16 Nov
2017
16 Nov
'17
3:41 p.m.
Hi,
Not sure that this helps, but below is how I solved similar issue by
generating include file inside Docker file using env variables, but this is
not a good approach for sensitive data.
echo "\modparam(\"http_client\", \"httpcon\",
\"apiserver=>https://$apiurl\"); \" >> /kamailio.apiurl
I believe you can use docker secrets, as described below, but I never used
them so I can't help much:
https://medium.com/@basi/docker-environment-variables-expanded-from-secrets…
With kind regards,
Jurijs
On Thu, Nov 16, 2017 at 11:34 AM, Daniel Tryba <d.tryba(a)pocos.nl> wrote:
On Wed, Nov 15, 2017 at 08:46:58AM +0100,
Daniel-Constantin Mierla wrote:
you can define a for a token to be used inside kamailio.cfg by using -A
command line parameter. So when you start kamailio, fetch the password
from your secure system by what so ever meaning, then build the database
url based on it and run kamailio with:
kamailio - A DBURL='mysql://user:passwd@dbhost/kamailio' ...
My guess is the next problem will be the password being visible to all
users querying the processlist :)
Is including a file (import_file) with passwords an option? Generate the
file just before startup, remove it (ofcourse in a secure way (shred the
file and overwrite all freespace with a multiple patters a few dozen
times (ask the auditors for the exact specifications that make them
happy))) after kamailio is running.
_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users(a)lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
> I???m working for a UK high street bank and
our Kamailio
implementation has been challenged because we???ve got database
passwords
held in clear in the configuration file.
...
> My requirement is simple, I need to be able
to supply a password via
means such as loading a variable from a run-once script at
start up, or a
module. The ideal would be to be able to read in a Docker secret :)