iamfrisbee/postgresql-tde repository overview

⁠Postgresql TDE

This image uses the open source TDE version of postgresql created by Cybertec⁠

⁠Key provider

The default key provider just echos the environment variable POSTGRES_TDE_KEY. It is recommended that you override this functionality by creating your own script that echos your encryption key and replace the script at /opt/pgtde/scripts/provide_key.sh

% docker run -d -p 5432:5432 -v /path/to/your/script.sh:/opt/pgtde/scripts/provide_key.sh iamfrisbee/postgresql-tde

⁠Cluster director

If you want to mount a local directory to contain the postgres database cluster, mount to /var/lib/pgsql

% docker run -d -p 5432:5432 -v /path/to/your/cluster:/var/lib/pgsql iamfrisbee/postgresql-tde

⁠Environment Variables

1. POSTGRES_USER a user to connect to the postgres database with (default: postgresql)
2. POSTGRES_PASSWORD the password for POSTGRES_USER (default: changeme)
3. POSTGRES_DB_NAME the name of the database (default: postgresql)
4. POSTGRES_PORT the port to run postgres on
5. POSTGRES_TDE_KEY the 32 character hex key used to encrypt the database (default: dd015df7f1374ba6e37916f608ddb3f4)