Test Image

The test image is designed for testing and development purposes. It does not offer to run the NetHSM process with hardware-based separation (KVM), to encrypt the data store, or to use an external etcd. The connection between the NetHSM process and the integrated key-value store is unencrypted. The image is distributed as OCI image and can be run locally with a compatible executor such as Docker and Podman.

The image can be obtained from Docker Hub.

警告

在任何情况下都不要将测试镜像用于生产数据和用例。对于安全性要求较高的生产环境，必须使用生产镜像。

标记政策

版本库中的图片都标有`版本库主分支<https://github.com/nitrokey/nethsm>`__ 的 Git 提交哈希值。最新的图片标记为``testing``。

配置

可以使用以下环境变量配置图像。

环境变量

描述

Ipsec（仅限 Linux）

启用 NetHSM 的扩展日志记录。

Data Storage

系统配置、密钥和证书存储在 etcd 数据库中。etcd 服务将数据库存储在容器的``/data`` 路径中。容器执行器允许卷挂载或绑定挂载该路径。

使用方法

容器可以按以下方式执行。

$ docker run --rm -ti -p 8443:8443 docker.io/nitrokey/nethsm:testing

This will run NetHSM as a Unix process inside the container and expose the REST API via the HTTPS protocol on port 8443.

重要

The container uses a self-signed TLS certificate. Make sure to use the correct connection settings to establish a connection. Please refer to chapter NetHSM introduction to learn more.