Test Image

The test image is designed for testing and development purposes. It does not offer to run the NetHSM process with hardware-based separation (KVM), to encrypt the data store, or to use an external etcd. The connection between the NetHSM process and the integrated key-value store is unencrypted. The image is distributed as OCI image and can be run locally with a compatible executor such as Docker and Podman.

The image can be obtained from Docker Hub.

Opozorilo

Testne slike nikakor ne uporabljajte za produkcijske podatke in primere uporabe. Za produkcijska okolja z visokimi varnostnimi zahtevami morate uporabiti produkcijsko sliko.

Politika označevanja

Slike v skladišču so označene z hashem objave Git iz glavne veje skladišča ` <https://github.com/nitrokey/nethsm>` __. Najnovejša slika je označena z testing.

Konfiguracija

Sliko lahko konfigurirate z naslednjimi spremenljivkami okolja.

Spremenljivka okolja

Opis

DEBUG_LOG

Omogoča razširjeno beleženje za NetHSM.

Data Storage

Konfiguracija sistema, ključi in certifikati so shranjeni v podatkovni zbirki etcd. Storitev etcd shrani podatkovno zbirko na poti /data zabojnika. Izvajalci zabojnikov omogočajo priklop na to pot.

Uporaba

Posodo lahko izvedete na naslednji način.

$ docker run --rm -ti -p 8443:8443 docker.io/nitrokey/nethsm:testing

This will run NetHSM as a Unix process inside the container and expose the REST API via the HTTPS protocol on port 8443.

Pomembno

The container uses a self-signed TLS certificate. Make sure to use the correct connection settings to establish a connection. Please refer to chapter NetHSM introduction to learn more.