cert-keeper (sha256:d917972533ebb3daa4109858920b668d910a882e8cbe8e2514d0fb51b1569c80)

Published 2026-10-21 13:39:47 +00:00 by james.oates

Installation

docker pull forge.isohex.uk/isohex/cert-keeper@sha256:d917972533ebb3daa4109858920b668d910a882e8cbe8e2514d0fb51b1569c80
sha256:d917972533ebb3daa4109858920b668d910a882e8cbe8e2514d0fb51b1569c80

About this package

Acquires TLS certificates and stores them in OpenBao, so nothing else needs a DNS credential

Image layers

# debian.sh --arch 'arm64' out/ 'bookworm' '@1792531975'
RUN /bin/sh -c apt-get update && apt-get install -y --no-install-recommends ca-certificates libtss2-esys-3.0.2-0 libtss2-tctildr0 libtss2-tcti-device0 libtss2-tcti-swtpm0 libtss2-tcti-mssim0 && rm -rf /var/lib/apt/lists/* # buildkit
COPY /app/target/release/cert-keeper /usr/local/bin/cert-keeper # buildkit
RUN /bin/sh -c useradd --system --uid 10001 --no-create-home --shell /usr/sbin/nologin certkeeper && install -d -o 10001 -g 10001 -m 0700 /var/lib/cert-keeper # buildkit
USER 10001:10001
ENV BAO_ADDR=https://bao.dev.oates.ws DATA_DIR=/var/lib/cert-keeper CERT_KEEPER_CONFIG=/etc/cert-keeper/config.toml RUST_LOG=cert_keeper=info
VOLUME [/var/lib/cert-keeper]
ARG APP_VERSION=2276cf1
ARG APP_COMMIT=2276cf1801aba2d29a080bfcda2d9b5ee8829c5a
LABEL org.opencontainers.image.title=cert-keeper org.opencontainers.image.description=Acquires TLS certificates and stores them in OpenBao, so nothing else needs a DNS credential org.opencontainers.image.source=https://forge.isohex.uk/IsoHex/cert-keeper org.opencontainers.image.version=2276cf1 org.opencontainers.image.revision=2276cf1801aba2d29a080bfcda2d9b5ee8829c5a
HEALTHCHECK {Test:[CMD /usr/local/bin/cert-keeper --check] Interval:5m0s Timeout:30s StartPeriod:30s StartInterval:0s Retries:0}
ENTRYPOINT ["/usr/local/bin/cert-keeper"]

Labels

Key Value
org.opencontainers.image.description Acquires TLS certificates and stores them in OpenBao, so nothing else needs a DNS credential
org.opencontainers.image.revision 2276cf1801aba2d29a080bfcda2d9b5ee8829c5a
org.opencontainers.image.source https://forge.isohex.uk/IsoHex/cert-keeper
org.opencontainers.image.title cert-keeper
org.opencontainers.image.version 2276cf1
Details
Container
2026-10-21 13:39:47 +00:00
4
OCI / Docker
linux/arm64
40 MiB
Versions (26) View all
2276cf1 2026-10-21
develop 2026-10-21
2276cf1-arm64 2026-10-21
2276cf1-amd64 2026-10-21
34f2673 2026-08-29