RPJosh
/
authelia
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
authelia/Dockerfile

58 lines
1.6 KiB
Docker
Raw Normal View History

Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
# =======================================
# ===== Build image for the backend =====
# =======================================
build(deps): update to golang 1.16.2 explicitly (#1818)
2021-03-12 22:32:13 +00:00
FROM golang:1.16.2-alpine AS builder-backend
First commit with tests
2016-12-10 00:47:58 +00:00
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
ARG BUILD_TAG
ARG BUILD_COMMIT
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
# gcc and musl-dev are required for building go-sqlite3
RUN apk --no-cache add gcc musl-dev
WORKDIR /go/src/app
Fix and parallelize integration tests.
2019-11-30 16:49:52 +00:00
[FEATURE] Docker simplification and configuration generation (#1113) * [FEATURE] Docker simplification and configuration generation The Authelia binary now will attempt to generate configuration based on the latest template assuming that the config location specified on startup does not exist. If a file based backend is selected and the backend cannot be found similarly it will generate a `user_database.yml` based a template. This will allow more seamless bootstrapping of an environment no matter the deployment method. We have also squashed the Docker volume requirement down to just `/config` thus removing the requirement for `/var/lib/authelia` this is primarily in attempts to simplify the Docker deployment. Users with the old volume mappings have two options: 1. Change their mappings to conform to `/config` 2. Change the container entrypoint from `authelia --config /config/configuration.yml` to their old mapping * Adjust paths relative to `/etc/authelia` and simplify to single volume for compose * Add generation for file backend based user database * Refactor Docker volumes and paths to /config * Refactor Docker WORKDIR to /app * Fix integration tests * Update BREAKING.md for v4.20.0 * Run go mod tidy * Fix log_file_path in miscellaneous.md docs * Generate config and userdb with 0600 permissions * Fix log_file_path in config.template.yml
2020-06-17 06:25:35 +00:00
COPY go.mod go.sum config.template.yml ./
Fix and parallelize integration tests.
2019-11-30 16:49:52 +00:00
RUN go mod download
COPY cmd cmd
COPY internal internal
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
[FEATURE] Embed static assets in Go binary (#916) * [FEATURE] Embed static assets in Go binary * Refactor/consolidate code and specify public_html via configuration * Update docs and config template for assets * Update AUR package pre-requisites and systemd unit * Include static assets as Buildkite and GitHub artifacts * Remove references to PUBLIC_DIR * Only serve assets via embedded filesystem and remove configuration references * Update authelia-scripts helper to build the embedded filesystem * Mock the embedded filesystem for unit tests Add to gitignore to ensure this isn't overwritten. * Move go:generate to satisfy linter
2020-04-28 14:07:20 +00:00
# Prepare static files to be embedded in Go binary
feat: go:embed static assets (#1733) * feat: go:embed static assets Go 1.16 introduced the ability to embed files within a generated binary directly with the go tool chain. This simplifies our dependencies and the significantly improves the development workflow for future developers. Key points to note: Due to the inability to embed files that do not reside within the local package we need to duplicate our `config.template.yml` within `internal/configuration`. To avoid issues with the development workflow empty mock files have been included within `internal/server/public_html`. These are substituted with the respective generated files during the CI/CD and build workflows. * fix(suites): increase ldap suite test timeout * fix(server): fix swagger asset CSP
2021-02-21 23:07:06 +00:00
RUN rm -rf internal/server/public_html
COPY public_html internal/server/public_html
[FEATURE] Embed static assets in Go binary (#916) * [FEATURE] Embed static assets in Go binary * Refactor/consolidate code and specify public_html via configuration * Update docs and config template for assets * Update AUR package pre-requisites and systemd unit * Include static assets as Buildkite and GitHub artifacts * Remove references to PUBLIC_DIR * Only serve assets via embedded filesystem and remove configuration references * Update authelia-scripts helper to build the embedded filesystem * Mock the embedded filesystem for unit tests Add to gitignore to ensure this isn't overwritten. * Move go:generate to satisfy linter
2020-04-28 14:07:20 +00:00
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
# Set the build version and time
RUN echo "Write tag ${BUILD_TAG} and commit ${BUILD_COMMIT} in binary." && \
Add git tag back to binary artifact.
2020-01-13 00:30:05 +00:00
sed -i "s/__BUILD_TAG__/${BUILD_TAG}/" cmd/authelia/constants.go && \
Remove build time and git tag from binary artifact. That way it's easy to build a given commit and check whether it's the same binary than the one published on Github.
2020-01-11 11:20:32 +00:00
sed -i "s/__BUILD_COMMIT__/${BUILD_COMMIT}/" cmd/authelia/constants.go
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
# CGO_ENABLED=1 is mandatory for building go-sqlite3
Reduce number of Docker layers
2020-01-11 02:35:54 +00:00
RUN cd cmd/authelia && \
[MISC] Strip debugging information from compiled binaries (#1141)
2020-06-21 11:52:35 +00:00
GOOS=linux GOARCH=amd64 CGO_ENABLED=1 go build -tags netgo -ldflags '-s -w -linkmode external -extldflags -static' -trimpath -o authelia
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
# ===================================
# ===== Authelia official image =====
# ===================================
build(deps): update alpine docker tag to v3.13.4 (#1877) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-04-01 01:47:51 +00:00
FROM alpine:3.13.4
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
[BUGFIX] Fix Dockerfile WORKDIR (#1392) The WORKDIR needs to be set early to ensure that the files are copied into the appropriate directory. This is a minor regression that was introduced in af2ae328e7cb810d2282ae615791cc10b840b9a9.
2020-10-19 00:24:24 +00:00
WORKDIR /app
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
[FEATURE] Container privilege de-escalation (#1370) * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * very rough draft documentation * added missing header * typo changes -> changed * Update entrypoint.sh Co-authored-by: Amir Zarrinkafsh <nightah@me.com> * Apply suggestions from code review looks good Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-10-18 23:12:21 +00:00
RUN apk --no-cache add ca-certificates su-exec tzdata
First commit with tests
2016-12-10 00:47:58 +00:00
[BUGFIX] Fix Dockerfile WORKDIR (#1392) The WORKDIR needs to be set early to ensure that the files are copied into the appropriate directory. This is a minor regression that was introduced in af2ae328e7cb810d2282ae615791cc10b840b9a9.
2020-10-19 00:24:24 +00:00
COPY --from=builder-backend /go/src/app/cmd/authelia/authelia ./
[BUGFIX] Dynamically determine healthcheck URL (#1444)
2020-11-11 04:22:09 +00:00
COPY entrypoint.sh healthcheck.sh /usr/local/bin/
Edit nginx configuration and add redirection during login and logout
2016-12-17 18:36:41 +00:00
Fix e2e test with minimal configuration.
2019-01-30 15:47:03 +00:00
EXPOSE 9091
Expose port 80 in the dockerfile
2017-01-12 22:27:53 +00:00
[FEATURE] Docker simplification and configuration generation (#1113) * [FEATURE] Docker simplification and configuration generation The Authelia binary now will attempt to generate configuration based on the latest template assuming that the config location specified on startup does not exist. If a file based backend is selected and the backend cannot be found similarly it will generate a `user_database.yml` based a template. This will allow more seamless bootstrapping of an environment no matter the deployment method. We have also squashed the Docker volume requirement down to just `/config` thus removing the requirement for `/var/lib/authelia` this is primarily in attempts to simplify the Docker deployment. Users with the old volume mappings have two options: 1. Change their mappings to conform to `/config` 2. Change the container entrypoint from `authelia --config /config/configuration.yml` to their old mapping * Adjust paths relative to `/etc/authelia` and simplify to single volume for compose * Add generation for file backend based user database * Refactor Docker volumes and paths to /config * Refactor Docker WORKDIR to /app * Fix integration tests * Update BREAKING.md for v4.20.0 * Run go mod tidy * Fix log_file_path in miscellaneous.md docs * Generate config and userdb with 0600 permissions * Fix log_file_path in config.template.yml
2020-06-17 06:25:35 +00:00
VOLUME /config
Use filesystem data store to save u2f meta info
2017-01-21 19:24:35 +00:00
[FEATURE] Add health checks to containers (#1425)
2020-11-05 00:59:06 +00:00
# Set environment variables
ENV PATH="/app:${PATH}" \
PUID=0 \
PGID=0
Add authelia directory in the PATH of docker images. (#621)
2020-02-05 23:02:18 +00:00
[FEATURE] Container privilege de-escalation (#1370) * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * very rough draft documentation * added missing header * typo changes -> changed * Update entrypoint.sh Co-authored-by: Amir Zarrinkafsh <nightah@me.com> * Apply suggestions from code review looks good Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-10-18 23:12:21 +00:00
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
CMD ["--config", "/config/configuration.yml"]
[BUGFIX] Dynamically determine healthcheck URL (#1444)
2020-11-11 04:22:09 +00:00
HEALTHCHECK --interval=30s --timeout=3s --start-period=1m CMD /usr/local/bin/healthcheck.sh