How to setup a root CA certificate for REVEN with Docker?

If your PDB server uses a custom root CA certificate, you may want to provide REVEN with this information.

In order to do so when REVEN is running in a Docker container, please follow the procedure below:

1. Temporarily copy <your_root_CA_certificate.crt> to ~/Reven2 on the server hosting REVEN, assuming you kept ~/Reven2 as REVEN’s work directory.
2. From REVEN’s installation directory, run the REVEN container: ./run.sh
3. Get your container’s name: sudo docker ps | grep tetrane
4. Get a terminal in your container: sudo docker exec -it <container_name> bash
5. From the docker’s terminal, add the root CA certificate to the list of known root CA certificates: cat /Reven2/<your_root_CA_certificate.crt> >> /reven/share/reven/quasar/venv/lib/python3.5/site-packages/certifi/cacert.pem
6. Exit the container’s terminal: exit
7. Commit your running container to a new image: sudo docker commit <container_name> tetrane/reven2:2.x.x-with-root-CA
8. Stop your running container: ./run.sh
9. Edit the run.sh script and update the REVEN_VERSION variable to match your new image’s name: e.g. REVEN_VERSION="2.7.1-with-root-CA"
10. Run the container again: ./run.sh
11. Remove <your_root_CA_certificate.crt> from ~/Reven2.