Let step-ca bind to ports < 1024

This commit is contained in:
Moritz Marquardt 2020-02-06 12:35:40 +00:00
parent f8eec06563
commit da18defd94

View file

@ -7,6 +7,10 @@ ENV PWDPATH="/home/step/secrets/password"
COPY $BINPATH "/usr/local/bin/step-ca" COPY $BINPATH "/usr/local/bin/step-ca"
USER root
RUN apk add --no-cache libcap && setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/step-ca
USER step
VOLUME ["/home/step"] VOLUME ["/home/step"]
STOPSIGNAL SIGTERM STOPSIGNAL SIGTERM