RPJosh
/
authelia
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
authelia/Dockerfile.arm64v8

68 lines
2.0 KiB
Docker
Raw Normal View History

Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
# =======================================
# ===== Build image for the backend =====
# =======================================
[MISC] (deps): Bump golang from 1.15.6-alpine to 1.15.7-alpine (#1621) Bumps golang from 1.15.6-alpine to 1.15.7-alpine. Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2021-01-21 22:34:05 +00:00
FROM golang:1.15.7-alpine AS builder-backend
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
ARG BUILD_TAG
ARG BUILD_COMMIT
[Buildkite] Update musl-cross-make toolchain to gcc 9.2.0 (#703) Built using `musl-1.1.24`, `linux-headers-headers-4.19.88`
2020-03-14 11:45:55 +00:00
ARG CC_VERSION="v15"
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
Cross compile natively from amd64 Reduce reliance on QEMU in order to speed up the pipeline.
2020-01-05 11:39:56 +00:00
# gcc cross-compiler is required for building go-sqlite3
RUN apk --no-cache add curl && \
[Buildkite] Update musl-cross-make toolchain to gcc 9.2.0 (#703) Built using `musl-1.1.24`, `linux-headers-headers-4.19.88`
2020-03-14 11:45:55 +00:00
curl -Lfs -o /tmp/gcc-9.2.0-aarch64-linux-musl.tar.xz "https://github.com/just-containers/musl-cross-make/releases/download/${CC_VERSION}/gcc-9.2.0-aarch64-linux-musl.tar.xz" && \
tar xf /tmp/gcc-9.2.0-aarch64-linux-musl.tar.xz -C /
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
WORKDIR /go/src/app
Fix and parallelize integration tests.
2019-11-30 16:49:52 +00:00
[FEATURE] Docker simplification and configuration generation (#1113) * [FEATURE] Docker simplification and configuration generation The Authelia binary now will attempt to generate configuration based on the latest template assuming that the config location specified on startup does not exist. If a file based backend is selected and the backend cannot be found similarly it will generate a `user_database.yml` based a template. This will allow more seamless bootstrapping of an environment no matter the deployment method. We have also squashed the Docker volume requirement down to just `/config` thus removing the requirement for `/var/lib/authelia` this is primarily in attempts to simplify the Docker deployment. Users with the old volume mappings have two options: 1. Change their mappings to conform to `/config` 2. Change the container entrypoint from `authelia --config /config/configuration.yml` to their old mapping * Adjust paths relative to `/etc/authelia` and simplify to single volume for compose * Add generation for file backend based user database * Refactor Docker volumes and paths to /config * Refactor Docker WORKDIR to /app * Fix integration tests * Update BREAKING.md for v4.20.0 * Run go mod tidy * Fix log_file_path in miscellaneous.md docs * Generate config and userdb with 0600 permissions * Fix log_file_path in config.template.yml
2020-06-17 06:25:35 +00:00
COPY go.mod go.sum config.template.yml ./
Fix and parallelize integration tests.
2019-11-30 16:49:52 +00:00
RUN go mod download
COPY cmd cmd
COPY internal internal
[FEATURE] Add API docs and swagger-ui (#1544) * [FEATURE] Add API docs and swagger-ui This change will serve out swagger-ui at the `/api/` root path. * Update descriptions and summaries in API spec * Utilise frontend assets from unit testing for Docker build steps * Fix tag for /api/user/* endpoints * Fix response schema for /api/user/info/2fa_method * Template and inject the session name during runtime into swagger-ui This change also factorises and renames index.go into template.go, this can now be generically utilised to template any file. * Fix integration tests * Add U2F endpoints * Change swagger directory to api This change is to more closely conform to the golang-standards project layout. * Add authentication for u2f endpoints * Modify u2f endpoint descriptions * Rename and fix u2f 2fa sign endpoints * Fix request body for /api/secondfactor/u2f/sign endpoint Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-01-03 04:28:46 +00:00
COPY public_html public_html
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
[FEATURE] Embed static assets in Go binary (#916) * [FEATURE] Embed static assets in Go binary * Refactor/consolidate code and specify public_html via configuration * Update docs and config template for assets * Update AUR package pre-requisites and systemd unit * Include static assets as Buildkite and GitHub artifacts * Remove references to PUBLIC_DIR * Only serve assets via embedded filesystem and remove configuration references * Update authelia-scripts helper to build the embedded filesystem * Mock the embedded filesystem for unit tests Add to gitignore to ensure this isn't overwritten. * Move go:generate to satisfy linter
2020-04-28 14:07:20 +00:00
# Prepare static files to be embedded in Go binary
RUN go get -u aletheia.icu/broccoli && \
[FEATURE] Docker simplification and configuration generation (#1113) * [FEATURE] Docker simplification and configuration generation The Authelia binary now will attempt to generate configuration based on the latest template assuming that the config location specified on startup does not exist. If a file based backend is selected and the backend cannot be found similarly it will generate a `user_database.yml` based a template. This will allow more seamless bootstrapping of an environment no matter the deployment method. We have also squashed the Docker volume requirement down to just `/config` thus removing the requirement for `/var/lib/authelia` this is primarily in attempts to simplify the Docker deployment. Users with the old volume mappings have two options: 1. Change their mappings to conform to `/config` 2. Change the container entrypoint from `authelia --config /config/configuration.yml` to their old mapping * Adjust paths relative to `/etc/authelia` and simplify to single volume for compose * Add generation for file backend based user database * Refactor Docker volumes and paths to /config * Refactor Docker WORKDIR to /app * Fix integration tests * Update BREAKING.md for v4.20.0 * Run go mod tidy * Fix log_file_path in miscellaneous.md docs * Generate config and userdb with 0600 permissions * Fix log_file_path in config.template.yml
2020-06-17 06:25:35 +00:00
cd internal/configuration && \
go generate . && \
cd ../server && \
[FEATURE] Embed static assets in Go binary (#916) * [FEATURE] Embed static assets in Go binary * Refactor/consolidate code and specify public_html via configuration * Update docs and config template for assets * Update AUR package pre-requisites and systemd unit * Include static assets as Buildkite and GitHub artifacts * Remove references to PUBLIC_DIR * Only serve assets via embedded filesystem and remove configuration references * Update authelia-scripts helper to build the embedded filesystem * Mock the embedded filesystem for unit tests Add to gitignore to ensure this isn't overwritten. * Move go:generate to satisfy linter
2020-04-28 14:07:20 +00:00
go generate .
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
# Set the build version and time
RUN echo "Write tag ${BUILD_TAG} and commit ${BUILD_COMMIT} in binary." && \
Add git tag back to binary artifact.
2020-01-13 00:30:05 +00:00
sed -i "s/__BUILD_TAG__/${BUILD_TAG}/" cmd/authelia/constants.go && \
Remove build time and git tag from binary artifact. That way it's easy to build a given commit and check whether it's the same binary than the one published on Github.
2020-01-11 11:20:32 +00:00
sed -i "s/__BUILD_COMMIT__/${BUILD_COMMIT}/" cmd/authelia/constants.go
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
# CGO_ENABLED=1 is mandatory for building go-sqlite3
Reduce number of Docker layers
2020-01-11 02:35:54 +00:00
RUN cd cmd/authelia && \
[MISC] Strip debugging information from compiled binaries (#1141)
2020-06-21 11:52:35 +00:00
GOOS=linux GOARCH=arm64 CGO_ENABLED=1 CC=aarch64-linux-musl-gcc go build -tags netgo -ldflags '-s -w -linkmode external -extldflags -static' -trimpath -o authelia
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
# ===================================
# ===== Authelia official image =====
# ===================================
[MISC] (deps): Bump arm64v8/alpine from 3.12.3 to 3.13.0 (#1613) Bumps arm64v8/alpine from 3.12.3 to 3.13.0. Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2021-01-18 00:28:13 +00:00
FROM arm64v8/alpine:3.13.0
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
[BUGFIX] Fix Dockerfile WORKDIR (#1392) The WORKDIR needs to be set early to ensure that the files are copied into the appropriate directory. This is a minor regression that was introduced in af2ae328e7cb810d2282ae615791cc10b840b9a9.
2020-10-19 00:24:24 +00:00
WORKDIR /app
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
COPY ./qemu-aarch64-static /usr/bin/qemu-aarch64-static
[FEATURE] Container privilege de-escalation (#1370) * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * very rough draft documentation * added missing header * typo changes -> changed * Update entrypoint.sh Co-authored-by: Amir Zarrinkafsh <nightah@me.com> * Apply suggestions from code review looks good Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-10-18 23:12:21 +00:00
RUN apk --no-cache add ca-certificates su-exec tzdata && \
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
rm /usr/bin/qemu-aarch64-static
[BUGFIX] Fix Dockerfile WORKDIR (#1392) The WORKDIR needs to be set early to ensure that the files are copied into the appropriate directory. This is a minor regression that was introduced in af2ae328e7cb810d2282ae615791cc10b840b9a9.
2020-10-19 00:24:24 +00:00
COPY --from=builder-backend /go/src/app/cmd/authelia/authelia ./
[BUGFIX] Dynamically determine healthcheck URL (#1444)
2020-11-11 04:22:09 +00:00
COPY entrypoint.sh healthcheck.sh /usr/local/bin/
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
EXPOSE 9091
[FEATURE] Docker simplification and configuration generation (#1113) * [FEATURE] Docker simplification and configuration generation The Authelia binary now will attempt to generate configuration based on the latest template assuming that the config location specified on startup does not exist. If a file based backend is selected and the backend cannot be found similarly it will generate a `user_database.yml` based a template. This will allow more seamless bootstrapping of an environment no matter the deployment method. We have also squashed the Docker volume requirement down to just `/config` thus removing the requirement for `/var/lib/authelia` this is primarily in attempts to simplify the Docker deployment. Users with the old volume mappings have two options: 1. Change their mappings to conform to `/config` 2. Change the container entrypoint from `authelia --config /config/configuration.yml` to their old mapping * Adjust paths relative to `/etc/authelia` and simplify to single volume for compose * Add generation for file backend based user database * Refactor Docker volumes and paths to /config * Refactor Docker WORKDIR to /app * Fix integration tests * Update BREAKING.md for v4.20.0 * Run go mod tidy * Fix log_file_path in miscellaneous.md docs * Generate config and userdb with 0600 permissions * Fix log_file_path in config.template.yml
2020-06-17 06:25:35 +00:00
VOLUME /config
Enable Multiarch docker builds
2019-11-07 00:59:24 +00:00
[FEATURE] Add health checks to containers (#1425)
2020-11-05 00:59:06 +00:00
# Set environment variables
ENV PATH="/app:${PATH}" \
PUID=0 \
PGID=0
Add authelia directory in the PATH of docker images. (#621)
2020-02-05 23:02:18 +00:00
[FEATURE] Container privilege de-escalation (#1370) * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * very rough draft documentation * added missing header * typo changes -> changed * Update entrypoint.sh Co-authored-by: Amir Zarrinkafsh <nightah@me.com> * Apply suggestions from code review looks good Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-10-18 23:12:21 +00:00
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
CMD ["--config", "/config/configuration.yml"]
[BUGFIX] Dynamically determine healthcheck URL (#1444)
2020-11-11 04:22:09 +00:00
HEALTHCHECK --interval=30s --timeout=3s --start-period=1m CMD /usr/local/bin/healthcheck.sh