jan/cacert-devsetup
1
0
Fork 1
Code Issues Pull requests Releases Wiki Activity

Compare commits

base: jan:master
Branches Tags
jan:master
jan:run-locally
jan:use-gosigner
jan:old_signer_image
..
compare: jan:old_signer_image
Branches Tags
jan:run-locally
jan:master
jan:use-gosigner
jan:old_signer_image

2 commits
master ... old_signer

Author SHA1 Message Date
Jan Dittberner
da93c32436 Merge branch 'master' into old_signer_image 2020-12-28 21:20:00 +01:00
Jan Dittberner
fd39d4adce Add a signer variant with ancient base image 
The production signer is using a really old base OS (Debian 4.0 Etch or
5.0 Lenny) with some packages like openssl from Debian 6.0 Stretch. This
commit uses the oldest available Docker base image to make a somewhat
reproducible variant of this OS.
 2020-12-25 08:13:22 +01:00
2 changed files with 12 additions and 10 deletions
Show stats Expand all files Collapse all files

14
README.md
View file

@ -55,17 +55,17 @@ Variable | Usage
```shell ```shell
echo "CATCHALL_MAILBOX_PASSWORD='$(openssl rand -base64 18)' echo "CATCHALL_MAILBOX_PASSWORD=$(openssl rand -base64 18)
CLIENT_CERT_EMAIL=user@example.org CLIENT_CERT_EMAIL=user@example.org
CLIENT_CERT_PASSWORD='$(openssl rand -base64 18)' CLIENT_CERT_PASSWORD=$(openssl rand -base64 18)
CLIENT_CERT_USERNAME='John Doe' CLIENT_CERT_USERNAME="John Doe"
MYSQL_WEBDB_PASSWORD='$(openssl rand -base64 18)' MYSQL_WEBDB_PASSWORD=$(openssl rand -base64 18)
MYSQL_WEBDB_USER=cacert_dev MYSQL_WEBDB_USER=cacert_dev
MYSQL_CATS_PASSWORD='$(openssl rand -base64 18)' MYSQL_CATS_PASSWORD=$(openssl rand -base64 18)
MYSQL_CATS_USER=cats MYSQL_CATS_USER=cats
MYSQL_MGR_PASSWORD='$(openssl rand -base64 18)' MYSQL_MGR_PASSWORD=$(openssl rand -base64 18)
MYSQL_MGR_USER=cacert_mgr MYSQL_MGR_USER=cacert_mgr
MYSQL_ROOT_PASSWORD='$(openssl rand -base64 18)'" | sed 's@/@_@g' > .env MYSQL_ROOT_PASSWORD=$(openssl rand -base64 18)" > .env
./setup_test_ca.sh ./setup_test_ca.sh
docker-compose up docker-compose up
``` ```

8
signer.Dockerfile
View file

@ -1,8 +1,10 @@
FROM debian:jessie # should be etch or lenny but dockerhub doesn't have such old versions
FROM debian:squeeze
RUN apt-get update \ RUN echo "deb http://archive.debian.org/debian squeeze main" > /etc/apt/sources.list ; \
apt-get -o=Acquire::AllowInsecureRepositories=true update \
&& DEBIAN_FRONTEND=noninteractive \ && DEBIAN_FRONTEND=noninteractive \
apt-get install -y --no-install-recommends \ apt-get -o=APT::Get::AllowUnauthenticated=true install -y --no-install-recommends \
gnupg \ gnupg \
libdevice-serialport-perl \ libdevice-serialport-perl \
libdigest-sha-perl \ libdigest-sha-perl \