Deploy API Signer as a Dockerized App

Run Fordefi's API Signer as a standalone dockerized application.

Facilitate installation of the signer by using the Docker image provided.

To use the Docker image, install a Docker container and follow these steps:

1. Log in to the Docker artifactory.

   docker login -ufordefi fordefi.jfrog.io

   The login requires a password. View your password by clicking Settings > API Signer, then View Docker Credentials.

2. Pull (or update) the Fordefi Docker image by running:

   docker pull fordefi.jfrog.io/fordefi/api-signer:latest

   If you're on an Apple Silicon Mac (M1/M2/M3/M4/M5), the default pull will fail or produce a platform-mismatch warning because the image is built only for linux/amd64. Pull it explicitly for that platform instead:

   docker pull --platform linux/amd64 fordefi.jfrog.io/fordefi/api-signer:latest

3. To start the image, run:

   docker run --rm --log-driver local --mount source=vol,destination=/storage -it fordefi.jfrog.io/fordefi/api-signer:latest

   The API Signer has three possible states:

   • Not provisioned
   • Awaiting QR scan
   • Provisioned

   In each state, the API Signer is presented with different menu items.

   To run the Docker image as a headless process, issue the following command:

   docker run --rm --log-driver local --mount source=vol,destination=/storage -d fordefi.jfrog.io/fordefi/api-signer:latest /api-signer run

4. Select Provision and press Enter.
   A QR code is displayed.

5. Do not quit the docker image.

6. Move on to Activate the API Signer.