Dustin C. Hatch
e5eff964a1
The *POST /sshkeys/sign* operation accepts a host name and a list of SSH host public keys and returns a signed SSH host certificate for each key. It uses the `step ssh certificate` command to sign the certificates, which in turn contacts the configured *step-ca* service. This operation will allow hosts to obtain their initial certificates. Once obtained, the certificates can be renewed directly using the `step ssh renew` command with the SSH private keys themselves for authentication.
29 lines
645 B
Docker
29 lines
645 B
Docker
FROM docker.io/library/python:3.11 AS build
|
|
|
|
RUN python3 -m pip install -U pip setuptools wheel
|
|
|
|
COPY . /tmp/build
|
|
|
|
RUN cd /tmp/build && python3 -m pip wheel -w dist .
|
|
|
|
FROM docker.io/library/python:3.11-slim
|
|
|
|
RUN --mount=type=cache,target=/var/cache/apt \
|
|
apt-get update && \
|
|
apt-get install -y \
|
|
tini \
|
|
&& :
|
|
|
|
RUN --mount=from=build,source=/tmp/build/dist,target=/tmp/wheels \
|
|
python3 -m pip install -f /tmp/wheels \
|
|
dch_webhooks \
|
|
python-multipart \
|
|
uvicorn \
|
|
&& :
|
|
|
|
COPY --from=docker.io/smallstep/step-cli:0.25.0 /usr/local/bin/step /usr/local/bin/step
|
|
|
|
USER 1000:1000
|
|
|
|
CMD ["tini", "/usr/local/bin/uvicorn", "dch_webhooks:app"]
|