| COPY / / # buildkit |
| ENV JAVA_HOME=/usr/lib/jvm/java-17-slim |
| ENV LOG_LEVEL_APP=INFO |
| ENV LOG_LEVEL_SERVER=INFO |
| ENV LOG_LEVEL_SERVER_SUBSYSTEMS=WARN |
| ENV LOG_STORAGE_LOCATION= |
| ENV LOG_STORAGE_MAX_SIZE_MB=256 |
| ENV PROXY_AJP_BIND= |
| ENV PROXY_HTTP_BIND= |
| ENV LOG_AUDIT_TO_DB=false |
| ENV APPSERVER_DEPLOYMENT_TIMEOUT=300 |
| ENV APPSERVER_USE_MANAGED_ID=false |
| ENV HTTPSERVER_HOSTNAME= |
| ENV SMTP_DESTINATION=localhost |
| ENV SMTP_DESTINATION_PORT=25 |
| ENV SMTP_FROM= |
| ENV SMTP_TLS_ENABLED=true |
| ENV SMTP_SSL_ENABLED=true |
| ENV SMTP_USERNAME=mail-client |
| ENV SMTP_PASSWORD=gotmail |
| ENV ADMINWEB_ACCESS=true |
| ENV OBSERVABLE_BIND=127.0.0.1 |
| ENV METRICS_ENABLED=false |
| ENV HIGH_AVAILABILITY= |
| USER 10001 |
| EXPOSE map[8080/tcp:{} 8443/tcp:{}] |
| EXPOSE map[8009/tcp:{} 8081/tcp:{} 8082/tcp:{}] |
| EXPOSE map[57600/tcp:{} 7600/tcp:{}] |
| ENV JGROUPS_K8S_NAMESPACE= |
| ENV JGROUPS_K8S_LABEL= |
| ENV JGROUPS_KEYSTORE_SECRET= |
| CMD ["/opt/keyfactor/appserver/bin/standalone.sh" "-b" "0.0.0.0" "--server-config=standalone.xml"] |
| ENV DATABASE_JDBC_URL=jdbc:h2:/mnt/persistent/ejbcadb;DB_CLOSE_DELAY=-1;NON_KEYWORDS=VALUE |
| ENV DATABASE_USER=ejbca |
| ENV DATABASE_PASSWORD=ejbca |
| ENV ENABLE_DATABASE_SCHEMA_N_CONN_TEST=true |
| ENV TLS_SETUP_ENABLED=simple |
| ENV LOG_LEVEL_APP_WS_TRANSACTIONS=DEBUG |
| ENV ENABLE_FEATURE_EIDAS=false |
| ENV PASSWORD_ENCRYPTION_KEY= |
| ENV EJBCA_CLI_DEFAULTPASSWORD= |
| ENV EJBCA_CLI_DEFAULT_USERNAME= |
| ENV EJBCA_CLI_DEFAULT_PASSWORD= |
| ENV OCSP_CHECK_SIGN_CERT_VALIDITY=true |
| ENV EJBCA_RNGALGORITHM= |
| USER 0 |
| RUN /bin/sh -c tar -xf /tmp/layer-ejbca.tar -C / # buildkit |
| ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/keyfactor/bin:/opt/keyfactor/appserver/bin |
| WORKDIR /opt/keyfactor |
| USER 10001 |
| VOLUME [/mnt/persistent] |
| CMD ["/opt/keyfactor/bin/start.sh"] |
| LABEL Description=EJBCA EE with Utimaco PKCS11 |
| LABEL org.opencontainers.image.authors=stefano.travelli@entaksi.eu |
| ENV PKCS11_LOGGING=3 PKCS11_SLOT_MULTI_SESSION=true PKCS11_SLOT_COUNT=10 PKCS11_KEEP_LEAD_ZEROS=false PKCS11_FALLBACK_INTERNAL=0 |
| ENV PKCS11_KEEP_ALIVE=false PKCS11_CONNECTION_TIMEOUT=5000 PKCS11_COMMAND_TIMEOUT=60000 PKCS11_DEVICE= PKCS11_SLOT_NUMBER= |
| ENV CS_AUTH_KEYS=/opt/utimaco/etc/HSMAuth.key |
| ENV DATABASE_PASSWORD= SMTP_PASSWORD= |
| COPY --chown=10001:10001 utimaco/ /opt/utimaco/ # buildkit |
| COPY --chown=10001:10001 scripts/ /opt/entaksi/bin/ # buildkit |
| COPY --chown=10001:10001 utimaco/etc/cs_pkcs11_R2.cfg.sample /etc/utimaco/ # buildkit |
| RUN /bin/sh -c mkdir -p /etc/utimaco && chmod -R 0755 /etc/utimaco && chmod -R 0755 /opt/entaksi/bin/* # buildkit |
| USER 10001 |
| CMD ["/opt/entaksi/bin/entrypoint.sh" "/opt/primekey/bin/start.sh"] |
