Set of files for protecting Docker daemon socket
# Define installation folder
export INSTALL_DIRECTORY=/usr/bin
# Use local installation
sudo bin/installer install
# Use remote installation
curl --location "https://gitlab.com/mauchede/docker-certificates/raw/master/bin/installer" | sudo sh -s -- install
Note: If you do not define INSTALL_DIRECTORY
, installer
will use in /usr/local/bin
.
export SSL_SIZE=4096
export SSL_SUBJECT=my-server.com
mkdir -p "${HOME}/.docker/certs/my-server"
sh -c "cd '${HOME}/.docker/certs/my-server' && bin/generate-certs"
Note: Available environment variables are listed in OMGWTFSSL's README.
The used script has been created by paulczar.