No OneTemporary
Actions

Size

4 KB

Referenced Files

None

Subscribers

None

View Options

	diff --git a/Dockerfile b/Dockerfile
	index 9f06a20..7e1684e 100644
	--- a/Dockerfile
	+++ b/Dockerfile
	@@ -1,80 +1,80 @@
	FROM alpine:3.10

	# This is the release of Vault to pull in.
	-ARG VAULT_VERSION=1.4.7
	+ARG VAULT_VERSION=1.5.4

	# Create a vault user and group first so the IDs get set the same way,
	# even as the rest of this may change over time.
	RUN addgroup vault && \
	adduser -S -G vault vault

	# Set up certificates, our base tools, and Vault.
	RUN set -eux; \
	apk add --no-cache ca-certificates gnupg openssl libcap su-exec dumb-init tzdata && \
	apkArch="$(apk --print-arch)"; \
	case "$apkArch" in \
	armhf) ARCH='arm' ;; \
	aarch64) ARCH='arm64' ;; \
	x86_64) ARCH='amd64' ;; \
	x86) ARCH='386' ;; \
	*) echo >&2 "error: unsupported architecture: $apkArch"; exit 1 ;; \
	esac && \
	VAULT_GPGKEY=91A6E7F85D05C65630BEF18951852D87348FFC4C; \
	found=''; \
	for server in \
	hkp://p80.pool.sks-keyservers.net:80 \
	hkp://keyserver.ubuntu.com:80 \
	hkp://pgp.mit.edu:80 \
	; do \
	echo "Fetching GPG key $VAULT_GPGKEY from $server"; \
	gpg --batch --keyserver "$server" --recv-keys "$VAULT_GPGKEY" && found=yes && break; \
	done; \
	test -z "$found" && echo >&2 "error: failed to fetch GPG key $VAULT_GPGKEY" && exit 1; \
	mkdir -p /tmp/build && \
	cd /tmp/build && \
	wget https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_linux_${ARCH}.zip && \
	wget https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_SHA256SUMS && \
	wget https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_SHA256SUMS.sig && \
	gpg --batch --verify vault_${VAULT_VERSION}_SHA256SUMS.sig vault_${VAULT_VERSION}_SHA256SUMS && \
	grep vault_${VAULT_VERSION}_linux_${ARCH}.zip vault_${VAULT_VERSION}_SHA256SUMS \| sha256sum -c && \
	unzip -d /bin vault_${VAULT_VERSION}_linux_${ARCH}.zip && \
	cd /tmp && \
	rm -rf /tmp/build && \
	gpgconf --kill dirmngr && \
	gpgconf --kill gpg-agent && \
	apk del gnupg openssl && \
	rm -rf /root/.gnupg

	# /vault/logs is made available to use as a location to store audit logs, if
	# desired; /vault/file is made available to use as a location with the file
	# storage backend, if desired; the server will be started with /vault/config as
	# the configuration directory so you can add additional config files in that
	# location.
	RUN mkdir -p /vault/logs && \
	mkdir -p /vault/file && \
	mkdir -p /vault/config && \
	chown -R vault:vault /vault

	# Expose the logs directory as a volume since there's potentially long-running
	# state in there
	VOLUME /vault/logs

	# Expose the file directory as a volume since there's potentially long-running
	# state in there
	VOLUME /vault/file

	# 8200/tcp is the primary interface that applications use to interact with
	# Vault.
	EXPOSE 8200

	# The entry point script uses dumb-init as the top-level process to reap any
	# zombie processes created by Vault sub-processes.
	#
	# For production derivatives of this container, you shoud add the IPC_LOCK
	# capability so that Vault can mlock memory.
	COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
	ENTRYPOINT ["docker-entrypoint.sh"]

	# By default you'll get a single-node development server that stores everything
	# in RAM and bootstraps itself. Don't use this configuration for production.
	CMD ["server", "-dev"]
	diff --git a/Makefile b/Makefile
	index 77c7029..3a805c3 100644
	--- a/Makefile
	+++ b/Makefile
	@@ -1,16 +1,16 @@
	REGISTRY_NAME?=docker.io/hashicorp
	-VERSION=1.4.7
	+VERSION=1.5.4
	IMAGE_TAG_ENT=$(REGISTRY_NAME)/vault-enterprise:$(VERSION)_ent
	IMAGE_TAG_OSS=$(REGISTRY_NAME)/vault:$(VERSION)

	.PHONY: build ent-image oss-image

	build: ent-image oss-image

	ent-image:
	docker build --build-arg VAULT_VERSION=$(VERSION)+ent --no-cache -t $(IMAGE_TAG_ENT) .
	docker tag $(IMAGE_TAG_ENT) $(REGISTRY_NAME)/vault-enterprise:latest

	oss-image:
	docker build --build-arg VAULT_VERSION=$(VERSION) --no-cache -t $(IMAGE_TAG_OSS) .
	docker tag $(IMAGE_TAG_OSS) $(REGISTRY_NAME)/vault:latest
	\ No newline at end of file

File Metadata

Mime Type: text/x-diff
Expires: Thu, Sep 18, 00:04 (1 d, 1 h)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 2989629
Default Alt Text: (4 KB)

No OneTemporaryActions

View Options

File Metadata

Event Timeline

No OneTemporary
Actions