cmdoss/seal-key-server repository overview

⁠Seal Key Server

Container image for the MystenLabs Seal⁠ key server.

This package downloads the official key-server release binary from MystenLabs/seal releases⁠ and packages it for linux/amd64 and linux/arm64.

⁠Upstream

• Source: MystenLabs/seal⁠
• Releases: github.com/MystenLabs/seal/releases⁠
• Version pin: .current-version maps to release tag seal-v${VERSION}
  • Binary assets: key-server-linux-x86_64, key-server-linux-aarch64

⁠Multi-Architecture Support

• linux/amd64 (x86_64)
• linux/arm64 (aarch64)

⁠Ports

⁠Configuration

The binary supports two configuration modes:

⁠1. Config file (recommended)

Set CONFIG_PATH to a YAML config file path (mount it into the container).

Example config reference: key-server-config.yaml⁠

docker run --rm \
  -p 2024:2024 \
  -e CONFIG_PATH=/config/key-server-config.yaml \
  -e MASTER_KEY=<your-master-key> \
  -v /path/to/key-server-config.yaml:/config/key-server-config.yaml:ro \
  cmdoss/seal-key-server:latest

Optional: set NODE_URL either in the config file or as an environment variable (not both).

⁠2. Local env vars (testing only)

Without CONFIG_PATH, the server uses environment variables in Open mode:

⁠Build locally

cd packages/seal-key-server
docker build --build-arg VERSION="$(cat .current-version)" -t seal-key-server .

⁠License

This project is licensed under the Apache License 2.0. The packaged key-server binary is from MystenLabs/seal (Apache-2.0).