Base
Hardened build
minimal ports, security patches applied at build time
Hockeypuck OpenPGP Keyserver on Ubuntu 24.04 LTS
Azure
Security
Hockeypuck is an OpenPGP public keyserver that stores and serves PGP public keys over the HKP protocol.
Overview
Hockeypuck is a keyserver for the OpenPGP web of trust. It accepts PGP public key submissions and answers lookups over the HKP protocol that gpg and other OpenPGP tools speak natively, so people and services can publish their public keys and find each other's, by user id, key id or full fingerprint, from a browser or straight from the command line.
Run as your own keyserver, it gives an organisation or community a place to distribute and retrieve public keys without depending on the wider public keyserver network. It is compatible with the SKS reconciliation protocol, so it can either stand alone as a private directory or, once you choose to, join a pool of peers and gossip keys with them.
Why the cloudimg image
cloudimg ships Hockeypuck as a complete, working keyserver rather than a stack to assemble. The image bundles its PostgreSQL key store on the same instance, wired and migrated, so the HKP query and submit interface answers real requests the moment first boot finishes, proven by a real key that is submitted and then retrieved by fingerprint before the image is ever published. The keyserver interface is public by design, but everything that should not be is locked down: PostgreSQL and the Prometheus metrics endpoint are bound to the loopback only with no public port, the database role password is generated uniquely on first boot and no credential ships in the image, and the appliance starts isolated from the public gossip pool with anti abuse key size limits and submission rate limiting in place. Every deployment is paired with a step by step deploy guide, backed by 24/7 cloudimg support.
Common uses
- Private organisational keyserver
- OpenPGP public key distribution
- HKP key lookup and submission
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
2F
2FAuth on Ubuntu 24.04 LTS
Security
2FAuth is a free, open source, self hosted web app for managing your two factor authentication accounts.
Ad
acme-dns on Ubuntu 24.04 LTS
Security
The image installs acme-dns 2.0.2 from the official upstream release (github.com/acme-dns/acme-dns, the project formerly...
addy.io on Ubuntu 24.04
Security
Mail sent to an alias is forwarded to your real inbox, and you can reply from the alias so the other side never learns w...
AliasVault on Ubuntu 24.04
Security
AliasVault is an open source, end to end encrypted password manager combined with a private email alias service that you...
Apache SpamAssassin
Security
This image runs Apache SpamAssassin, the long established open source anti spam platform, fully configured and security ...
Apache Syncope on Ubuntu 24.04
Security
Apache Syncope is an open source identity management and identity governance platform.