Commit Graph

32 Commits

Author SHA1 Message Date
Teko
a55bd2cc12 chore(deps): atlantis-base: Update gosu and git-lfs (#2889)
* docker: bump debian baseimage version

* docker: update gosu from 1.14 to 1.16

* docker: update git-lfs from 3.1.2 to 3.3.0

* docker: update curl from 7.86.0-r1 to 7.87.0-r0

* docker: update bash from 5.2.12-r0 to 5.2.15-r0

* docker: remove enclosing folder at git-lfs extraction

* docker: update ca-certificates from 20220614-r2 to 20220614-r3
2022-12-29 09:38:02 -06:00
nitrocode
cd838c8785 alpine: Pin git=2.38.2-r0 (#2773) 2022-12-11 20:53:28 -06:00
nitrocode
5773945b4b Separate alpine image (#2770) 2022-12-11 20:22:51 -06:00
nitrocode
f8a2091929 Bump alpine-3.17 (#2768) 2022-12-11 00:27:03 -06:00
nitrocode
ff3f721174 Use go 1.19 (#2670)
* Use go 1.19

* docker-base: bump openssl, git, curl and fix nsswitch
2022-11-12 21:58:24 -06:00
nitrocode
072d2459a2 hadolint: base: pin all dependencies (#2587)
* hadolint: base: pin all dependencies

* atlantis-base: trigger workflow on pull_request

* atlantis-base: only push if not a pull request
2022-10-14 16:11:37 -05:00
Markus Liljedahl
b7aa71c06d Bump alpine to 3.16.2 (#2559) 2022-10-06 14:06:06 -07:00
Li Lin
1b6960a155 deps: bump alpine to v3.16.1 (#2431)
* Bump alpine to 3.16.1

* Use atlantis-base 2022.08.05
2022-08-05 18:50:17 -04:00
Jörg Herzinger
87c967d2d3 Add gcompat library to Docker base image for convenience (#2175)
Co-authored-by: Jörg Herzinger <joerg.herzinger@bytesource.net>
2022-05-13 14:25:28 -07:00
Derek Gaffney
22dec19df7 chore: update alpine base to v3.15.4 (#2202) 2022-04-19 17:10:27 -04:00
George Didok
6c2dcb589c build(deps): bump alpine base image from 3.15 to 3.15.2 (#2161)
Co-authored-by: George Didok <gdidok@oanda.com>
2022-03-24 20:11:27 -04:00
Jeppe Fihl-Pearson
19d41abc3c fix(docker): Multi-arch Docker images, attempt two (#2114)
* fix(docker): fix base image for multi-platform build (#2099)

* Correct indentation of run commands

* Split installation of packages into the ones needed at run time and build time

This allows us to now repeat the packages which need to be uninstalled again by
making use of a virtual package, which - when removed - removes the packages
installed as a dependency of it.

* Remove unnecessary `rm -rf /var/cache/apk/*` command

It's no needed when `apt add` is run with the `--no-cache` option.

* Add vertical spacing so it's clearer what is happening when

* Test the downloaded binaries to make sure they work on the platform

This can help find issues where binaries are downloaded for the wrong platform
compared to the architecture the Docker image is built for.

* Install dumb-init via apk

It's available as a package for Alpine Linux in version 1.2.5 as well, which
makes it easier to handle for the different architectures.

* Get git-lfs binaries in the right architecture for the Docker image

This makes use of the `TARGETPLATFORM` argument which automatically is
populated by Docker BuildKit with a string such as "linux/amd64" when the image
is being build for an x86_64 architecture.

* Install gosu for the right architecture

The `case` statement was taken from
https://github.com/BretFisher/multi-platform-docker-build as a way of
translating the platform name into what we needed for downloading gosu.

* fix(docker): fix installation of git-lfs in armv7 image (#2100)

This uses a similar pattern than what is used for `GOSU_ARCH` to map the
`TARGETPLATFORM` argument into the name of the architecture git-lfs use for
their release binaries, as "linux/arm/v7" otherwise would be mapped into "v7"
which is wrong.

* fix(docker): download Terraform and conftest versions maching image architecture (#2101)

* Remove Terraform versions from Docker image which don't have all archs

Terraform versions earlier than 0.11.15 does not have binaries available for
both amd64, arm64 and armv7, so are being dropped as we can't install the older
versions in all the architectures the Docker image is built for.

* Download Terraform version depending on the architecture Docker image is for

This avoids us having arm64 binaries for the ARM Docker images, which won't
work.

* Download arm64 conftest binaries for arm64 Docker image

This doesn't fix the armv7 Docker image because conftest doesn't have a binary
available for that, so it for now still downloads the x86_64 binary, which is
likely to not work - but it's the same as it did before.

* Correct path to dumb-init in docker-entrypoint.sh

The path changed after dumb-init was switched to be installed via `apk` rather
than downloaded directly as a binary.
2022-03-04 13:51:00 -05:00
rui
1b145dac27 fix(docker): fix docker runtime issue (#2106)
* debug setup

* Revert "fix(docker): download Terraform and conftest versions maching image architecture (#2101)"

This reverts commit 579e583740.

* Revert "fix(docker): fix installation of git-lfs in armv7 image (#2100)"

This reverts commit 8af78838b6.

* Revert "fix(docker): fix base image for multi-platform build (#2099)"

This reverts commit 571543fdfb.

* Revert "debug setup"

This reverts commit 274501ab6e.
2022-03-02 20:01:28 -05:00
Jeppe Fihl-Pearson
8af78838b6 fix(docker): fix installation of git-lfs in armv7 image (#2100)
This uses a similar pattern than what is used for `GOSU_ARCH` to map the
`TARGETPLATFORM` argument into the name of the architecture git-lfs use for
their release binaries, as "linux/arm/v7" otherwise would be mapped into "v7"
which is wrong.
2022-03-02 11:29:28 -05:00
Jeppe Fihl-Pearson
571543fdfb fix(docker): fix base image for multi-platform build (#2099)
* Correct indentation of run commands

* Split installation of packages into the ones needed at run time and build time

This allows us to now repeat the packages which need to be uninstalled again by
making use of a virtual package, which - when removed - removes the packages
installed as a dependency of it.

* Remove unnecessary `rm -rf /var/cache/apk/*` command

It's no needed when `apt add` is run with the `--no-cache` option.

* Add vertical spacing so it's clearer what is happening when

* Test the downloaded binaries to make sure they work on the platform

This can help find issues where binaries are downloaded for the wrong platform
compared to the architecture the Docker image is built for.

* Install dumb-init via apk

It's available as a package for Alpine Linux in version 1.2.5 as well, which
makes it easier to handle for the different architectures.

* Get git-lfs binaries in the right architecture for the Docker image

This makes use of the `TARGETPLATFORM` argument which automatically is
populated by Docker BuildKit with a string such as "linux/amd64" when the image
is being build for an x86_64 architecture.

* Install gosu for the right architecture

The `case` statement was taken from
https://github.com/BretFisher/multi-platform-docker-build as a way of
translating the platform name into what we needed for downloading gosu.
2022-03-02 11:08:03 -05:00
Artem A
b9f6718194 docker: bump git-lfs and gosu dependencies (#2096) 2022-03-01 23:40:15 -05:00
rui
649dde8404 deps: alpine 3.15 (#1941)
Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-12-15 17:07:44 -05:00
Thomas Stig Jacobsen
f2ded06e25 deps: bump alpine to 3.14 (#1770) 2021-08-30 23:21:42 -04:00
rui
9fc4f13407 workflow: automate atlantis-base image build (#1648)
* workflow: add atlantis-base image automation

* comment out path trigger

* push to ghcr.io registry

Signed-off-by: Rui Chen <rui@chenrui.dev>

* rm ` rm -rf /root/.gnupg`

```
rm: can't remove '/root/.gnupg/S.gpg-agent.extra': No such file or directory

```

* try a different cleanup fix

* use GITHUB_TOKEN for accessing ghcr.io registry

Signed-off-by: Rui Chen <rui@chenrui.dev>

* also tag latest image

Signed-off-by: Rui Chen <rui@chenrui.dev>

* only runs on master

Signed-off-by: Rui Chen <rui@chenrui.dev>

* also can be manually triggered

Signed-off-by: Rui Chen <rui@chenrui.dev>

* update date fmt `yyyy.mm.dd` for docker tag
2021-06-22 18:50:48 -04:00
rui
76270a818c deps: dumb-init 1.2.5 (#1404)
Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-02-13 13:15:33 -05:00
Josh Reichardt
bcb37253c5 deps: bump alpine to v3.13 (#1389) 2021-02-12 10:57:19 -05:00
chenrui
4b00cad792 deps: dumb-init 1.2.3 (#1298)
Signed-off-by: Rui Chen <rui@meetup.com>
2020-12-09 15:57:59 -05:00
Rob Lazzurs
db3ea7d8c0 Upgrading the base container.
Upgrading to the latest version of Alpine Linux.

This provides a few upgrades to the base libs.
2020-07-30 14:15:22 +01:00
Rob Lazzurs
cc62f4d504 Upgrading base container to latest gosu.
Upgrading the base container to the latest version release of gosu.
2020-07-06 10:28:04 +01:00
Rémi Lapeyre
f4dd828db5 Add Git LFS support (#872) 2020-03-27 12:18:15 -07:00
Luke Kysow
88d0080c27 Release 0.11.1 2020-01-22 10:46:57 -06:00
Rui Chen
38a9f71e52 Upgrade dumb-init and gosu versions 2019-08-11 16:04:14 -04:00
Luke Kysow
f6d90e643f Upgrade to alpine 3.10 2019-06-25 13:47:14 +01:00
Jeremy Olexa
8bc0988b9d Use alpine:3.9
Mitigation for CVE-2018-19486 (https://nvd.nist.gov/vuln/detail/CVE-2018-19486)
2019-03-12 11:16:27 -05:00
Thode Jocelyn
176bbd852d Allow arbitrary user to run atlantis 2018-11-26 17:49:10 +01:00
Luke Kysow
9c8c6d39e2 Update to alpine 3.8 to fix security vuln.
See https://justi.cz/security/2018/09/13/alpine-apk-rce.html
2018-09-13 15:55:06 -07:00
Luke Kysow
0de9695ee9 Fix Dockerfile base 2018-07-24 16:56:49 +02:00