Persistent filesystem backend

lioramilbaum1 · February 15, 2020, 9:24pm

Vault is deployed with docker-compose
Used a volum bind.
The file folder is created and is persistent. The secrets are not.
Any idea how to make the secrets persistent after bootstrapping a new vault container?

michelvocks · February 17, 2020, 12:41pm

Hi @lioramilbaum1!

Make sure that your Vault instance is not running in development mode and that you’ve configured a valid storage backend for Vault (https://www.vaultproject.io/docs/configuration/storage/).

Cheers,
Michel

lioramilbaum1 · February 19, 2020, 2:29pm

Thanks Michel for your reply. It is already running as you suggested with no avail.

tyrannosaurus-becks · February 19, 2020, 11:06pm

Ah, that’s too bad. Can you share steps to reproduce what you’re seeing? The Vault version, Vault configuration, docker compose file, and command you’re using to bind the volume?

lioramilbaum1 · February 20, 2020, 7:50am

Vault version: 1.3.2
Vault configuration file:

github.com

lioramilbaum/zapata/blob/master/microservices/vault/config.hcl

ui = true

listener "tcp" {
  address     = "0.0.0.0:8200"
  tls_disable = 1
}

storage "file" {
  path = "/vault/file"
}

api_addr = "http://127.0.0.1:8200"

docker compose file:

github.com

lioramilbaum/zapata/blob/master/microservices/docker-compose.yml

version: "3.7"
services:
  vault:
    image: vault:1.3.2
    container_name: vault
    ports:
      - 8200:8200
    volumes:
      - type: bind
        source: ./vault
        target: /vault/config
    environment:
      - VAULT_ADDR=http://localhost:8200
    cap_add:
      - IPC_LOCK
    command: server
    restart: always
  initvault:
    image: vault:1.3.2
    container_name: initvault

This file has been truncated. show original

command to bind the volue:
embedded in the docker-compose file

michelvocks · February 20, 2020, 10:10am

Hi @lioramilbaum1!

You mounted your Vault configuration to the host file system but you didn’t mount the file storage backend folder (e.g. /vault/file).

Cheers,
Michel

lioramilbaum1 · February 20, 2020, 12:56pm

Are you sure it is required? If I am not mistaken, the vault Dockerfile is already taking care of it. Can you provide me a working example?

Topic		Replies	Views
How to define persistent storage with Vault docker Terraform vault	0	565	August 26, 2020
Docker volumes not persisting, what does vault use? Vault	1	944	September 27, 2020
Vault with Docker Compose Vault	7	33470	September 22, 2021
Migrate Vault with file storage between servers Vault vault	1	132	May 12, 2024
How to use vault KV/Secret on another app/db docker compose Vault	5	1550	February 20, 2023

Persistent filesystem backend

Related topics