Skip to main content

Run the primer in Docker

In this integration guide we use a Docker Compose file to configure the parameters for the Corsha Primer.

First you will need to log in to the Corsha Docker repository in order to pull Corsha images. Contact Corsha if you do not have credentials to access our Corsha Docker repository running in Artifactory.

docker login corsha-docker.jfrog.io --username <username>

Getting an Authenticator Secret to seed your Authenticator​

Each Authenticator instance has a unique Authenticator Secret that is used to uniquely seed and uniquely identify the client it represents. In order to create an Authenticator Secret, we must provide it with a Primer Secret. Visit the Console Guide on how to generate a new Primer Secret.

Once you have a Primer Secret, you can build the primer.docker-compose.yaml with this PRIMER_SECRET to invoke the primer command. This will generate a unique Authenticator Secret that you can use to prime a Corsha Authenticator.

tip

To get the Corsha Primer Docker image, contact your Corsha TPOC.

Set up the Corsha Primer's Docker Compose Configuration​

For the primer.docker-compose.yaml file, see Configuration to configure the necessary environment variables and arguments:

version: "3.9"
services:
  primer:
    image: corsha-docker.jfrog.io/mstream-primer:<version> # Fill in with the version provided by your TPOC
    environment:
      - PRIMER_SERVICE_HOST=<FILL IN the Primer Host from your deployment guide>
      - PRIMER_SERVICE_PORT=443
      - PRIMER_SECRET=<FILL IN>
    entrypoint: ["./bin/mstream-primer", "<Machine ID>", "<Job ID>", "<Build ID>"]
note

If you require the addition of extra Certificate Authority (CA) roots of trust, please include the YAML snippet below in your primer.docker-compose.yaml and include your bundle of CAs in a local root.ca.pem file. If this step is not necessary for your setup, feel free to proceed directly to running the Corsha Primer.

    volumes:
      - ./ssl/root.ca.pem:/etc/pki/ca-trust/source/anchors/root.ca.pem
    command: "--ca-cert /etc/pki/ca-trust/source/anchors/root.ca.pem"

Run the Corsha Primer via Docker Compose​

In order to obtain an Authenticator Secret, run the primer command below in the same directory as the placed Docker Compose file:

docker-compose -f primer.docker-compose.yaml run primer

The output of this command will contain the Authenticator Secret which can be used to deploy a Corsha Authenticator