Overview
- Full name
docker.io/keyfactor/ejbca-ce- Registry
- docker.io
- Namespace
- keyfactor
- Repository
- ejbca-ce
- Cached tags
- 14
- Last synced
- 07/06/2026, 10:22 AM
Introduction
EJBCA Community Edition 企业 PKI 镜像，签发 TLS/代码签名证书与 CRL，适合内网 CA 与 mTLS 基础设施。
Details
keyfactor/ejbca-ce 运行 EJBCA CE，提供 Web 管理、SCEP/EST/ACME 等协议签发证书。典型用于 service mesh、Wi-Fi 或 VPN 的内网 CA，与 step-ca 相比功能更完整。定位为 PKI Web + CA 服务，需 MariaDB 与 HSM/密钥 volume；生产固定 tag、离线 Root CA 与审计。
快速启动
docker run -d --name ejbca-ce \
-p 8443:8443 \
-e DATABASE_JDBC_URL=jdbc:mysql://mysql:3306/ejbca \
docker.io/keyfactor/ejbca-ce:latest
推荐实践
docker run -d --name ejbca-ce \
--restart unless-stopped \
-p 8443:8443 \
-e DATABASE_JDBC_URL=jdbc:mysql://mysql.internal:3306/ejbca \
-e DATABASE_USER=ejbca -e DATABASE_PASSWORD=strong-pass \
-v /data/ejbca/pki:/opt/keyfactor/pki \
docker.io/keyfactor/ejbca-ce:8.3.0
核心参数说明
-p 8443:8443— EJBCA HTTPS 管理端口-e DATABASE_JDBC_URL— MariaDB/MySQL 元数据库-v .../pki:...— CA 密钥与证书存储（高敏）--restart unless-stopped— CA 服务持续在线- 固定 tag — EJBCA 与协议 pin
Kubernetes
apiVersion: apps/v1
kind: Deployment
metadata:
name: ejbca-ce
spec:
replicas: 1
selector:
matchLabels:
app: ejbca-ce
template:
metadata:
labels:
app: ejbca-ce
spec:
containers:
- name: ejbca
image: docker.io/keyfactor/ejbca-ce:8.3.0
ports:
- containerPort: 8443
envFrom:
- secretRef:
name: ejbca-db-secrets
volumeMounts:
- name: pki
mountPath: /opt/keyfactor/pki
volumes:
- name: pki
persistentVolumeClaim:
claimName: ejbca-pki
---
apiVersion: v1
kind: Service
metadata:
name: ejbca-ce
spec:
selector:
app: ejbca-ce
ports:
- port: 8443
targetPort: 8443
单副本 + PVC 备份 Root CA；Ingress 严格 mTLS 与 IP 限制。
Latest tags (20)
View all 14 tags →| Tag | Arch | Pushed At | Size | Digest | Sync | Wish | Action |
|---|---|---|---|---|---|---|---|
docker.io/keyfactor/ejbca-ce :latest | linux/amd64linux/arm64 | 2025/12/17 09:31 | 360.4 MB | sha256:1645c7c465dd… | |||
docker.io/keyfactor/ejbca-ce :9.3.7 | linux/amd64linux/arm64 | 2025/12/17 09:30 | 360.4 MB | sha256:1645c7c465dd… | |||
docker.io/keyfactor/ejbca-ce :9.1.1 | linux/amd64 | 2025/03/31 21:56 | 371.0 MB | sha256:a7aa1e710781… | |||
docker.io/keyfactor/ejbca-ce :9.0.0 | linux/amd64 | 2024/12/19 21:07 | 415.5 MB | sha256:03b12eef26f1… | |||
docker.io/keyfactor/ejbca-ce :8.3.2 | linux/amd64 | 2024/10/04 05:54 | 389.1 MB | sha256:2382758f0c56… | |||
docker.io/keyfactor/ejbca-ce :8.3.1 | linux/amd64 | 2024/10/04 05:53 | 390.1 MB | sha256:d4811b345e7e… | |||
docker.io/keyfactor/ejbca-ce :8.2.0.1 | linux/amd64 | 2023/12/07 20:20 | 354.7 MB | sha256:5a2dd15b2d85… | |||
docker.io/keyfactor/ejbca-ce :8.0.0 | linux/amd64 | 2023/06/30 17:41 | 356.8 MB | sha256:6d9ce7ce471a… | |||
docker.io/keyfactor/ejbca-ce :7.11.0 | linux/amd64 | 2023/06/04 13:36 | 356.5 MB | sha256:4f15ffe14830… | |||
docker.io/keyfactor/ejbca-ce :7.10.0.2 | linux/amd64 | 2023/01/15 14:29 | 348.8 MB | sha256:36e56ed61876… | |||
docker.io/keyfactor/ejbca-ce :7.10.0.1 | linux/amd64 | 2022/09/29 23:43 | 313.3 MB | sha256:6d45ee40a681… | |||
docker.io/keyfactor/ejbca-ce :7.9.0.2 | linux/amd64 | 2022/09/25 13:33 | 314.4 MB | sha256:0b2723d37302… | |||
docker.io/keyfactor/ejbca-ce :7.4.3.2 | linux/amd64 | 2022/06/06 14:04 | 310.1 MB | sha256:c78af072a2d2… | |||
docker.io/keyfactor/ejbca-ce :7.9.0.1 | linux/amd64 | 2022/06/05 13:17 | 313.5 MB | sha256:516ecf0aeb47… |