如何在NanoServer上安装根证书

时间:2018-08-14 12:11:40

标签: powershell docker nano-server

有一些指南显示了如何执行此操作,但是它们来自前一段时间,我似乎找不到它们所指的实用程序certoc.exe。是否已从更高版本的nanoserver中删除了此文件?

https://joshuachini.com/2018/02/08/how-to-import-an-enterprise-certificate-into-a-windows-container/

https://www.ntweekly.com/2017/01/30/install-self-signed-certificate-on-windows-nano-server-2016/

https://blogs.technet.microsoft.com/nanoserver/2015/11/19/hands-on-packaging-and-installing-your-first-windows-server-apps-on-nano-server/

有人知道我在哪里可以得到这个实用程序吗?

我在这里找到了另一个小线索 https://github.com/PowerShell/CertificateDsc/issues/45

在Nano服务器中可以使用Import-Certificate命令。尽管我都找不到。

任何帮助,都会加油。

PS C:\> docker run microsoft/nanoserver:1803_KB4338819 certoc.exe
C:\Program Files\Docker\Docker\Resources\bin\docker.exe: Error response from daemon: container 3f732602c6d8fbbf9370613971a7f40993a54bc33870d3040bf5e9c2fec8969c encountered an error during CreateProcess: failure in a Windows system call: The system cannot find the file specified. (0x2) extra info: {"CommandLine":"certoc.exe","User":"ContainerUser","WorkingDirectory":"C:\\","CreateStdInPipe":true,"CreateStdOutPipe":true,"CreateStdErrPipe":true,"ConsoleSize":[0,0]}.

PS C:\> docker run -it microsoft/powershell:6.0.4-nanoserver-1803_kb4338819 certoc.exe
C:\Program Files\Docker\Docker\Resources\bin\docker.exe: Error response from daemon: container 285d821dccac930df5681e73842f8ce2bac812f361a6b9d14b00dcb4901a9141 encountered an error during CreateProcess: failure in a Windows system call: The system cannot find the file specified. (0x2) extra info: {"CommandLine":"certoc.exe","User":"ContainerUser","WorkingDirectory":"C:\\","Environment":{"PSCORE":"C:\\Program Files\\PowerShell\\pwsh.exe","ProgramFiles":"C:\\Program Files"},"EmulateConsole":true,"CreateStdInPipe":true,"CreateStdOutPipe":true,"ConsoleSize":[42,249]}.

PS C:\> docker run microsoft/powershell:6.0.4-nanoserver-1803_kb4338819 pwsh -Command "Get-Help Import-Certificate"
Get-Help : Get-Help could not find Import-Certificate in a help file in this session. To download updated help topics type: "Update-Help". To get help online, search for the help topic in the TechNet library at https://go.microsoft.com/fwlink/?LinkID=107116.

1 个答案:

答案 0 :(得分:3)

由于某些原因,

certoc.exe已从1709和1803中删除。如果要在图像上获取它,可以从microsoft/nanoserver:sac2016

获取
FROM microsoft/nanoserver:sac2016 as tool

FROM microsoft/dotnet:2.1-runtime-nanoserver-1709

COPY --from=tool /Windows/System32/certoc.exe .