Prebuilt binaries are not compatible with the official step-ca Docker image about step-kms-plugin HOT 6 CLOSED

@umegaya I guess it makes sense for the .hsm image of step-ca, at the moment you can download the release from https://github.com/smallstep/step-kms-plugin/releases in a layer and copy it to the final image.

from step-kms-plugin.

Hi @umegaya closing this in favor of smallstep/certificates#1286

from step-kms-plugin.

It probably makes sense to include it in HSM Dockerfile as this plugin replaces the step-*-init commands.

from step-kms-plugin.

We will try to create at least a step-ca docker amd64 image with step-kms-plugin with it. We should add this to the default image, without CGO, and distribute the HSM image with CGO so that it can be used with PKCS#11 modules, for example.

That will be part of step-ca, see the related issue. But in this project, we can also create an image based on smallstep/step-cli that includes step-kms-plugin.

from step-kms-plugin.

@maraino that's sounds great! it would be appreciate if images are prepared for glibc OS like centos or ubuntu, along with alpine. because proprietary hsm products' pkcs library and tools are tend to build for glibc and cannot recompile due to lack of source code.

from step-kms-plugin.

@maraino seems perfect! thank you for quick response 👍

from step-kms-plugin.