厨师容器+厨师库

Question

I try to run few Chef cookbooks in docker. chef-container seams to be a good solution for this. In the cookbook I use credentials which come from encrypted data_bags via chef-vault .

Is there already a solution for chef-container in combination with chef-vault?

Answer 1

除了chef-vault固有的烦恼之外，在创建节点（容器）之后必须重新哈希化，我看不到任何您需要的特殊东西。

Answer 2

I think that should do. There is a Hashicorp Vault too if you are just looking at alternates. They have both Enterprise and opensource versions.

Vault is a tool for securely accessing secrets and provides a unified interface to any secret, while providing tight access control and recording a detailed audit log.