Docker compose based installation

[compgeniuses]

Is there or would there be a proper docker compose based installation support for KanIDM on a prodcution sytem?

[yaleman]

It's a single container, so something like this should do:

---
version: "3.5"

services:
  kanidmd:
    container_name: kanidmd
    restart: "always"
    image: kanidm/server:latest
    volumes:
      - type: bind
        source: /etc/kanidm/
        target: /data/
      - "kanidm_data:/var/lib/kanidm/"
    ports:
      - "443:8443"
volumes:
  kanidm_data:

This assumes a couple of things:

1. Your certs are in /etc/kanidm on the host machine, the config refers to them from that point.
2. You've got a server.toml file in /etc/kanidm/server.toml

On my docker-compose'd set up I use network_mode: host instead of port mapping because I want to see client IPs.

[compgeniuses]

the reason for my asking is actually to see if its posible to build a nethserver 8 module of kanidm https://nethserver.github.io/ns8-core/

[yaleman]

Anything's possible with enough time! Good luck with the project!

[compgeniuses]

I apologise for this question,

In what context is source and destination used in the docker compose file?

WHat would happen if no certs are found in the said folder.

does the system not have option to generate self signed certs internally.

Would DH work in certs geenration

[yaleman]

Do you mean source and target? They're docker bind mount options for the paths. It means it won't mount if the path doesn't exist.

Kanidm can generate its own certificates but they'll be self-signed which should only be used for local testing.

[Firstyear]

I apologise for this question,

In what context is source and destination used in the docker compose file?

WHat would happen if no certs are found in the said folder.

Kanidm won't start.

does the system not have option to generate self signed certs internally.

Only for testing/development. You must add legitimate certs in production.

Would DH work in certs geenration

DH params are not required for Kanidm.

[compgeniuses]

I would like to understand and know, how would the deployment be, for while using certs generated by KAnidm, so that i can build the module, test and see it works before i embark on the journey of generating LE or equivalent certs and having them imported into KanIDM.

I would also like, if you don't mind, concepts of generating the certs, and having them imported into KanIDM.

I will then begin with the initial implementation of the said Nethserver module, and if am stuck, in relation to matters, KANIDM, id be happy to accept an Supports, PR even on resolving them from the shared repo of the project.

[Firstyear]

The quick start documents how to make evaluation certs.

https://kanidm.github.io/kanidm/stable/quickstart.html

Similar the book has all the other info you need here. I would advise you have a read of it :)