kanidm/kanidmd/Dockerfile
Firstyear 5a9ad39d6b
20200218 pam (#189)
Add support for unix_password handling, and pam authentication for services.
2020-02-29 14:02:14 +10:00

28 lines
1,005 B
Docker

FROM opensuse/tumbleweed:latest AS builder
MAINTAINER william@blackhats.net.au
RUN zypper mr -d repo-non-oss && \
zypper mr -d repo-oss && \
zypper mr -d repo-update && \
zypper ar https://download.opensuse.org/update/tumbleweed/ repo-update-https && \
zypper ar https://download.opensuse.org/tumbleweed/repo/oss/ repo-oss-https && \
zypper ar https://download.opensuse.org/tumbleweed/repo/non-oss/ repo-non-oss-https && \
zypper install -y timezone cargo rust gcc sqlite3-devel libopenssl-devel pam-devel
COPY . /home/kanidm/
WORKDIR /home/kanidm/
RUN cargo build --release
# == end builder setup, we now have static artifacts.
FROM opensuse/tumbleweed:latest
EXPOSE 8443
WORKDIR /
COPY --from=builder /home/kanidm/target/release/kanidmd /sbin/
RUN zypper install -y sqlite3 openssl
VOLUME /data
ENV RUST_BACKTRACE 1
CMD ["/sbin/kanidmd", "server", "-D", "/data/kanidm.db", "-C", "/data/ca.pem", "-c", "/data/cert.pem", "-k", "/data/key.pem", "--bindaddr", "0.0.0.0:8443"]