Skip to content

Instantly share code, notes, and snippets.

@avoidik
Last active December 29, 2022 17:30
Show Gist options
  • Save avoidik/afae607ce7db69e7a4a8d943a744821d to your computer and use it in GitHub Desktop.
Save avoidik/afae607ce7db69e7a4a8d943a744821d to your computer and use it in GitHub Desktop.
Install Step CLI & CA on Raspberry PI

Install Step CLI & CA on Raspberry PI

Steps

Install Step CLI

Download

curl -fsSLO https://github.com/smallstep/cli/releases/download/v0.23.0/step_linux_0.23.0_armv7.tar.gz

Check content

$ tar -tf step_linux_0.23.0_armv7.tar.gz
step_0.23.0/LICENSE
step_0.23.0/README.md
step_0.23.0/autocomplete/README.md
step_0.23.0/autocomplete/bash_autocomplete
step_0.23.0/autocomplete/zsh_autocomplete
step_0.23.0/bin/step

Extract only necessary binaries and change ownership

sudo tar -zxf step_linux_0.23.0_armv7.tar.gz --strip-components=2 -C /usr/local/bin step_0.23.0/bin/step
sudo chown root:root /usr/local/bin/step
sudo chmod +x /usr/local/bin/step

Install Step CA

Download

curl -fsSLO https://github.com/smallstep/certificates/releases/download/v0.23.0/step-ca_linux_0.23.0_armv7.tar.gz

Check what is inside

$ tar -tf step-ca_linux_0.23.0_armv7.tar.gz
step-ca_0.23.0/LICENSE
step-ca_0.23.0/README.md
step-ca_0.23.0/step-ca

Extract only necessary binaries and change ownership

sudo tar -zxf step-ca_linux_0.23.0_armv7.tar.gz --strip-components=2 -C /usr/local/bin step-ca_0.23.0/step-ca
sudo chown root:root /usr/local/bin/step-ca
sudo setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/step-ca
sudo chmod +x /usr/local/bin/step-ca

Install Step CA with PKCS support

We will need to build it from the source code

Install golang first

curl -fsSLO https://go.dev/dl/go1.19.4.linux-armv6l.tar.gz
sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.19.4.linux-armv6l.tar.gz
export PATH=$PATH:/usr/local/go/bin

Now download source code and compile

curl -fsSLO https://github.com/smallstep/certificates/releases/download/v0.23.0/step-ca_0.23.0.tar.gz
mkdir step-ca
tar -zxf step-ca_0.23.0.tar.gz -C step-ca
cd step-ca
sudo apt-get install -y libpcsclite-dev gcc make pkg-config
make bootstrap && make build GOFLAGS=""
sudo cp bin/step-ca /usr/local/bin
sudo chown root:root /usr/local/bin/step-ca
sudo setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/step-ca
sudo chmod +x /usr/local/bin/step-ca
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment