Skip to content

Latest commit

 

History

History
43 lines (32 loc) · 1.54 KB

SECURE_DOCKER_TLS.md

File metadata and controls

43 lines (32 loc) · 1.54 KB

Secure your Docker Daemon with TLS

Configuration

After finish installing the plugin into your CTFd platform, you can follow these steps:

  1. Run the script secure_docker_daemon.sh to generate the certificates and keys.

    • The default location of your certificates and keys is ~/.docker/.
    • $PASSWORD is the password you wish to use when generate the certificates and keys.
    • $HOST is the hostname of your server. You can use your domain name or IP address here.

  2. Update the configuration file at /etc/docker/daemon.json as below:

{
        "hosts": ["tcp://0.0.0.0:2376", "unix://var/run/docker.sock"], // 2376 is the default port for Docker Daemon with TLS 
        "tls": true,
        "tlscacert": "/home/<your_username>/.docker/ca.pem", 
        "tlscert": "/home/<your_username>/.docker/server-cert.pem",
        "tlskey": "/home/<your_username>/.docker/server-key.pem",  
        "tlsverify": true
}
  1. Add a file /etc/systemd/system/docker.service.d/override.conf:
[Service]
ExecStart=
ExecStart=/usr/bin/dockerd
  1. Reload the systemd daemon & restart the Docker service:
sudo systemctl daemon-reload 
sudo systemctl restart docker.service

For more information, please refer to these documentations from Docker: