{"id":82252,"date":"2022-12-28T17:32:04","date_gmt":"2022-12-28T17:32:04","guid":{"rendered":"https:\/\/www.techrepublic.com\/?p=4016662"},"modified":"2023-02-15T10:40:43","modified_gmt":"2023-02-15T10:40:43","slug":"how-to-deploy-a-self-hosted-instance-of-the-passbolt-password-manager","status":"publish","type":"post","link":"https:\/\/cloudnewshub.com\/?p=82252","title":{"rendered":"How to deploy a self-hosted instance of the Passbolt password manager"},"content":{"rendered":"
\n

A password manager can keep your sensitive information in-house. Here’s how to deploy Passbolt to your data center or cloud-hosted service.<\/p>\n<\/div>\n

\n
\"A
Image: Song_about_summer\/Adobe Stock<\/figcaption><\/figure>\n

Passbolt is a password manager<\/a> you can use for team collaboration, and it offers plenty of the features you\u2019ve grown accustomed to having at your fingertips, such as a random password generator, team collaboration, folders, tags and user access control. This password manager is designed specifically for Agile and DevOps teams, and it\u2019s application programming interface-centric and developer-first.<\/p>\n

Why would you want to run a self-hosted instance of Passbolt?<\/h2>\n

If your project or organization needs to save sensitive information and you don\u2019t want to trust it to third-party servers, you might want to run a self-hosted instance of Passbolt. If you\u2019re comfortable using Docker, this is a surefire solution for protecting your passwords from breaches, such as what recently occurred to LastPass.<\/p>\n

SEE: <\/strong>Password breach: Why pop culture and passwords don\u2019t mix (free PDF)<\/strong><\/a> (TechRepublic)<\/strong><\/p>\n

If Passbolt sounds like a password manager well-suited to your needs, learn how it can be deployed with the help of Docker.<\/p>\n

What you\u2019ll need to deploy Passbolt<\/h2>\n

To run the self-hosted version of Passbolt, you\u2019ll need a server with an operating system that supports Docker. I\u2019ll demonstrate with Ubuntu Server 22.04 and the latest version of Docker CE; for that, you\u2019ll need a running instance of Ubuntu Server and a user with sudo privileges.<\/p>\n

How to install Docker<\/h2>\n

First, add the official Docker GPG key with the command:<\/p>\n

curl -fsSL https:\/\/download.docker.com\/linux\/ubuntu\/gpg | sudo gpg --dearmor -o \/usr\/share\/keyrings\/docker-archive-keyring.gpg<\/code><\/p>\n

With the key in place, add the Docker repository with the command:<\/p>\n

echo \"deb [arch=amd64 signed-by=\/usr\/share\/keyrings\/docker-archive-keyring.gpg] https:\/\/download.docker.com\/linux\/ubuntu $(lsb_release -cs) stable\" | sudo tee \/etc\/apt\/sources.list.d\/docker.list > \/dev\/null<\/code><\/p>\n

Next, install the required dependencies with the command:<\/p>\n

sudo apt-get install apt-transport-https ca-certificates curl gnupg lsb-release -y<\/code><\/p>\n

Update apt, and install Docker CE with the commands:<\/p>\n

sudo apt-get update<\/code>
\nsudo apt-get install docker-ce docker-ce-cli containerd.io -y<\/code><\/p>\n

Make sure your user is still a member of the docker group with the command:<\/p>\n

sudo usermod -aG docker $USER<\/code><\/p>\n

Log out and log back in for the changes to take effect.<\/p>\n

Download the Passbolt Docker Compose YAML file with:<\/p>\n

wget https:\/\/download.passbolt.com\/ce\/docker\/docker-compose-ce.yaml<\/code><\/p>\n

Open that file for editing with the command:<\/p>\n

nano docker-compose-ce.yaml<\/code><\/p>\n

Go through that file and edit any entries you need. For example, you might change the APP_FULL_BASE_URL: line to reflect your server\u2019s IP address or hostname. Once you\u2019ve edited the file, save and close it. You can then start the containers with the command:<\/p>\n

docker-compose -f docker-compose-ce.yaml up -d<\/code><\/p>\n

Once the containers have started, you must then create your first admin user with the command:<\/p>\n

docker-compose -f docker-compose-ce.yaml exec passbolt su -m -c \"\/usr\/share\/php\/passbolt\/bin\/cake passbolt register_user -u EMAIL -f FIRSTNAME -l LASTNAME -r admin\" -s \/bin\/sh www-data<\/code><\/p>\n

Where:<\/p>\n