System requirements for Conjur Server

This topic describes the system requirements for a Conjur Server Docker Image.

Hardware requirements

The following table describes the minimum requirements for the Conjur Server host machine (Leader, Standbys, and Followers):

Environment

Description

Production

  • 4 core x86_64 processors

  • 16 GB memory

  • 50 GB disk space

Development

  • 2 core x86_64 processors

  • 4 GB memory

  • 20 GB disk space
Proof-of-concept (POC) deployments using auto-failover must use the production requirements. The development requirements are sufficient for tests of the API and Conjur CLI.

Supported operating systems

Conjur Enterprise on Docker runs natively on most Linux distributions. For more information, see the Docker documentation.

Conjur Enterprise on Podman: See the Podman installation documentation for supported versions. We recommend RHEL 8.x with a supported version of Podman.

Supported container platforms

Platform Version

Docker

Supports Leader, Standbys, and Followers

  • Version 20.10 or later

  • Mirantis Container Runtime (MCR) (previously known as Docker Enterprise Edition) v20.10 on RHEL 8.x

For more information, see Docker container requirements.

Kubernetes and OpenShift

Supports Followers only. For details about which container platform versions are supported, see Supported Kubernetes-based environments.

Podman

Supports Leader, Standbys, and Followers

Versions 3.4, 4.2

 

  • Although it is provided as a Docker container, the Conjur Server cannot be deployed as a Leader or a Standby on container orchestration platforms such as Kubernetes. Direct use of the Docker Engine is the only supported runtime platform.

  • Podman is CLI-compatible with the Docker CLI. You can configure alias docker=podman for the shell that sets up the Conjur Server. This way, all the docker commands can be used when working with Podman.

    Alternatively, you can manually replace docker in each command with podman.

    All references to Docker in this document apply to Podman as well.