mirror of
https://git.vectorsigma.ru/public/atlantis.git
synced 2026-07-29 14:08:20 +00:00
a55bd2cc12
* docker: bump debian baseimage version * docker: update gosu from 1.14 to 1.16 * docker: update git-lfs from 3.1.2 to 3.3.0 * docker: update curl from 7.86.0-r1 to 7.87.0-r0 * docker: update bash from 5.2.12-r0 to 5.2.15-r0 * docker: remove enclosing folder at git-lfs extraction * docker: update ca-certificates from 20220614-r2 to 20220614-r3
81 lines
3.1 KiB
Docker
81 lines
3.1 KiB
Docker
# This Dockerfile builds our base image with gosu, dumb-init and the atlantis
|
|
# user. We split this from the main Dockerfile because this base doesn't change
|
|
# and also because it kept breaking the build due to flakiness.
|
|
FROM alpine:3.17.0
|
|
LABEL authors="Anubhav Mishra, Luke Kysow"
|
|
|
|
# We use gosu to step down from root and run as the atlantis user so we need
|
|
# to create that user and group.
|
|
# We add the atlantis user to the root group and make its home directory
|
|
# owned by root so that OpenShift users can use /home/atlantis as their
|
|
# data dir because OpenShift runs containers as a random uid that's part of
|
|
# the root group.
|
|
RUN addgroup atlantis && \
|
|
adduser -S -G atlantis atlantis && \
|
|
adduser atlantis root && \
|
|
chown atlantis:root /home/atlantis/ && \
|
|
chmod g=u /home/atlantis/ && \
|
|
chmod g=u /etc/passwd
|
|
|
|
# Install gosu and git-lfs.
|
|
ENV GOSU_VERSION=1.16
|
|
ENV GIT_LFS_VERSION=3.3.0
|
|
|
|
# Automatically populated with the architecture the image is being built for.
|
|
ARG TARGETPLATFORM
|
|
|
|
# Install packages needed for running Atlantis.
|
|
RUN apk add --no-cache \
|
|
ca-certificates=20220614-r3 \
|
|
curl=7.87.0-r0 \
|
|
git=2.38.2-r0 \
|
|
unzip=6.0-r13 \
|
|
bash=5.2.15-r0 \
|
|
openssh=9.1_p1-r1 \
|
|
libcap=2.66-r0 \
|
|
dumb-init=1.2.5-r2 \
|
|
gcompat=1.1.0-r0 && \
|
|
# Install packages needed for building dependencies.
|
|
apk add --no-cache --virtual .build-deps \
|
|
gnupg=2.2.40-r0 \
|
|
openssl=3.0.7-r0 && \
|
|
mkdir -p /tmp/build && \
|
|
cd /tmp/build && \
|
|
# git-lfs
|
|
case ${TARGETPLATFORM} in \
|
|
"linux/amd64") GIT_LFS_ARCH=amd64 ;; \
|
|
"linux/arm64") GIT_LFS_ARCH=arm64 ;; \
|
|
"linux/arm/v7") GIT_LFS_ARCH=arm ;; \
|
|
esac && \
|
|
curl -L -s --output git-lfs.tar.gz "https://github.com/git-lfs/git-lfs/releases/download/v${GIT_LFS_VERSION}/git-lfs-linux-${GIT_LFS_ARCH}-v${GIT_LFS_VERSION}.tar.gz" && \
|
|
tar --strip-components=1 -xf git-lfs.tar.gz && \
|
|
chmod +x git-lfs && \
|
|
mv git-lfs /usr/bin/git-lfs && \
|
|
git-lfs --version && \
|
|
# gosu
|
|
case ${TARGETPLATFORM} in \
|
|
"linux/amd64") GOSU_ARCH=amd64 ;; \
|
|
"linux/arm64") GOSU_ARCH=arm64 ;; \
|
|
"linux/arm/v7") GOSU_ARCH=armhf ;; \
|
|
esac && \
|
|
curl -L -s --output gosu "https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${GOSU_ARCH}" && \
|
|
curl -L -s --output gosu.asc "https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${GOSU_ARCH}.asc" && \
|
|
for server in $(shuf -e ipv4.pool.sks-keyservers.net \
|
|
hkp://p80.pool.sks-keyservers.net:80 \
|
|
keyserver.ubuntu.com \
|
|
hkp://keyserver.ubuntu.com:80 \
|
|
pgp.mit.edu) ; do \
|
|
gpg --keyserver "$server" --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 && break || : ; \
|
|
done && \
|
|
gpg --batch --verify gosu.asc gosu && \
|
|
chmod +x gosu && \
|
|
cp gosu /bin && \
|
|
gosu --version && \
|
|
# Cleanup
|
|
cd /tmp && \
|
|
rm -rf /tmp/build && \
|
|
gpgconf --kill dirmngr && \
|
|
gpgconf --kill gpg-agent && \
|
|
apk del .build-deps && \
|
|
rm -rf /root/.gnupg
|