RPJosh
/
authelia
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
authelia/Dockerfile.arm64v8

64 lines
2.0 KiB
Docker
Raw Normal View History

Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
# =======================================
# ===== Build image for the backend =====
# =======================================
build(deps): update to golang 1.16.2 explicitly (#1818)
2021-03-12 22:32:13 +00:00
FROM golang:1.16.2-alpine AS builder-backend
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
ARG BUILD_TAG
ARG BUILD_COMMIT
[Buildkite] Update musl-cross-make toolchain to gcc 9.2.0 (#703) Built using `musl-1.1.24`, `linux-headers-headers-4.19.88`
2020-03-14 11:45:55 +00:00
ARG CC_VERSION="v15"
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
Cross compile natively from amd64 Reduce reliance on QEMU in order to speed up the pipeline.
2020-01-05 11:39:56 +00:00
# gcc cross-compiler is required for building go-sqlite3
RUN apk --no-cache add curl && \
[Buildkite] Update musl-cross-make toolchain to gcc 9.2.0 (#703) Built using `musl-1.1.24`, `linux-headers-headers-4.19.88`
2020-03-14 11:45:55 +00:00
curl -Lfs -o /tmp/gcc-9.2.0-aarch64-linux-musl.tar.xz "https://github.com/just-containers/musl-cross-make/releases/download/${CC_VERSION}/gcc-9.2.0-aarch64-linux-musl.tar.xz" && \
tar xf /tmp/gcc-9.2.0-aarch64-linux-musl.tar.xz -C /
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
WORKDIR /go/src/app
Fix and parallelize integration tests.
2019-11-30 16:49:52 +00:00
[FEATURE] Docker simplification and configuration generation (#1113) * [FEATURE] Docker simplification and configuration generation The Authelia binary now will attempt to generate configuration based on the latest template assuming that the config location specified on startup does not exist. If a file based backend is selected and the backend cannot be found similarly it will generate a `user_database.yml` based a template. This will allow more seamless bootstrapping of an environment no matter the deployment method. We have also squashed the Docker volume requirement down to just `/config` thus removing the requirement for `/var/lib/authelia` this is primarily in attempts to simplify the Docker deployment. Users with the old volume mappings have two options: 1. Change their mappings to conform to `/config` 2. Change the container entrypoint from `authelia --config /config/configuration.yml` to their old mapping * Adjust paths relative to `/etc/authelia` and simplify to single volume for compose * Add generation for file backend based user database * Refactor Docker volumes and paths to /config * Refactor Docker WORKDIR to /app * Fix integration tests * Update BREAKING.md for v4.20.0 * Run go mod tidy * Fix log_file_path in miscellaneous.md docs * Generate config and userdb with 0600 permissions * Fix log_file_path in config.template.yml
2020-06-17 06:25:35 +00:00
COPY go.mod go.sum config.template.yml ./
Fix and parallelize integration tests.
2019-11-30 16:49:52 +00:00
RUN go mod download
COPY cmd cmd
COPY internal internal
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
[FEATURE] Embed static assets in Go binary (#916) * [FEATURE] Embed static assets in Go binary * Refactor/consolidate code and specify public_html via configuration * Update docs and config template for assets * Update AUR package pre-requisites and systemd unit * Include static assets as Buildkite and GitHub artifacts * Remove references to PUBLIC_DIR * Only serve assets via embedded filesystem and remove configuration references * Update authelia-scripts helper to build the embedded filesystem * Mock the embedded filesystem for unit tests Add to gitignore to ensure this isn't overwritten. * Move go:generate to satisfy linter
2020-04-28 14:07:20 +00:00
# Prepare static files to be embedded in Go binary
feat: go:embed static assets (#1733) * feat: go:embed static assets Go 1.16 introduced the ability to embed files within a generated binary directly with the go tool chain. This simplifies our dependencies and the significantly improves the development workflow for future developers. Key points to note: Due to the inability to embed files that do not reside within the local package we need to duplicate our `config.template.yml` within `internal/configuration`. To avoid issues with the development workflow empty mock files have been included within `internal/server/public_html`. These are substituted with the respective generated files during the CI/CD and build workflows. * fix(suites): increase ldap suite test timeout * fix(server): fix swagger asset CSP
2021-02-21 23:07:06 +00:00
RUN rm -rf internal/server/public_html
COPY public_html internal/server/public_html
[FEATURE] Embed static assets in Go binary (#916) * [FEATURE] Embed static assets in Go binary * Refactor/consolidate code and specify public_html via configuration * Update docs and config template for assets * Update AUR package pre-requisites and systemd unit * Include static assets as Buildkite and GitHub artifacts * Remove references to PUBLIC_DIR * Only serve assets via embedded filesystem and remove configuration references * Update authelia-scripts helper to build the embedded filesystem * Mock the embedded filesystem for unit tests Add to gitignore to ensure this isn't overwritten. * Move go:generate to satisfy linter
2020-04-28 14:07:20 +00:00
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
# Set the build version and time
RUN echo "Write tag ${BUILD_TAG} and commit ${BUILD_COMMIT} in binary." && \
Add git tag back to binary artifact.
2020-01-13 00:30:05 +00:00
sed -i "s/__BUILD_TAG__/${BUILD_TAG}/" cmd/authelia/constants.go && \
Remove build time and git tag from binary artifact. That way it's easy to build a given commit and check whether it's the same binary than the one published on Github.
2020-01-11 11:20:32 +00:00
sed -i "s/__BUILD_COMMIT__/${BUILD_COMMIT}/" cmd/authelia/constants.go
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
# CGO_ENABLED=1 is mandatory for building go-sqlite3
Reduce number of Docker layers
2020-01-11 02:35:54 +00:00
RUN cd cmd/authelia && \
[MISC] Strip debugging information from compiled binaries (#1141)
2020-06-21 11:52:35 +00:00
GOOS=linux GOARCH=arm64 CGO_ENABLED=1 CC=aarch64-linux-musl-gcc go build -tags netgo -ldflags '-s -w -linkmode external -extldflags -static' -trimpath -o authelia
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
# ===================================
# ===== Authelia official image =====
# ===================================
build(deps): update arm64v8/alpine docker tag to v3.13.4 (#1878) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-04-01 06:02:15 +00:00
FROM arm64v8/alpine:3.13.4
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
[BUGFIX] Fix Dockerfile WORKDIR (#1392) The WORKDIR needs to be set early to ensure that the files are copied into the appropriate directory. This is a minor regression that was introduced in af2ae328e7cb810d2282ae615791cc10b840b9a9.
2020-10-19 00:24:24 +00:00
WORKDIR /app
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
COPY ./qemu-aarch64-static /usr/bin/qemu-aarch64-static
[FEATURE] Container privilege de-escalation (#1370) * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * very rough draft documentation * added missing header * typo changes -> changed * Update entrypoint.sh Co-authored-by: Amir Zarrinkafsh <nightah@me.com> * Apply suggestions from code review looks good Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-10-18 23:12:21 +00:00
RUN apk --no-cache add ca-certificates su-exec tzdata && \
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
rm /usr/bin/qemu-aarch64-static
[BUGFIX] Fix Dockerfile WORKDIR (#1392) The WORKDIR needs to be set early to ensure that the files are copied into the appropriate directory. This is a minor regression that was introduced in af2ae328e7cb810d2282ae615791cc10b840b9a9.
2020-10-19 00:24:24 +00:00
COPY --from=builder-backend /go/src/app/cmd/authelia/authelia ./
[BUGFIX] Dynamically determine healthcheck URL (#1444)
2020-11-11 04:22:09 +00:00
COPY entrypoint.sh healthcheck.sh /usr/local/bin/
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
EXPOSE 9091
[FEATURE] Docker simplification and configuration generation (#1113) * [FEATURE] Docker simplification and configuration generation The Authelia binary now will attempt to generate configuration based on the latest template assuming that the config location specified on startup does not exist. If a file based backend is selected and the backend cannot be found similarly it will generate a `user_database.yml` based a template. This will allow more seamless bootstrapping of an environment no matter the deployment method. We have also squashed the Docker volume requirement down to just `/config` thus removing the requirement for `/var/lib/authelia` this is primarily in attempts to simplify the Docker deployment. Users with the old volume mappings have two options: 1. Change their mappings to conform to `/config` 2. Change the container entrypoint from `authelia --config /config/configuration.yml` to their old mapping * Adjust paths relative to `/etc/authelia` and simplify to single volume for compose * Add generation for file backend based user database * Refactor Docker volumes and paths to /config * Refactor Docker WORKDIR to /app * Fix integration tests * Update BREAKING.md for v4.20.0 * Run go mod tidy * Fix log_file_path in miscellaneous.md docs * Generate config and userdb with 0600 permissions * Fix log_file_path in config.template.yml
2020-06-17 06:25:35 +00:00
VOLUME /config
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
[FEATURE] Add health checks to containers (#1425)
2020-11-05 00:59:06 +00:00
# Set environment variables
ENV PATH="/app:${PATH}" \
PUID=0 \
PGID=0
Add authelia directory in the PATH of docker images. (#621)
2020-02-05 23:02:18 +00:00
[FEATURE] Container privilege de-escalation (#1370) * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * very rough draft documentation * added missing header * typo changes -> changed * Update entrypoint.sh Co-authored-by: Amir Zarrinkafsh <nightah@me.com> * Apply suggestions from code review looks good Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-10-18 23:12:21 +00:00
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
CMD ["--config", "/config/configuration.yml"]
[BUGFIX] Dynamically determine healthcheck URL (#1444)
2020-11-11 04:22:09 +00:00
HEALTHCHECK --interval=30s --timeout=3s --start-period=1m CMD /usr/local/bin/healthcheck.sh