Setup a Simple Home HCP Boundary Lab

Setup a Simple Home HCP Boundary Lab

With the new release of HCP 0.12.1



Steps Build Boundary Docker Worker

Create a root folder for your HCP Boundary Docker, inside that folder create the following docker-compose.yml and volume file structure.

Step 1

Create an HCP Boundary Cloud Account

  1. Once HCP Boundary has been deployed, log into the Admin Portal and click on WORKERS, grab one of the IP address from one of the 3 workers deployed

  2. Create the configuration file and input that IP Address/FQDN:9202

cat > config/boundary/config/config.hcl << EOF
disable_mlock = true

listener "tcp" {
  address = ""
  purpose = "proxy"

worker {
  initial_upstreams = [""]
  auth_storage_path = "/boundary-hcp-worker/file/worker2"
  tags {
    type = ["worker3", "homelab"]


Step 2: Deploy the docker environment.

  1. Start your environment.
docker-compose up -d
  1. When the docker is online, grab the worker token.


  1. Next, in your CLI export the token
export WORKER_TOKEN=<insert>
  1. Log into boundary using the cli, set an export for boundary_addr to your own HCP.
export BOUNDARY_ADDR=<insert>
  1. Authenticate to boundary with your admin username and password
boundary authenticate
  1. Execute the following command to create a boundary worker in HCP Boundary
boundary workers create worker-led -worker-generated-auth-token=$WORKER_TOKEN

Now if you log into your HCP Boundary Worker section you will see ur worker get created.

Step 3: Deploy the Setup Script

Since we are deploying this locally on your machine or pc we will need your IP address. So for now edit the and add your IP address of your machine.

  1. Edit the export HOSTIP=
chmod +x ./
  1. Execute the command to do the configuration.

Step 5: Test it out

You should already be authenticate, but you can authenticate again.

export BOUNDARY_ADDR=<insert>
boundary authenticate

Execute SSH injection command

boundary connect ssh -target-name="Linux" -target-scope-name="Docker Servers"

Execute Kube connection

boundary connect kube -target-name="K8s" -target-scope-name="Docker K8s" -- get pods -A

Postgres Brokering

boundary connect postgres -target-name="Postgres DB" -target-scope-name="Docker DB" --dbname database

How to Destroy Your Environment

To clean up your environment run the following script

  1. chmod +x ./

  2. Execute ./

Did you find this article valuable?

Support Sebastian Maniak by becoming a sponsor. Any amount is appreciated!