vault Docker & Self-Hosted Deployment

GitHub

A tool for secrets management, encryption as a service, and privileged access management

36,113 stars Go Go 1 file · ~10,449 tokens #go#secrets#vault
1. Pull Image (DOCKERHUB) docker pull hashicorp/vault:latest
2. Docker Run (1-Click Launch) docker run -d --name vault --restart always hashicorp/vault:latest
3. Podman Run podman run -d --name vault --restart always hashicorp/vault:latest
4. Skopeo Inspect (Zero-Pull Manifest) skopeo inspect docker://docker.io/hashicorp/vault:latest
5. ORAS Pull (OCI Artifact) oras pull hashicorp/vault:latest
scripts/cross/Dockerfile 
# Copyright IBM Corp. 2016, 2025
# SPDX-License-Identifier: BUSL-1.1

FROM debian:buster

RUN apt-get update -y && apt-get install --no-install-recommends -y -q \
                         curl \
                         zip \
                         build-essential \
                         gcc-multilib \
                         g++-multilib \
                         ca-certificates \
                         git mercurial bzr \
                         gnupg \
                         libltdl-dev \
                         libltdl7

RUN curl -sL https://deb.nodesource.com/setup_20.x | bash -
RUN curl -sL https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add -
RUN echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources.list.d/yarn.list

RUN apt-get update -y && apt-get install -y -q nodejs yarn

RUN rm -rf /var/lib/apt/lists/*


ENV GOVERSION 1.13.8
RUN mkdir /goroot && mkdir /gopath
RUN curl https://storage.googleapis.com/golang/go${GOVERSION}.linux-amd64.tar.gz \
           | tar xvzf - -C /goroot --strip-components=1

ENV GOPATH /gopath
ENV GOROOT /goroot
ENV PATH $GOROOT/bin:$GOPATH/bin:$PATH

RUN go get golang.org/x/tools/cmd/goimports

RUN mkdir -p /gopath/src/github.com/hashicorp/vault
WORKDIR /gopath/src/github.com/hashicorp/vault
CMD make static-dist bin