florian0/easyrsa-encfs repository overview

This container requires the PKI Volume to be an encfs encrypted folder. The container will ask you for a password and decrypt the PKI inside the container. This will never expose your decrypted PKI to the rest of your system.

The container will make a volume for the encrypted PKI, however I would recommend mounting a folder manually. You can't loose your PKI or accidentally delete (prune) it that way.

The encrypted volume is at /easyrsa_encrypted.

Example command:

docker run --rm -it -v `pwd`/encrypted-pki:/easyrsa_encrypted --privileged florian0/easyrsa-encfs:3.0.8 

The privileged-flag is important because encfs will need to mount the volume using fuse.