nijo89/keepass4web repository overview

This image contains lixmal/keepass4web⁠ bundled with Apache2 based on ubuntu:16.04. This WebApp let's you access your KeePass Databases through your Browser.

⁠seccomp profile modification

Because keepass4web uses kernel-keyring to store keys this functionality has to be enabled in your docker envoirnment. Enabling this feature is an security issue, because every container on an host with this feature enabled can access every key in keyring, which is not namespaced. But it's required for this application.

As you can read in DockerDocs⁠ you can copy the default seccomp profile of docker and add the commands you need to enable. You can copy the default profile from here⁠. You should find the section syscalls with a huge list of allowed syscalls. To this list add the following three: keyctl, add_key, request_key

To enable your seccomp profile on docker run append the following option to your command --security-opt seccomp=/path/to/your/seccomp-profile.json

⁠configuration

The image contains a default configuration files, they are stored on volume /conf. I recommend to start a container and immediate delete it, to get the default configurations for modification. docker run -v /path/on/host:/conf nijo89/keepass4web You should now find all configurations under /path/on/host. apache.conf is linked to /etc/apache2/sites-enabled to enable SSL just uncomment the three lines in the file. Do not use VirtualHost statements in this file, otherwise keepass4web will not run. keepass4web contains config_local.yml modify this file to your needs. if you enabled SSL in apache you have to set the last two variables in this file to 1. namely this are: is_secure and is_http_only

⁠running container

after modifying the configuration you can run a container with the following command:

http docker run -p 80:80 -v /path/on/host:/conf --security-opt seccomp=/path/to/your/seccomp-profile.json nijo89/keepass4web

https docker run -p 443:443 -v /path/on/host:/conf --security-opt seccomp=/path/to/your/seccomp-profile.json nijo89/keepass4web