Skip to content
Rewrite of kms-encryption-toolbox's decrypt-and-start in Go
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.
test Docker entry-point: decrypt-and-start Jul 1, 2019
LICENSE Docker entry-point: decrypt-and-start Jul 1, 2019


This project began as a shell script to invoke the kms-encryption decrypt on the variables in the environment, looking for anything with a prefix of "decrypt:", decrypting it using AWS KMS using the instance's profile, and exporting the decrypted value back to the environment before exec to the next command.

This is used as a Docker entrypoint for containers to be able to decrypt encrypted environment variables passed into it.


This project is a replacement for the ApplauseOSS/kms-encryption-toolbox supplied shell script, decrypt-and-start.

You can’t perform that action at this time.