https://github.com/paketo-buildpacks/encrypt-at-rest
A Cloud Native Buildpack that AES encrypts an application layer and then decrypts it at launch time
https://github.com/paketo-buildpacks/encrypt-at-rest
all-applications cnb encrypt-at-rest utilities
Last synced: 2 months ago
JSON representation
A Cloud Native Buildpack that AES encrypts an application layer and then decrypts it at launch time
- Host: GitHub
- URL: https://github.com/paketo-buildpacks/encrypt-at-rest
- Owner: paketo-buildpacks
- License: apache-2.0
- Created: 2020-04-01T22:08:47.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2025-04-28T12:11:05.000Z (3 months ago)
- Last Synced: 2025-04-28T13:33:32.063Z (3 months ago)
- Topics: all-applications, cnb, encrypt-at-rest, utilities
- Language: Go
- Homepage:
- Size: 554 KB
- Stars: 4
- Watchers: 6
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
# Paketo Buildpack for Encrypt at Rest
## Buildpack ID: `paketo-buildpacks/encrypt-at-rest`
## Registry URLs: `docker.io/paketobuildpacks/encrypt-at-rest`
The Paketo Buildpack for Encrypt At Rest is a Cloud Native Buildpack that AES encrypts an application layer and then decrypts it at launch time.
## Behavior
This buildpack will participate any of the following conditions are met
* `$BP_EAR_KEY` is set to a hex-encoded AES key
The buildpack will do the following:
* AES encrypts the contents of `` using Cipher Feedback (CFB) mode and a randomly generated initial vector
* Removes the source code in ``
* Contributes a `profile.d` script the decrypts the application before launching
## Configuration
| Environment Variable | Description |
|----------------------|----------------------------------------------|
| `$BP_EAR_KEY` | Configure the AES key to use at build time. |
| `$BPL_EAR_KEY` | Configure the AES key to use at launch time. |
## License
This buildpack is released under version 2.0 of the [Apache License][a].
[a]: http://www.apache.org/licenses/LICENSE-2.0