60 lines
2.0 KiB
Markdown
60 lines
2.0 KiB
Markdown
# Vault Docker Compose files
|
|
|
|
Docker Compose files to spin up an instance of Vault.
|
|
|
|
# How to run
|
|
|
|
Add a `COMPOSE_ENV` file and save its location as a shell variable along with the location where this repo lives, here for example `/opt/containers/hashicorpvault` plus all other variables. At [env/fqdn_context.env.example](env/fqdn_context.env.example) you'll find an example environment file.
|
|
|
|
When everything's ready start Vault with Docker Compose, otherwise head down to [Initial setup](#initial-setup) first.
|
|
|
|
## Environment
|
|
```
|
|
export COMPOSE_DIR='/opt/containers/hashicorpvault'
|
|
export COMPOSE_CTX='fsf'
|
|
export COMPOSE_PROJECT='vault-'"${COMPOSE_CTX}"
|
|
export COMPOSE_FILE="${COMPOSE_DIR}"'/docker-compose.yml'
|
|
export COMPOSE_OVERRIDE="${COMPOSE_DIR%/}"'/docker-compose.override.yml'
|
|
export COMPOSE_ENV=<add accordingly>
|
|
```
|
|
|
|
## Build
|
|
|
|
```
|
|
docker compose --project-name "${COMPOSE_PROJECT}" --file "${COMPOSE_FILE}" --file "${COMPOSE_OVERRIDE}" --env-file "${COMPOSE_ENV}" --profile 'build' build
|
|
```
|
|
|
|
## Start
|
|
|
|
```
|
|
docker compose --project-name "${COMPOSE_PROJECT}" --file "${COMPOSE_FILE}" --env-file "${COMPOSE_ENV}" up --detach
|
|
```
|
|
|
|
# Initial setup
|
|
|
|
We're assuming you run Docker Compose workloads with ZFS-based bind mounts. ZFS management, creating a zpool and setting adequate properties for its datasets is out of scope of this document.
|
|
|
|
## Datasets
|
|
|
|
Create ZFS datasets and set permissions as needed.
|
|
|
|
* Parent dateset
|
|
```
|
|
zfs create -o mountpoint=/opt/docker-data 'zpool/docker-data'
|
|
```
|
|
|
|
* Container-specific datasets
|
|
```
|
|
zfs create -p 'zpool/docker-data/vault-${COMPOSE_CTX}/vault/data/db'
|
|
zfs create -p 'zpool/docker-data/vault-${COMPOSE_CTX}/vault/data/logs'
|
|
zfs create -p 'zpool/docker-data/vault-${COMPOSE_CTX}/vault/config'
|
|
```
|
|
When changing bind mount locations to real ones remember to also update `volumes:` in [docker-compose.yml](docker-compose.yml).
|
|
|
|
* Change ownership
|
|
```
|
|
chown -R 1000:1000 '/opt/docker-data/vault-${COMPOSE_CTX}/vault/data'
|
|
```
|
|
|
|
When done head back up to [How to run](#how-to-run).
|