Sign inSign up

sphen/micromdm

By sphen

•Updated over 6 years ago

Autobuild of https://github.com/sphen13/micromdm-docker

Image
0

7.5K

sphen/micromdm repository overview

⁠MicroMDM (Docker)

Simple docker container for MicroMDM⁠. MicroMDM is simple to run, as it is contained within a single binary, but I still thought there was a need to have a small docker container that had a bit of intelligence to it.

There are at least 2 folders you would want to map into the container (or use a data container for). You can easily migrate from a dedicated instance to a dockerized version by pointing the container to your pre-existing folders.

For the /certs folder: This folder will contain your own TLS cert and key file if you opt to use one. The TLS_CERT and TLS_KEY environment variable should match the name of the file(s) that you places in the /certs folder.

You can see the logs of the running container by using docker logs for example:

docker logs micromdm
⁠Supported tags
  • latest
    • Latest release
  • pre-release
    • Latest pre-release
  • 1.2.0
  • 1.3.0
  • 1.3.1
  • 1.4.0
  • 1.5.0
  • 1.6.0
  • 1.7.0-alpha
  • 1.7.1
⁠Example Usage
docker run -d --restart always --name micromdm \
  -e SERVER_URL=https://micromdm.acme.com \
  -e API_KEY=abcdef1234567890 \
  -e TLS_CERT=micromdm.acme.com.crt \
  -e TLS_KEY=micromdm.acme.com.key \
  -e TLS=true \
  -e COMMAND_WEBHOOK_URL=https://your-webhook-server-url \
  -v /root/certs:/certs \
  -v /root/micromdm:/config \
  -v /root/mdmrepo:/repo \
  -p 80:80 \
  -p 443:443 \
  sphen/micromdm
⁠Environment Variables
VariableDescription
API_KEYDefine your API key (Optional)
DEBUGSet to true to enable -http_debug
SERVER_URLPublic HTTPS url of your server
COMMAND_WEBHOOK_URLURL to send command responses (Optional)
TLSSet to true to enable HTTPS (Defaults to False)
TLS_CERTTLS certificate file name (within mapped /certs directory)
TLS_KEYTLS private key file name (within mapped /certs directory)
NO_COMMAND_HISTORYdisables saving of command history (Boolean)
USE_DYNAMIC_CHALLENGErequire dynamic SCEP challenges (Boolean)
GEN_DYNAMIC_CHALLENGEgenerate dynamic SCEP challenges in enrollment profile (built-in only) (Boolean)
⁠Mapped Volumes
PathDescription
/certsFolder containing TLS certificates (Optional)
/configFolder containing micromdm configuration
/repoFolder for http file repo
⁠Ports

80, 443, 8080

Ports 80/443 used if TLS enabled. Otherwise serves on port 8080.

⁠Ideas

Throw a caddy container in front! :)

Tag summary

Content type

Image

Digest

Size

10.3 MB

Last updated

over 6 years ago

docker pull sphen/micromdm