Let step-ca bind to ports < 1024

4 years ago · da18defd94
parent f8eec06563
commit da18defd94
1 changed files with 4 additions and 0 deletions
--- a/docker/Dockerfile.step-ca
+++ b/docker/Dockerfile.step-ca
@ -7,6 +7,10 @@ ENV PWDPATH="/home/step/secrets/password"

 COPY $BINPATH "/usr/local/bin/step-ca"

+USER root
+RUN apk add --no-cache libcap && setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/step-ca
+USER step
+
 VOLUME ["/home/step"]
 STOPSIGNAL SIGTERM