Docker version of a Handle Server

This is a docker version of the handle server software at http://www.handle.net/ All information for how to use a handle server should be via the handle.net server documentation and support systems.

This is a docker image with an embedded configuration script that is run on docker start to load default settings from environment variables.

Starting

Use Docker compose to start the server.

docker compose up

For for overriding evn variables see Environment variables in Compose.

Configuration

Configuration follows the same rules as the main handle configuration however with environments, see official documentation for more detailed configuration details.

| Config | Default | Required | Description | ------ | ------- | -------- | ----------- | HANDLEHOSTIP | 0.0.0.0 | No | Public handle host ip used for siteinfo | SERVERADMINFULLACCESS | yes | No | Admins listed in SERVERADMINS will have full permissions over all handles on the server | SERVERADMINS | None | No | A list of handle admins space seperated e.g. ADMIN1 ADMIN2 ADMIN3 | REPLICATIONADMINS | None | No | A list of handle admins for replication space seperated e.g. "ADMIN1 ADMIN2 ADMIN3" | CASESENSITIVE | no | No | Are handles case sensitive | MAXSESSIONTIME | 86400000 | No | Max authenticated client session time in ms. | MAXAUTHTIME | 60000 | No | Max time to wait for for client to respond to auth challenge. | THISSERVERID | 1 | No | An identifier for this handle server. | TRACERESOLUTION | no | No | Set to yes for debugging information to be logged for handle resolution. | ALLOWLISTHDLS | no | No | Used to disable listhandles functionality. | ALLOWRECURSION | no | No | Allow recursive lookup outside of this handle server into global handle network. | SERVERPRIVATEKEYPEM | None | Yes | PEM PKCS8 format private key for encryption on the server. | SERVERPUBLICKEYPEM | None | Yes | PEM PKCS8 format public key for encryption on the server. | STORAGETYPE | None | No | Empty defaults to built-in storage. Other main option is "sql" | SQLURL | None | No | This setting should specify the JDBC URL that is used to connect to the SQL database. | SQLDRIVER | org.mariadb.jdbc.Driver | No | This is the name of a Java class that contains the driver for the JDBC connection. | SQLLOGIN | root | No | The user name that should be used by the handle server to connect and perform operations on the database. | SQLPASSWD | None | No | The password that should be used by the handle server to connect and perform operations on the database. | SQLREADONLY | no | No | Boolean setting for allowing writes to database or not. | ALLOWNA_ADMINS | yes | no | To allow global handle server admins access to this handle server.

Creating a PEM keypair

The PRIVATEKEY and PUBLICKEY need to be in pksc8 format, below is an example that makes ready for usage in the environment variables

Generate keypair

ssh-keygen -m pkcs8 -f mykey.pem

Get it in a format for PKCS8 and put in explicit new lines ready for env var

openssl pkcs8 -topk8 -in mykey.pem -nocrypt | sed ':a;N;$!ba;s/\n/\\r\\n/g'
openssl pkcs8 -topk8 -in mykey.pem -nocrypt | openssl pkey -pubout | sed ':a;N;$!ba;s/\n/\\r\\n/g'