certificates/docker/Dockerfile.step-ca

FROM golang:alpine AS builder

WORKDIR /src
COPY . .

RUN apk add --no-cache curl git make
RUN make V=1 download
RUN make V=1 bin/step-ca

FROM smallstep/step-cli:latest

COPY --from=builder /src/bin/step-ca /usr/local/bin/step-ca

USER root
RUN apk add --no-cache libcap && setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/step-ca
USER step

ENV CONFIGPATH="/home/step/config/ca.json"
ENV PWDPATH="/home/step/secrets/password"

VOLUME ["/home/step"]
STOPSIGNAL SIGTERM
HEALTHCHECK CMD step ca health 2>/dev/null | grep "^ok" >/dev/null

COPY docker/entrypoint.sh /entrypoint.sh

ENTRYPOINT ["/bin/bash", "/entrypoint.sh"]
CMD exec /usr/local/bin/step-ca --password-file $PWDPATH $CONFIGPATH
Fixes #344; also gets docker buildx working on both darwin & linux 2020-08-13 02:50:47 +00:00			`FROM golang:alpine AS builder`

Update Dockerfile.step-ca to match best practices - See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/ - Added a .dockerignore file to reduce the build context size - Added a HEALTHCHECK (curl the CA) 2020-09-02 16:30:45 +00:00			`WORKDIR /src`
			`COPY . .`
Fixes #344; also gets docker buildx working on both darwin & linux 2020-08-13 02:50:47 +00:00
include support for GCP and AWS KMS by default 2022-04-25 12:25:31 +00:00			`RUN apk add --no-cache curl git make`
Split build and download in Dockerfiles On systems with low resources the command `go mod download` can fail. This causes long builds of the docker images. This change adds a new layer in the docker build splitting the build and download in two steps. Fixes #1114 2022-10-20 00:55:18 +00:00			`RUN make V=1 download`
Remove deprecated binaries This commit removes the following deprecated binaries: - step-awskms-init - step-cloudkms-init - step-pkcs11-init - step-yubikey-init From now on step and step-kms-plugin should be used to initialize the PKI in AWS KMS, GCP KMS, PKCS#11 modules or YubiKeys. A future commit will add step-kms-plugin to the docker images of step-ca. Fixes #1046 2023-01-24 00:30:55 +00:00			`RUN make V=1 bin/step-ca`
include support for GCP and AWS KMS by default 2022-04-25 12:25:31 +00:00
bump Docker to latest tag 2019-05-08 19:26:21 +00:00			`FROM smallstep/step-cli:latest`
add Makefile build and deploy docker image for step-ca 2018-11-15 01:53:17 +00:00
Fixes #344; also gets docker buildx working on both darwin & linux 2020-08-13 02:50:47 +00:00			`COPY --from=builder /src/bin/step-ca /usr/local/bin/step-ca`
add Makefile build and deploy docker image for step-ca 2018-11-15 01:53:17 +00:00
Let step-ca bind to ports < 1024 2020-02-06 12:35:40 +00:00			`USER root`
			`RUN apk add --no-cache libcap && setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/step-ca`
			`USER step`

Update Dockerfile.step-ca to match best practices - See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/ - Added a .dockerignore file to reduce the build context size - Added a HEALTHCHECK (curl the CA) 2020-09-02 16:30:45 +00:00			`ENV CONFIGPATH="/home/step/config/ca.json"`
			`ENV PWDPATH="/home/step/secrets/password"`

Update docker images and add docs on how to run step-ca on docker. Fixes #48 2019-03-27 02:00:13 +00:00			`VOLUME ["/home/step"]`
add Makefile build and deploy docker image for step-ca 2018-11-15 01:53:17 +00:00			`STOPSIGNAL SIGTERM`
Change `HEALTHCHECK` to use `step ca health`. Change shell `CMD exec` to skip redundant `/bin/sh -c` 2020-09-08 16:44:35 +00:00			`HEALTHCHECK CMD step ca health 2>/dev/null \| grep "^ok" >/dev/null`
add Makefile build and deploy docker image for step-ca 2018-11-15 01:53:17 +00:00
New Dockerfile with entrypoint script for easy CA init 2021-08-18 00:17:28 +00:00			`COPY docker/entrypoint.sh /entrypoint.sh`

			`ENTRYPOINT ["/bin/bash", "/entrypoint.sh"]`
No need for PROVISIONER_PWDPATH 2023-01-10 01:23:47 +00:00			`CMD exec /usr/local/bin/step-ca --password-file $PWDPATH $CONFIGPATH`