mirror of
https://git.vectorsigma.ru/public/atlantis.git
synced 2026-07-28 22:48:21 +00:00
19d41abc3c
* fix(docker): fix base image for multi-platform build (#2099) * Correct indentation of run commands * Split installation of packages into the ones needed at run time and build time This allows us to now repeat the packages which need to be uninstalled again by making use of a virtual package, which - when removed - removes the packages installed as a dependency of it. * Remove unnecessary `rm -rf /var/cache/apk/*` command It's no needed when `apt add` is run with the `--no-cache` option. * Add vertical spacing so it's clearer what is happening when * Test the downloaded binaries to make sure they work on the platform This can help find issues where binaries are downloaded for the wrong platform compared to the architecture the Docker image is built for. * Install dumb-init via apk It's available as a package for Alpine Linux in version 1.2.5 as well, which makes it easier to handle for the different architectures. * Get git-lfs binaries in the right architecture for the Docker image This makes use of the `TARGETPLATFORM` argument which automatically is populated by Docker BuildKit with a string such as "linux/amd64" when the image is being build for an x86_64 architecture. * Install gosu for the right architecture The `case` statement was taken from https://github.com/BretFisher/multi-platform-docker-build as a way of translating the platform name into what we needed for downloading gosu. * fix(docker): fix installation of git-lfs in armv7 image (#2100) This uses a similar pattern than what is used for `GOSU_ARCH` to map the `TARGETPLATFORM` argument into the name of the architecture git-lfs use for their release binaries, as "linux/arm/v7" otherwise would be mapped into "v7" which is wrong. * fix(docker): download Terraform and conftest versions maching image architecture (#2101) * Remove Terraform versions from Docker image which don't have all archs Terraform versions earlier than 0.11.15 does not have binaries available for both amd64, arm64 and armv7, so are being dropped as we can't install the older versions in all the architectures the Docker image is built for. * Download Terraform version depending on the architecture Docker image is for This avoids us having arm64 binaries for the ARM Docker images, which won't work. * Download arm64 conftest binaries for arm64 Docker image This doesn't fix the armv7 Docker image because conftest doesn't have a binary available for that, so it for now still downloads the x86_64 binary, which is likely to not work - but it's the same as it did before. * Correct path to dumb-init in docker-entrypoint.sh The path changed after dumb-init was switched to be installed via `apk` rather than downloaded directly as a binary.
47 lines
1.9 KiB
Bash
Executable File
47 lines
1.9 KiB
Bash
Executable File
#!/usr/bin/dumb-init /bin/sh
|
|
set -e
|
|
|
|
# Modified: https://github.com/hashicorp/docker-consul/blob/2c2873f9d619220d1eef0bc46ec78443f55a10b5/0.X/docker-entrypoint.sh
|
|
|
|
# If the user is trying to run atlantis directly with some arguments, then
|
|
# pass them to atlantis.
|
|
if [ "${1:0:1}" = '-' ]; then
|
|
set -- atlantis "$@"
|
|
fi
|
|
|
|
# If the user is running an atlantis subcommand (ex. server) then we want to prepend
|
|
# atlantis as the first arg to exec. To detect if they're running a subcommand
|
|
# we take the potential subcommand and run it through atlantis help {subcommand}.
|
|
# If the output contains "atlantis subcommand" then we know it's a subcommand
|
|
# since the help output contains that string. For anything else (ex. sh)
|
|
# it won't contain that string.
|
|
# NOTE: We use grep instead of the exit code since help always returns 0.
|
|
if atlantis help "$1" 2>&1 | grep -q "atlantis $1"; then
|
|
# We can't use the return code to check for the existence of a subcommand, so
|
|
# we have to use grep to look for a pattern in the help output.
|
|
set -- atlantis "$@"
|
|
fi
|
|
|
|
# If the current uid running does not have a user create one in /etc/passwd
|
|
if ! whoami &> /dev/null; then
|
|
if [ -w /etc/passwd ]; then
|
|
echo "${USER_NAME:-default}:x:$(id -u):0:${USER_NAME:-default} user:/home/atlantis:/sbin/nologin" >> /etc/passwd
|
|
fi
|
|
fi
|
|
|
|
# If we're running as root and we're trying to execute atlantis then we use
|
|
# gosu to step down from root and run as the atlantis user.
|
|
# In OpenShift, containers are run as a random users so we don't need to use gosu.
|
|
if [[ $(id -u) == 0 ]] && [[ "$1" = 'atlantis' ]]; then
|
|
# If requested, set the capability to bind to privileged ports before
|
|
# we drop to the non-root user. Note that this doesn't work with all
|
|
# storage drivers (it won't work with AUFS).
|
|
if [ ! -z ${ATLANTIS_ALLOW_PRIVILEGED_PORTS+x} ]; then
|
|
setcap "cap_net_bind_service=+ep" /bin/atlantis
|
|
fi
|
|
|
|
set -- gosu atlantis "$@"
|
|
fi
|
|
|
|
exec "$@"
|