Vault 的配置、启动以及 seal/unseal 的过程。
准备工作:
unset VAULT_TOKEN
环境变量
[05/12/24]seed@VM:~/.../bin$unset VAULT_TOKEN
一、Vault 的配置
(1)在 /home/seed/vault-test下创建 配置文件 config.hcl,内容如下:
storage "raft" {
path = "/home/seed/vault-test/data"
node_id = "node1"
}
listener "tcp" {
address = "127.0.0.1:8200"
tls_disable = "true"
}
disable_mlock = true
api_addr = "http://127.0.0.1:8200"
cluster_addr = "https://127.0.0.1:8201"
ui = true
(2)创建目录
[05/12/24]seed@VM:~/.../bin$mkdir /home/seed/vault-test/data
(3)启动 vault server
[05/12/24]seed@VM:~/.../bin$./vault server -config=/home/seed/vault-test//config.hcl