docker-credential-custodia
Store Docker credentials in Custodia or SSSD.
Authors:
- Christian Heimes cheimes@redhat.com
References:
- https://github.com/latchset/custodia
- https://github.com/docker/docker-credential-helpers
- https://fedorahosted.org/sssd/wiki/DesignDocs/SecretsService
- http://www.projectatomic.io/blog/2016/03/docker-credentials-store/
Requirements
- Docker >= 1.11
- SSSD >= 1.14 (for docker-credential-sssd)
- Custodia >= 0.2 (docker-credential-custodia)
- golang
Build
export GOPATH=~/godeps
mkdir -p $GOPATH/src/github.com/latchset
git clone ... $GOPATH/src/github.com/latchset/docker-credential-custodia
cd $GOPATH/src/github.com/latchset/docker-credential-custodia
make
Use with SSSD
Start SSSD secret responder
systemctl enable sssd-secrets.socket
systemctl start sssd-secrets.socket
Copy helper to /usr/bin
cp docker-credential-sssd /usr/bin/
Enable SSSD credential store
mkdir -p ~/.docker
cp ~/.docker/config.json ~/.docker/config.json.bak
echo '{"credsStore": "sssd"}' > ~/.docker/config.json