Switched to non-root container
This commit is contained in:
parent
ed6848bc42
commit
2a42b9c19f
24
Dockerfile
24
Dockerfile
@ -1,13 +1,17 @@
|
|||||||
# Base on latest (edge) alpine image
|
# Base on latest (edge) alpine image
|
||||||
FROM harbor.ervine.dev/library/x86_64/alpine/alpine:3.12
|
FROM harbor.ervine.dev/public/x86_64/alpine:v3.12
|
||||||
|
|
||||||
MAINTAINER “Jonathan Ervine” <docker@ervine.org>
|
LABEL maintainer="Jonathan Ervine <docker@ervine.org>"
|
||||||
|
|
||||||
# Install updates
|
# Install updates
|
||||||
ENV LANG='en_US.UTF-8' \
|
ENV LANG='en_US.UTF-8' \
|
||||||
LANGUAGE='en_US.UTF-8' \
|
LANGUAGE='en_US.UTF-8' \
|
||||||
TERM='xterm' \
|
TERM='xterm' \
|
||||||
VERSION='0.2.0.1504'
|
VERSION='0.2.0.1504'
|
||||||
|
RADARR_USER='radarr' \
|
||||||
|
RADARR_GROUP='radarr' \
|
||||||
|
RADARR_UID='1003' \
|
||||||
|
RADARR_GID='1003'
|
||||||
|
|
||||||
RUN echo http://dl-4.alpinelinux.org/alpine/edge/testing >> /etc/apk/repositories && \
|
RUN echo http://dl-4.alpinelinux.org/alpine/edge/testing >> /etc/apk/repositories && \
|
||||||
apk -U update && \
|
apk -U update && \
|
||||||
@ -15,12 +19,16 @@ RUN echo http://dl-4.alpinelinux.org/alpine/edge/testing >> /etc/apk/repositorie
|
|||||||
apk -U add libmediainfo ca-certificates mono curl && \
|
apk -U add libmediainfo ca-certificates mono curl && \
|
||||||
apk del make gcc g++ && \
|
apk del make gcc g++ && \
|
||||||
rm -rf /tmp/src && \
|
rm -rf /tmp/src && \
|
||||||
rm -rf /var/cache/apk/*
|
rm -rf /var/cache/apk/* && \
|
||||||
|
curl -SL https://github.com/Radarr/Radarr/releases/download/v$VERSION/Radarr.develop.$VERSION.linux.tar.gz | tar zxv && \
|
||||||
ADD start.sh /usr/local/bin/start.sh
|
addgroup -g $RADARR_GID $RADARR_GROUP && \
|
||||||
|
adduser -D -u $RADARR_UID -G $RADARR_GROUP -H $RADARR_USER && \
|
||||||
RUN curl -SL https://github.com/Radarr/Radarr/releases/download/v$VERSION/Radarr.develop.$VERSION.linux.tar.gz | tar zxv
|
chown -R $RADARR_USER:$RADARR_GROUP /Radarr
|
||||||
|
|
||||||
EXPOSE 7878
|
EXPOSE 7878
|
||||||
|
|
||||||
CMD [ "/usr/local/bin/start.sh" ]
|
USER $RADARR_USER
|
||||||
|
|
||||||
|
WORKDIR /Radarr
|
||||||
|
|
||||||
|
CMD [ "/usr/bin/mono", "--debug", "/Radarr/Radarr.exe", "--nobrowser", "--data=/config" ]
|
||||||
|
|||||||
2
Jenkinsfile
vendored
2
Jenkinsfile
vendored
@ -27,7 +27,7 @@ spec:
|
|||||||
stage('Build with Kaniko') {
|
stage('Build with Kaniko') {
|
||||||
git url: 'ssh://git@git.ervine.org/jonny/x86_64-alpine-radarr.git', credentialsId: 'jenkins-to-git'
|
git url: 'ssh://git@git.ervine.org/jonny/x86_64-alpine-radarr.git', credentialsId: 'jenkins-to-git'
|
||||||
container('kaniko') {
|
container('kaniko') {
|
||||||
sh '/kaniko/executor -f `pwd`/Dockerfile -c `pwd` --cache=true --destination=harbor.ervine.dev/library/x86_64/alpine/radarr:0.2.0.1504 --destination=harbor.ervine.dev/library/x86_64/alpine/radarr:0.2'
|
sh '/kaniko/executor -f `pwd`/Dockerfile -c `pwd` --cache=false --destination=harbor.ervine.dev/public/x86_64/alpine/radarr:v0.2.0.1504 --destination=harbor.ervine.dev/public/x86_64/alpine/radarr:v0.2'
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user