEPLOY_DOCKERMULTI_CONTAINER_P12PASS='xxxxxxxxxx'

# Define the dockermulti_deploy function
dockermulti_deploy() {

    _cdomain="$1"
    _ckey="$2"
    _ccert="$3"
    _cca="$4"
    _cfullchain="$5"

    _debug _cdomain "$_cdomain"
    _debug _ckey "$_ckey"
    _debug _ccert "$_ccert"
    _debug _cca "$_cca"
    _debug _cfullchain "$_cfullchain"

    _getdeployconf DEPLOY_DOCKERMULTI_CONTAINER_P12PASS

    _debug2 DEPLOY_DOCKERMULTI_CONTAINER_P12PASS "$DEPLOY_DOCKERMULTI_CONTAINER_P12PASS"

    # Flag to track errors
    ERROR_FLAG=false

    # Generate pkcs12 file
    _debug "Generate import pkcs12"
    _import_pkcs12="$(_mktemp)"
    _toPkcs "$_import_pkcs12" "$_ckey" "$_ccert" "$_cca" "$DEPLOY_DOCKERMULTI_CONTAINER_P12PASS"
    # shellcheck disable=SC2181
    if [ "$?" != "0" ]; then
        _err "Error generating pkcs12. Please re-run with --debug and report a bug."
        return 1
    fi

    # Iterate over running containers with the specified label
    while IFS= read -r container_id; do
        # Get the CERTPATH & CERTTPYE label from the container
        if ! CERTPATH_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.certpath"}}' "$container_id"); then
            echo "Error getting CERTPATH_LABEL for $container_id"
            ERROR_FLAG=true
            continue
        fi
        if ! CERTTYPE_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.certtype"}}' "$container_id"); then
            echo "Error getting CERTTYPE_LABEL for $container_id"
            ERROR_FLAG=true
            continue
        fi

        # Use CERTPATH_LABEL or /config if not set
        DESTINATION_PATH="${CERTPATH_LABEL:-/config}"

        # Copy files based on CERTTYPELABEL
        if [ "$CERTTYPE_LABEL" == "p12" ]; then
            # Get P12NAME label
            if ! P12NAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.p12name"}}' "$container_id"); then
                echo "Error getting P12NAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi

            # Copy the _import_pkcs12 file into the container
            docker cp "$_import_pkcs12" "$container_id:$DESTINATION_PATH/$P12NAME_LABEL" || { echo "Error copying file to $container_id"; ERROR_FLAG=true; continue; }
            echo "File copied to container: $container_id"

        elif [ "$CERTTYPE_LABEL" == "ca" ]; then
            # Get KEYNAME, CERTNAME, and CANAME labels
            if ! KEYNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.keyname"}}' "$container_id"); then
                echo "Error getting KEYNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! CERTNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.certname"}}' "$container_id"); then
                echo "Error getting CERTNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! CANAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.caname"}}' "$container_id"); then
                echo "Error getting CANAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi

            # Copy the _ckey, _ccert, and _cca files into the container
            docker cp "$_ckey" "$container_id:$DESTINATION_PATH/$KEYNAME_LABEL" || { echo "Error copying key file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_ccert" "$container_id:$DESTINATION_PATH/$CERTNAME_LABEL" || { echo "Error copying cert file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_cca" "$container_id:$DESTINATION_PATH/$CANAME_LABEL" || { echo "Error copying ca file to $container_id"; ERROR_FLAG=true; continue; }
            echo "Files copied to container: $container_id"

        elif [ "$CERTTYPE_LABEL" == "all" ]; then
            # Get KEYNAME, CERTNAME, CANAME, and FULLCHAINNAME labels
            if ! KEYNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.keyname"}}' "$container_id"); then
                echo "Error getting KEYNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! CERTNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.certname"}}' "$container_id"); then
                echo "Error getting CERTNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! CANAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.caname"}}' "$container_id"); then
                echo "Error getting CANAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! FULLCHAINNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.fullchainname"}}' "$container_id"); then
                echo "Error getting FULLCHAINNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi

            # Copy the _ckey, _ccert, _cca, and _cfullchain files into the container
            docker cp "$_ckey" "$container_id:$DESTINATION_PATH/$KEYNAME_LABEL" || { echo "Error copying key file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_ccert" "$container_id:$DESTINATION_PATH/$CERTNAME_LABEL" || { echo "Error copying cert file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_cca" "$container_id:$DESTINATION_PATH/$CANAME_LABEL" || { echo "Error copying ca file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_cfullchain" "$container_id:$DESTINATION_PATH/$FULLCHAINNAME_LABEL" || { echo "Error copying fullchain file to $container_id"; ERROR_FLAG=true; continue; }
            echo "Files copied to container: $container_id"

        elif [ "$CERTTYPE_LABEL" == "cert" ]; then
            # Get KEYNAME and CERTNAME labels
            if ! KEYNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.keyname"}}' "$container_id"); then
                echo "Error getting KEYNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! CERTNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.certname"}}' "$container_id"); then
                echo "Error getting CERTNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi

            # Copy the _ckey and _ccert files into the container
            docker cp "$_ckey" "$container_id:$DESTINATION_PATH/$KEYNAME_LABEL" || { echo "Error copying key file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_ccert" "$container_id:$DESTINATION_PATH/$CERTNAME_LABEL" || { echo "Error copying cert file to $container_id"; ERROR_FLAG=true; continue; }

            echo "Files copied to container: $container_id"

        elif [ "$CERTTYPE_LABEL" == "fullchain" ]; then
            # Get KEYNAME and FULLCHAINNAME labels
            if ! KEYNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.keyname"}}' "$container_id"); then
                echo "Error getting KEYNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! FULLCHAINNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.fullchainname"}}' "$container_id"); then
                echo "Error getting FULLCHAINNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi

            # Copy the _ckey and _ccert files into the container
            docker cp "$_ckey" "$container_id:$DESTINATION_PATH/$KEYNAME_LABEL" || { echo "Error copying key file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_cfullchain" "$container_id:$DESTINATION_PATH/$FULLCHAINNAME_LABEL" || { echo "Error copying cert file to $container_id"; ERROR_FLAG=true; continue; }

            echo "Files copied to container: $container_id"


        elif [ "$CERTTYPE_LABEL" == "crashplan" ]; then
            # Get KEYNAME, VNCNAME and FULLCHAINNAME labels
            if ! KEYNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.keyname"}}' "$container_id"); then
                echo "Error getting KEYNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! VNCNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.vncname"}}' "$container_id"); then
                echo "Error getting VNCNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi
            if ! FULLCHAINNAME_LABEL=$(docker inspect --format='{{index .Config.Labels "sh.acme.autoload.fullchainname"}}' "$container_id"); then
                echo "Error getting FULLCHAINNAME_LABEL for $container_id"
                ERROR_FLAG=true
                continue
            fi

                        # Create combined VNC Key
                        cat $_ckey > /tmp/vnc.pem
                        if [ "$?" != "0" ]; then
                                echo "Error generating combined key for $container_id"
                ERROR_FLAG=true
                continue
                        fi
                        cat $_cfullchain >> /tmp/vnc.pem
                        if [ "$?" != "0" ]; then
                                echo "Error generating combined key for $container_id"
                ERROR_FLAG=true
                continue
                        fi
            # Copy the _ckey, _ccert files into the container
            docker cp "$_ckey" "$container_id:$DESTINATION_PATH/$KEYNAME_LABEL" || { echo "Error copying key file to $container_id"; ERROR_FLAG=true; continue; }
            docker cp "$_cfullchain" "$container_id:$DESTINATION_PATH/$FULLCHAINNAME_LABEL" || { echo "Error copying cert file to $container_id"; ERROR_FLAG=true; continue; }
                        docker cp "/tmp/vnc.pem" "$container_id:$DESTINATION_PATH/$VNCNAME_LABEL" || { echo "Error copying VNC cert file to $container_id"; ERROR_FLAG=true; continue; }
                        rm /tmp/vnc.pem
            echo "Files copied to container: $container_id"

        else
            # Set error flag and print error message
            ERROR_FLAG=true
            echo "Error, incorrect certificate type label defined for $container_id"
                        continue
        fi

                echo "Restarting container: $container_id"
        docker restart "$container_id" || { echo "Error restarting $container_id"; ERROR_FLAG=true; continue; }

        echo "Container restarted: $container_id"
    done < <(docker ps --filter "label=sh.acme.autoload.domain=$_cdomain" --quiet)

    # Check if any errors occurred during processing
    if [ "$ERROR_FLAG" = true ]; then
        _err "Docker Multi Deploy script completed with errors."
        return 1
    fi
}