|
4 | 4 | Docker Hub images have not yet been updated, but will be soon. Instructions for switching to Oracle Java for local use will be added shortly. See issue-#19 for details and comments. |
5 | 5 |
|
6 | 6 | ## Overview |
7 | | -This Docker image contains a deployed Shibboleth IdP 3.2.1 running on Java Runtime 1.8 update 71 and Jetty 9.3.7 running on the latest CentOS 7 base. This image is a base image and should be used to set the configuration with local changes. |
| 7 | +This Docker image contains a deployed Shibboleth IdP 3.2.1 running on OpenJDK-based Zulu 8 Update 72 and Jetty 9.3.7 running on the latest CentOS 7 base. This image is a base image and should be used to set the configuration with local changes. |
8 | 8 |
|
9 | 9 | Every component (Java, Jetty, Shibboleth IdP, and extensions) in this image is verified using cryptographic hashes obtained from each vendor and stored in the Dockerfile directly. This makes the build essentially deterministic. |
10 | 10 |
|
11 | | -> Use of this image requires acceptance of the *Oracle Binary Code License Agreement for the Java SE Platform Products* (<http://www.oracle.com/technetwork/java/javase/terms/license/index.html>). |
12 | | -
|
13 | 11 | ## Tags |
14 | 12 | Currently maintained tags: |
15 | 13 |
|
@@ -158,39 +156,22 @@ Jetty Logs and Shibboleth IdP's `idp-process.log`are redirected to the console a |
158 | 156 |
|
159 | 157 | Removing the `/opt/shib-jetty-base/etc/jetty-logging.xml` (or setting it to your own configuration) will cause Jetty's default behavior to occur. Restoring the IdP's baseline `logback.xml` via overlaying will cause the default IdP file logging behavior to occur. |
160 | 158 |
|
161 | | -## Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files |
162 | | -Due to export concerns the Shibboleth IdP image does not ship with the Unlimited Strength JCE files. To add them to your image, add the following RUN command as a step in your `Dockerfile`. |
163 | | - |
164 | | -``` |
165 | | -RUN yum -y install unzip \ |
166 | | - && wget --no-check-certificate --no-cookies --header "Cookie: oraclelicense=accept-securebackup-cookie" \ |
167 | | - http://download.oracle.com/otn-pub/java/jce/8/jce_policy-8.zip \ |
168 | | - && echo "f3020a3922efd6626c2fff45695d527f34a8020e938a49292561f18ad1320b59 jce_policy-8.zip" | sha256sum -c - \ |
169 | | - && unzip -oj jce_policy-8.zip UnlimitedJCEPolicyJDK8/local_policy.jar -d /opt/jre-home/jre/lib/security/ \ |
170 | | - && unzip -oj jce_policy-8.zip UnlimitedJCEPolicyJDK8/US_export_policy.jar -d /opt/jre-home/jre/lib/security/ \ |
171 | | - && rm jce_policy-8.zip \ |
172 | | - && chmod -R 640 /opt/jre-home/jre/lib/security/ \ |
173 | | - && chown -R root:jetty /opt/jre-home/jre/lib/security/ |
174 | | -``` |
175 | | - |
176 | | -> Use of this image requires acceptance of the *Oracle Binary Code License Agreement for the Java SE Platform Products* (<http://www.oracle.com/technetwork/java/javase/terms/license/index.html>). |
177 | | -
|
178 | | -## HTTP2 Support |
179 | | -HTTP2 support is currently experimental. You can enable it by following the directions found at https://github.com/UniconLabs/dockerized-idp-testbed#http2-support. |
180 | | - |
181 | 159 | ## Building from source: |
182 | 160 |
|
183 | 161 | ``` |
184 | 162 | $ docker build --tag="<org_id>/shibboleth-idp" github.com/unicon/shibboleth-idp-dockerized |
185 | 163 | ``` |
186 | 164 |
|
| 165 | +## Recipes |
| 166 | +Instructions for things like use the Oracle JVM and JCE with this image can be found at <https://github.com/Unicon/shibboleth-idp-dockerized/wiki/>. |
| 167 | + |
187 | 168 | ## Authors/Contributors |
188 | 169 |
|
189 | 170 | * John Gasper (<jgasper@unicon.net>) |
190 | 171 |
|
191 | 172 | ## LICENSE |
192 | 173 |
|
193 | | -Copyright 2015 Unicon, Inc. |
| 174 | +Copyright 2016 Unicon, Inc. |
194 | 175 |
|
195 | 176 | Licensed under the Apache License, Version 2.0 (the "License"); |
196 | 177 | you may not use this file except in compliance with the License. |
|
0 commit comments