Rahul Bairathi
Rahul Bairathi

Reputation: 57

Difference between fabric-orderer/fabric-peer and fabric-ca-orderer/fabric-ca-peer images

Please tell me what is the difference between the fabric-orderer/fabric-peer and fabric-ca-orderer/fabric-ca-peer images. One difference I found was that fabric-ca-* images contains fabric-ca-client.

Also, which of these two sets would be carried forward in future releases?

Upvotes: 2

Views: 513

Answers (2)

Taylor Hulsmans
Taylor Hulsmans

Reputation: 1

I came upon this question out of the desire to create fabric-ca-* containers for fabric 1.3, they are very nice for abandoning cryptogen. My search led me to FABC-722 and a commentor had a nice link to the gerrit. I landed up being able to create 1.3 versions simply by cloning fabric-ca and running make docker-all. After inspecting it with my poor knowledge of make i found it linked to various Dockerfile.in's in the images folder. The fabric-ca-orderer for example runs this.

#
# Copyright IBM Corp. All Rights Reserved.
#
# SPDX-License-Identifier: Apache-2.0
#
FROM _NS_/fabric-orderer:_FABRIC_TAG_
COPY payload/fabric-ca-client /usr/local/bin
ARG FABRIC_CA_DYNAMIC_LINK=false
RUN chmod +x /usr/local/bin/fabric-ca-client
RUN apt-get update && apt-get install -y netcat && rm -rf /var/cache/apt

# libraries needed when image is built dynamically
RUN if [ "$FABRIC_CA_DYNAMIC_LINK" = "true" ]; then apt-get install -y libltdl-dev; fi

I hope this at least leads you to the answer your seeking

Upvotes: 0

Peter Kim
Peter Kim

Reputation: 26

You can build your development or service environment with "fabric-ca-*" if you decide to use "FABRIC CA" for issuing certificates. If not, using OpenSSL or other CA tools for, you can use fabric-orderer, fabric-peer and ...

A typical thing fabric-ca do is automatically generate and store their own root ca or intermediate ca certificate by its configuration (e.g., fabric-ca-server-config.yaml) at the time of fabric-ca-server starting (initializing).

Upvotes: 1

Related Questions