Rahti: add certificate to store

Dockerfile

@@ -8,3 +8,5 @@ ENTRYPOINT ["./docker-entrypoint.sh"]
 COPY empty-config.edn /rems/config/config.edn
 COPY target/uberjar/rems.jar /rems/rems.jar
 COPY docker-entrypoint.sh /rems/docker-entrypoint.sh
+
+RUN chmod 664 /usr/local/openjdk-11/lib/security/cacerts

docker-entrypoint.sh

@@ -4,6 +4,19 @@ cd rems
 
 [ -z "$COMMANDS" ] && COMMANDS="run"
 
+certfile=$(ls /rems/certs)
+
+if [ ! -z ${certfile} ] && [ "${certfile}" != "null" ] ; then
+    keytool -importcert -cacerts -noprompt \
+            -storepass changeit \
+            -file /rems/certs/${certfile} \
+            -alias ${certfile}
+
+    keytool -storepasswd -cacerts \
+            -storepass changeit  \
+            -new $(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 20)
+fi
+
 for COMMAND in $COMMANDS
 do
     if [ "${COMMAND}" = "run" ] ; then

docs/docker.md

@@ -0,0 +1,8 @@
+# Deploy Rems in docker
+
+1. Build rems with lein or copy rems.jar to target/uberjar/rems.jar
+2. Build rems docker image. Use the docker file located in the root directory of rems git.
+Example command: `docker build /path/to/rems/git/root/dir/ -t rems:tag`
+2. Mount your config.edn file to /rems/config/config.edn in the container (Optional)
+3. Mount certificate to be added to rems certificate store to /rems/certs/.
+This process currecntly supports only one certificate. (Optional)