Dockerised Shibboleth SP and Apache ?

[Claudio Ramirez]

2017-02-28 16:58 GMT+01:00 Cantor, Scott <cantor.2 at osu.edu>:

> > That's exactly the kind of information you don't add to the image but
> make it
> > accessible through a volume (run -v ...).
>
> You'd be amazed how many people completely disagree with you on that
> (though I'm not one of them).
>

Not any more. Some people put even secrets in images. They get bonus point
when they "cleaned" them on a higher layer of the image. :)

Golden rules for me is: libs and bins in the image, and maybe static
configuration. All the rest should be secured and managed by something like
configuration management.

Regards,

C.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170228/f515dfeb/attachment.html>