[{"_1":2,"_155":-5,"_156":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_134":135},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_125":-5,"_126":11,"_127":17,"_128":11,"_129":-5,"_130":11,"_131":-5,"_132":133},"canonicalUrl","https://hub.docker.com/r/pinepain/vault/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","pinepain","reponame","vault","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2017-12-04T21:52:35.743746Z","description","HashiCopt Vault with S3 Backend","is_private","last_updated","2017-12-09T15:49:23.975487Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",1026,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# Vault S3\n\nThis is a [Hashicorp Vault](https://www.vaultproject.io/) image preconfigured for S3 backend.\n\n## Prerequisites\n\nYou will need to have preconfigure S3 bucket and IAM user which can access this bucket.\n\nIt might be a good idea to enable bucket versioning.\n\nHaving separate IAM user for vault bucket is also nice. The user needs to have following permissions:\n\n```json\n{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Effect\": \"Allow\",\n \"Action\": [\n \"s3:ListBucket\"\n ],\n \"Resource\": [\n \"\"\n ]\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": [\n \"s3:PutObject\",\n \"s3:GetObject\",\n \"s3:DeleteObject\"\n ],\n \"Resource\": [\n \"/*\"\n ]\n }\n ]\n }\n```\n\n## Usage\n\nExport AWS credentials\n\n```\nexport AWS_ACCESS_KEY_ID=\"\"\nexport AWS_SECRET_ACCESS_KEY=\"\"\nexport AWS_S3_BUCKET=\"\"\nexport AWS_DEFAULT_REGION=\"\"\n```\n\nRun image:\n\n`docker run -p 8200:8200 --cap-add IPC_LOCK -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_S3_BUCKET -e AWS_REGION -d pinepain/vault`\n\nand export vault address:\n\n`export VAULT_ADDR=http://127.0.0.1:8200`\n\nYou'll get container id. To view logs you can run `docker logs `\n\n```\n==> Vault server configuration:\n\n Cgo: disabled\n Listener 1: tcp (addr: \"0.0.0.0:8200\", cluster address: \"0.0.0.0:8201\", tls: \"disabled\")\n Log Level: info\n Mlock: supported: true, enabled: true\n Storage: s3\n Version: Vault v0.9.0\n Version Sha: bdac1854478538052ba5b7ec9a9ec688d35a3335\n\n==> Vault server started! Log data will stream in below:\n```\n\nNote, that in production you will probably want to run vault container daemonized and keep it up and running forever:\n\n`docker run -p 8200:8200 --restart=always --cap-add IPC_LOCK -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_S3_BUCKET -e AWS_REGION -d pinepain/vault`\n\n\n## Initializing vault\n\n*Skip this section if you have vault data initialized previously* \n\nIf you haven't run vault with this backend before, you'll need to initialize it first. This is quite simple, just run\n`vault init`. By default, you should get 5 unseal keys and one root token. Store them in a secure way as there is little\nno chance to restore them and you won't get you data from vault without them.\n\n## Unsealing\n\nBy default vault is in sealed state whenever it starts, including restarts, so you'll need to unseal it first. By default\nyou need 3 unseal keys to unseal, so run `vault unseal` three times and provide three unseal keys on by one.\n\nNow you should be good to go, `vault status` should gives you something like\n\n```\nvault status\nType: shamir\nSealed: false\nKey Shares: 5\nKey Threshold: 3\nUnseal Progress: 0\nUnseal Nonce: \nVersion: 0.9.0\nCluster Name: vault-cluster-\nCluster ID: \n\nHigh-Availability Enabled: false\n```\n\nAt this point you probably want to start using vault so you need to export your token, so run `VAULT_TOKEN=`.\n\nCool. Let's try to fill first secret. Vault has [nice intro](https://www.vaultproject.io/intro/getting-started/first-secret.html),\nhere's it short version:\n\n```\n$ vault write secret/hello value=world\nSuccess! Data written to: secret/hello\n\n$ vault read secret/hello\nKey \tValue\n--- \t-----\nrefresh_interval\t768h0m0s\nvalue \tworld\n\n$ vault write secret/hello value=world excited=yes\nSuccess! Data written to: secret/hello\n\n$ vault read secret/hello\nKey \tValue\n--- \t-----\nrefresh_interval\t768h0m0s\nexcited \tyes\nvalue \tworld\n\n$ vault read -format=json secret/hello\n{\n\t\"request_id\": \"aae87106-f258-8828-fd34-d03b9ffa6be6\",\n\t\"lease_id\": \"\",\n\t\"lease_duration\": 2764800,\n\t\"renewable\": false,\n\t\"data\": {\n\t\t\"excited\": \"yes\",\n\t\t\"value\": \"world\"\n\t},\n\t\"warnings\": null\n}\n\n$ vault delete secret/hello\nSuccess! Deleted 'secret/hello' if it existed.\n```\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",66070999,"orgData","recentTags",[87],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},"content_type","creator",1937677,"full_size",66055752,"id",18916617,"images",[97],{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},"architecture","amd64","digest","sha256:3fb21705d739dfb57755a00c55ee9d4686bde4549731c9b9faf2d6fd1d5cd367","features","","last_pulled","2026-09-25T05:38:16.980818369Z","last_pushed","2017-12-05T19:05:46Z","os","linux","os_features","os_version","size","variant","2017-12-09T15:49:23.493838Z","last_updater","last_updater_username","media_type","latest","repository",2185309,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":136,"_143":144,"_132":153,"_154":11},{"_36":137,"_38":138,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":139,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":140,"_75":11,"_76":142,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":141},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_145":60,"_146":-5,"_147":-5,"_148":149},"count","next","previous","results",[150],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":151,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},[152],{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},[],"canDeleteTags","actionData","errors"]

pinepain/vault

Tags for pinepain/vault