remilapeyre / vault-acme

Mozilla Public License 2.0
94 stars 24 forks source link

Vault ACME should work with mlock enabled #2

Closed remilapeyre closed 4 years ago

remilapeyre commented 4 years ago

From https://github.com/remilapeyre/vault-acme/issues/1#issuecomment-561456214

Enabling Vault ACME in Docker fails when mlock is enabled with a cryptic error message:

#> vault secrets enable acme
Error enabling: Error making API request.

URL: POST http://139.162.27.172:22663/v1/sys/mounts/acme
Code: 400. Errors:

* Unrecognized remote plugin message:

This usually means that the plugin is either invalid or simply
needs to be recompiled to support the latest protocol.

I've not tested if the same happens without Docker.

nvx commented 4 years ago

I gave it a quick shot outside of docker and it ran fine with mlock enabled on FreeBSD

remilapeyre commented 4 years ago

It was actually documented at https://www.vaultproject.io/docs/configuration/#inlinecode-disable_mlock.

I updated the README with 6228da5b45e600f3a757195f1068df39d2777fba.