This a really small docker container for storing your root or any other certificate inside of a docker container for later use. It's quiet handy while working with docker micro services while using a locally hosted smallstep certificate instance.
The building process is quiet easy. Everyting is done using variables like the following example:
docker build . \
--tag registry.your.domain/container-name \
--build-arg CA_URL=https://ca.your.domain \
--build-arg CA_FINGERPRINT=fingerprint-hereThe --tag argument sets your container name, either just a local name or the complete name including your docker registry.
The --build-arg argument sets the required build arguments required by the step-cli to access your CA server.
The CA_URL variable holds the url to your CA server including the protocoll (http/https).
The CA_FINGERPRINT variable holds the fingerprint of your root certificate. This validation is required for security reasons by step-ca. It gets printed out after you initialized your CA server. If you haven't saved it or forgot it you can still recover it as explained in the official documentation.
The process of building the container with custom docker registries is also done using environment variables. A good reason for doing that is for example, if you want to use a proxied docker registry to save brand-width or to speed up building. This is not required, but optional. If none custom registries are set, the original and public registries are used. Switching registries can be done with the following command:
docker build . \
--tag registry.your.domain/container-name \
--build-arg CA_URL=https://ca.your.domain \
--build-arg CA_FINGERPRINT=fingerprint-here \
# registry configuration
--build-arg REGISTRY=registry.your.domain
The REGISTRY variable holds the url to the docker hub registry. The default value is docker.io, which is the official docker hub registry url. Your proxy should provide access to the official alpine image as that's the one used by this container.
Please note that custom registries are not required.
Feel free to contribute in any way you want. Every help is appreciated. Adding new features like other CA servers should be first discussed in an issue to avoid possible missunderstandings. Asking for help is also really appreated! Just ask!
This project is licensed under MIT wich means that you can use it for anything you want to, but it'd be nice if you add a reference to it's original copyright holder and include it's license inside of your software in any way. Thank you!