Skip to content

Support for Teleport on Alpine Linux (libmusl) #35398

Open

Description

What would you like Teleport to do?

Support building Teleport for Alpine Linux.

What problem does this solve?

While most people are familiar with Alpine Linux due to its popularity as a container base image, it is a full-blown distro. It provides many of the same benefits to use-cases like hardened base images running as a virtual appliance.

Currently, Teleport's SSH service appears to build and function on an Alpine Linux host with relatively minimal effort. I was successful and only had to comment out the glibc-specific version check in metadata.go. PAM integration worked. I did not attempt BPF support beyond compiling it with the bpf build flag.

This request will likely be mostly setting up the builds. It would be acceptable to disable certain features that may be found to not work in Alpine.

Edit: a new requester has a use case where they want to use tbot on upstream Jenkins-provided alpine-based worker container images for CI/CD.

I believe a statically compiled binary would also run on alpine.

If a workaround exists, please include it.

  • While manually enrolling OpenSSH on Alpine Linux is a valid path forward for some users, Any use-case that needs to take advantage of Teleport's reverse tunnel functionality needs to run Teleport itself.

  • Third party or DIY OSS source compile, or third-party glibc package in Alpine.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    c-bmdInternal Customer Referencec-ccInternal Customer Referencec-csInternal Customer Referencefeature-requestUsed for new features in Teleport, improvements to current should be #enhancementsgoIssues related to Go builds/tooling

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions