Docker Images

This page helps you configure the CYBERTEC PostgreSQL Enterprise Edition (PGEE) Docker images.

Sections:

Public PGEE Demo Images
Full PGEE Image
Available Docker Image Tags
Using the PGEE Docker Images
Configure a TDE Custom Key
Get TDE Key from Vault
Enable plpgsql_sec
Documentation

Public PGEE Demo Images

Free to use, limited to 1 GB per table

Docker image name: cybertecpostgresql/postgresql-ee-demo

Full PGEE Image

Unlimited version - contact CYBERTEC for a quote

Docker image name: cybertecpostgresql/postgresql-ee

Available Docker Image Tags

The PGEE Docker images exist for PostgreSQL major versions 18, 17, 16, 15, 14, 13.

Public demo images:

cybertecpostgresql/postgresql-ee-demo:18
cybertecpostgresql/postgresql-ee-demo:17
cybertecpostgresql/postgresql-ee-demo:16
cybertecpostgresql/postgresql-ee-demo:15
cybertecpostgresql/postgresql-ee-demo:14
cybertecpostgresql/postgresql-ee-demo:13

Full PGEE images:

cybertecpostgresql/postgresql-ee:18
cybertecpostgresql/postgresql-ee:17
cybertecpostgresql/postgresql-ee:16
cybertecpostgresql/postgresql-ee:15
cybertecpostgresql/postgresql-ee:14
cybertecpostgresql/postgresql-ee:13

Using the PGEE Docker Images

docker pull cybertecpostgresql/postgresql-ee-demo:18

docker run \
  -v /path/to/pgdata:/var/lib/postgresql \
  -p 5432:5432 \
  -e POSTGRES_PASSWORD=foo \
  cybertecpostgresql/postgresql-ee-demo:18

psql -h localhost -U postgres

Configure a TDE Custom Key

docker run \
  -v /path/to/pgdata:/var/lib/postgresql \
  -p 5432:5432 \
  -e POSTGRES_PASSWORD=foo \
  -e KEY=332e7900707464cd1d7b1b9724d11439 \
  -e ENCRYPTION_KEY_COMMAND='echo $KEY' \
  cybertecpostgresql/postgresql-ee-demo:18

Get TDE Key from Vault

docker run \
  -v /path/to/pgdata:/var/lib/postgresql \
  -p 5432:5432 \
  -e POSTGRES_PASSWORD=foo \
  -e VAULT_ADDR="http://172.17.0.1:8200" \
  -e VAULT_TOKEN="vault-token-goes-here" \
  -e ENCRYPTION_KEY_COMMAND="pgee_key_manager -vault -vault-mount secret -vault-path pgee" \
  cybertecpostgresql/postgresql-ee-demo:18

PGEE can use pgee_key_manager to retrieve the TDE key from a Vault. Inputs required are:

Vault address (http:// or https://)
Vault token
Vault path. If secret is stored at secret/data/pgee, use -vault-mount secret and -vault-path pgee, the /data/ part is implicit.

pgee_key_manager understands the Vault environment variables from the Vault CLI documentation.

Enable plpgsql_sec

docker run \
  -v /path/to/pgdata:/var/lib/postgresql \
  -p 5432:5432 \
  -e POSTGRES_PASSWORD=foo \
  -e SHARED_PRELOAD_LIBRARIES=plpgsql_sec \
  -e PLPGSQL_SEC_PASSWORD=foo \
  cybertecpostgresql/postgresql-ee-demo:18