certificates/docker/Dockerfile.step-ca

FROM golang:alpine AS builder

WORKDIR /src
COPY . .

RUN apk add --no-cache \
   curl \
   git \
   make && \
   make V=1 bin/step-ca

FROM smallstep/step-cli:latest

COPY --from=builder /src/bin/step-ca /usr/local/bin/step-ca

USER root
RUN apk add --no-cache libcap && setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/step-ca
USER step

ENV CONFIGPATH="/home/step/config/ca.json"
ENV PWDPATH="/home/step/secrets/password"

VOLUME ["/home/step"]
STOPSIGNAL SIGTERM
HEALTHCHECK CMD step ca health 2>/dev/null | grep "^ok" >/dev/null

CMD exec /usr/local/bin/step-ca --password-file $PWDPATH $CONFIGPATH
Fixes #344; also gets docker buildx working on both darwin & linux 2020-08-13 02:50:47 +00:00			`FROM golang:alpine AS builder`

Update Dockerfile.step-ca to match best practices - See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/ - Added a .dockerignore file to reduce the build context size - Added a HEALTHCHECK (curl the CA) 2020-09-02 16:30:45 +00:00			`WORKDIR /src`
			`COPY . .`
Fixes #344; also gets docker buildx working on both darwin & linux 2020-08-13 02:50:47 +00:00
Update Dockerfile.step-ca to match best practices - See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/ - Added a .dockerignore file to reduce the build context size - Added a HEALTHCHECK (curl the CA) 2020-09-02 16:30:45 +00:00			`RUN apk add --no-cache \`
			`curl \`
			`git \`
			`make && \`
			`make V=1 bin/step-ca`
Fixes #344; also gets docker buildx working on both darwin & linux 2020-08-13 02:50:47 +00:00
bump Docker to latest tag 2019-05-08 19:26:21 +00:00			`FROM smallstep/step-cli:latest`
add Makefile build and deploy docker image for step-ca 2018-11-15 01:53:17 +00:00
Fixes #344; also gets docker buildx working on both darwin & linux 2020-08-13 02:50:47 +00:00			`COPY --from=builder /src/bin/step-ca /usr/local/bin/step-ca`
add Makefile build and deploy docker image for step-ca 2018-11-15 01:53:17 +00:00
Let step-ca bind to ports < 1024 2020-02-06 12:35:40 +00:00			`USER root`
			`RUN apk add --no-cache libcap && setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/step-ca`
			`USER step`

Update Dockerfile.step-ca to match best practices - See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/ - Added a .dockerignore file to reduce the build context size - Added a HEALTHCHECK (curl the CA) 2020-09-02 16:30:45 +00:00			`ENV CONFIGPATH="/home/step/config/ca.json"`
			`ENV PWDPATH="/home/step/secrets/password"`

Update docker images and add docs on how to run step-ca on docker. Fixes #48 2019-03-27 02:00:13 +00:00			`VOLUME ["/home/step"]`
add Makefile build and deploy docker image for step-ca 2018-11-15 01:53:17 +00:00			`STOPSIGNAL SIGTERM`
Change `HEALTHCHECK` to use `step ca health`. Change shell `CMD exec` to skip redundant `/bin/sh -c` 2020-09-08 16:44:35 +00:00			`HEALTHCHECK CMD step ca health 2>/dev/null \| grep "^ok" >/dev/null`
add Makefile build and deploy docker image for step-ca 2018-11-15 01:53:17 +00:00
Change `HEALTHCHECK` to use `step ca health`. Change shell `CMD exec` to skip redundant `/bin/sh -c` 2020-09-08 16:44:35 +00:00			`CMD exec /usr/local/bin/step-ca --password-file $PWDPATH $CONFIGPATH`