* feat: use Atlantis user by default and get rid of gosu
* chore: set `DOCKER_CONTENT_TRUST=1`
* chore: fix chmod and chown
* feat: add a healthcheck to the debian and alpine images
* feat: removing setuid and setgid permissions prevents container privilege escalation and improve comments
* chore: remove setgid/setuid as we chown an entire directory
* chore: keep deps comment generic
* chore: grammar
* chore: remove redundant comment
* chore: rm DOCKER_CONTENT_TRUST
* chore: set uid and gid and remove passwd entry
* chore: revert gid and uid set as it's conflicting
---------
Co-authored-by: PePe Amengual <jose.amengual@gmail.com>
Prior to v0.22.0 the container could be run with the command `atlantis
server`. However this was broken by #2770:
```
Error: unknown command "atlantis" for "atlantis"
```
This PR reverts to previous functionality and matches the comment.
Following calls all work again:
```sh
docker run atlantis server
docker run atlantis --help
docker run atlantis atlantis server
docker run atlantis atlantis --help
```
* fix(docker): fix base image for multi-platform build (#2099)
* Correct indentation of run commands
* Split installation of packages into the ones needed at run time and build time
This allows us to now repeat the packages which need to be uninstalled again by
making use of a virtual package, which - when removed - removes the packages
installed as a dependency of it.
* Remove unnecessary `rm -rf /var/cache/apk/*` command
It's no needed when `apt add` is run with the `--no-cache` option.
* Add vertical spacing so it's clearer what is happening when
* Test the downloaded binaries to make sure they work on the platform
This can help find issues where binaries are downloaded for the wrong platform
compared to the architecture the Docker image is built for.
* Install dumb-init via apk
It's available as a package for Alpine Linux in version 1.2.5 as well, which
makes it easier to handle for the different architectures.
* Get git-lfs binaries in the right architecture for the Docker image
This makes use of the `TARGETPLATFORM` argument which automatically is
populated by Docker BuildKit with a string such as "linux/amd64" when the image
is being build for an x86_64 architecture.
* Install gosu for the right architecture
The `case` statement was taken from
https://github.com/BretFisher/multi-platform-docker-build as a way of
translating the platform name into what we needed for downloading gosu.
* fix(docker): fix installation of git-lfs in armv7 image (#2100)
This uses a similar pattern than what is used for `GOSU_ARCH` to map the
`TARGETPLATFORM` argument into the name of the architecture git-lfs use for
their release binaries, as "linux/arm/v7" otherwise would be mapped into "v7"
which is wrong.
* fix(docker): download Terraform and conftest versions maching image architecture (#2101)
* Remove Terraform versions from Docker image which don't have all archs
Terraform versions earlier than 0.11.15 does not have binaries available for
both amd64, arm64 and armv7, so are being dropped as we can't install the older
versions in all the architectures the Docker image is built for.
* Download Terraform version depending on the architecture Docker image is for
This avoids us having arm64 binaries for the ARM Docker images, which won't
work.
* Download arm64 conftest binaries for arm64 Docker image
This doesn't fix the armv7 Docker image because conftest doesn't have a binary
available for that, so it for now still downloads the x86_64 binary, which is
likely to not work - but it's the same as it did before.
* Correct path to dumb-init in docker-entrypoint.sh
The path changed after dumb-init was switched to be installed via `apk` rather
than downloaded directly as a binary.
* Adding docker image and release scripts
* Using circleci version 2
* now building dumb-init and gosu from source
* trying to fix e2e tests
* fixing working directory for circleci version 2
* start atlantis server and ngrok in the background
* Adding terraform to path and removing old decryption method for circleci
* adding terraform binary to the correct path
* ATLANTIS_URL is now being exported
* using circleci version 2 syntax to export variable
* using circleci version 2 syntax to export variable
* ngrok isnt working now
* Updating CHANGELOG
* Fixes after review and updated README.md
