tested on authentik server installed via community script (proxmox)

Authentik_RAC_Outpost_Installation.md

Authentik RAC Outpost Installation

Install Docker

apt update
apt install -y ca-certificates curl gnupg lsb-release
install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
chmod a+r /etc/apt/keyrings/docker.gpg
echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian $(. /etc/os-release && echo $VERSION_CODENAME) stable" > /etc/apt/sources.list.d/docker.list
apt update
apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
systemctl enable --now docker
docker version
docker ps

Authentik

• Create Docker Service Connection:
  • Name: local-docker
  • Docker URL: unix:///var/run/docker.sock

usermod -aG docker authentik
systemctl restart authentik-server
systemctl restart authentik-worker
runuser -u authentik -- docker ps

Refresh until the integration is Healthy.

Edit the SSH Outpost and select local-docker as the Integration.

Verify

docker ps -a
docker logs -f ak-outpost-ssh
journalctl -u authentik-worker -f

Expected:

• Docker integration: Healthy
• RAC container: ghcr.io/goauthentik/rac:2026.5.6
• Container name: ak-outpost-ssh
• Status: Up (healthy)