Merge pull request #176 from moqmar/patch/ports-below-1024

Let step-ca bind to ports < 1024 Fixes #170
4 years ago · 91bf74551b
parent 88add85e42 da18defd94
commit 91bf74551b
1 changed files with 4 additions and 0 deletions
--- a/docker/Dockerfile.step-ca
+++ b/docker/Dockerfile.step-ca
@ -7,6 +7,10 @@ ENV PWDPATH="/home/step/secrets/password"

 COPY $BINPATH "/usr/local/bin/step-ca"

+USER root
+RUN apk add --no-cache libcap && setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/step-ca
+USER step
+
 VOLUME ["/home/step"]
 STOPSIGNAL SIGTERM