RPJosh
/
authelia
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
authelia/Dockerfile

51 lines
1.3 KiB
Docker
Raw Normal View History

Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
# =======================================
# ===== Build image for the backend =====
# =======================================
build(deps): update golang docker tag to v1.16.5 (#2060) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-04 04:36:51 +00:00
FROM golang:1.16.5-alpine AS builder-backend
First commit with tests
2016-12-10 00:47:58 +00:00
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
WORKDIR /go/src/app
Fix and parallelize integration tests.
2019-11-30 16:49:52 +00:00
build: add enhanced information (#2067) This commit adjusts the build flags to include version information in the LDFLAGS using the -X options. Additionally this makes the information recorded at build time more comprehensive. All build information can now be obtained via the `authelia build` command, and the `authelia version` command is now `authelia --version`. Lastly this adjusts the Dockerfile to utilize docker cache more effectively.
2021-06-18 04:35:43 +00:00
RUN \
echo ">> Downloading required apk's..." && \
apk --no-cache add gcc musl-dev
COPY go.mod go.sum ./
RUN \
echo ">> Downloading go modules..." && \
go mod download
build: optimize docker builds (#2059) * build: optimize docker builds This change is so that each of the COPY/RUN steps occurs in a single layer which should theoretically decrease build times. * build: include license and move scripts
2021-06-06 04:46:31 +00:00
COPY / ./
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
build: add enhanced information (#2067) This commit adjusts the build flags to include version information in the LDFLAGS using the -X options. Additionally this makes the information recorded at build time more comprehensive. All build information can now be obtained via the `authelia build` command, and the `authelia version` command is now `authelia --version`. Lastly this adjusts the Dockerfile to utilize docker cache more effectively.
2021-06-18 04:35:43 +00:00
ARG LDFLAGS_EXTRA
build: optimize docker builds (#2059) * build: optimize docker builds This change is so that each of the COPY/RUN steps occurs in a single layer which should theoretically decrease build times. * build: include license and move scripts
2021-06-06 04:46:31 +00:00
# CGO_ENABLED=1 is required for building go-sqlite3
RUN \
mv public_html internal/server/public_html && \
build: add enhanced information (#2067) This commit adjusts the build flags to include version information in the LDFLAGS using the -X options. Additionally this makes the information recorded at build time more comprehensive. All build information can now be obtained via the `authelia build` command, and the `authelia version` command is now `authelia --version`. Lastly this adjusts the Dockerfile to utilize docker cache more effectively.
2021-06-18 04:35:43 +00:00
echo ">> Starting go build..." && \
GOOS=linux GOARCH=amd64 CGO_ENABLED=1 go build -tags netgo \
-ldflags "-s -w -linkmode external ${LDFLAGS_EXTRA} -extldflags -static" -trimpath -o authelia ./cmd/authelia
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
# ===================================
# ===== Authelia official image =====
# ===================================
build(deps): update alpine docker tag to v3.14.0 (#2084) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-15 23:38:02 +00:00
FROM alpine:3.14.0
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
[BUGFIX] Fix Dockerfile WORKDIR (#1392) The WORKDIR needs to be set early to ensure that the files are copied into the appropriate directory. This is a minor regression that was introduced in af2ae328e7cb810d2282ae615791cc10b840b9a9.
2020-10-19 00:24:24 +00:00
WORKDIR /app
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
[FEATURE] Container privilege de-escalation (#1370) * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * very rough draft documentation * added missing header * typo changes -> changed * Update entrypoint.sh Co-authored-by: Amir Zarrinkafsh <nightah@me.com> * Apply suggestions from code review looks good Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-10-18 23:12:21 +00:00
RUN apk --no-cache add ca-certificates su-exec tzdata
First commit with tests
2016-12-10 00:47:58 +00:00
build: optimize docker builds (#2059) * build: optimize docker builds This change is so that each of the COPY/RUN steps occurs in a single layer which should theoretically decrease build times. * build: include license and move scripts
2021-06-06 04:46:31 +00:00
COPY --from=builder-backend /go/src/app/authelia /go/src/app/LICENSE /go/src/app/entrypoint.sh /go/src/app/healthcheck.sh ./
Edit nginx configuration and add redirection during login and logout
2016-12-17 18:36:41 +00:00
Fix e2e test with minimal configuration.
2019-01-30 15:47:03 +00:00
EXPOSE 9091
Expose port 80 in the dockerfile
2017-01-12 22:27:53 +00:00
[FEATURE] Docker simplification and configuration generation (#1113) * [FEATURE] Docker simplification and configuration generation The Authelia binary now will attempt to generate configuration based on the latest template assuming that the config location specified on startup does not exist. If a file based backend is selected and the backend cannot be found similarly it will generate a `user_database.yml` based a template. This will allow more seamless bootstrapping of an environment no matter the deployment method. We have also squashed the Docker volume requirement down to just `/config` thus removing the requirement for `/var/lib/authelia` this is primarily in attempts to simplify the Docker deployment. Users with the old volume mappings have two options: 1. Change their mappings to conform to `/config` 2. Change the container entrypoint from `authelia --config /config/configuration.yml` to their old mapping * Adjust paths relative to `/etc/authelia` and simplify to single volume for compose * Add generation for file backend based user database * Refactor Docker volumes and paths to /config * Refactor Docker WORKDIR to /app * Fix integration tests * Update BREAKING.md for v4.20.0 * Run go mod tidy * Fix log_file_path in miscellaneous.md docs * Generate config and userdb with 0600 permissions * Fix log_file_path in config.template.yml
2020-06-17 06:25:35 +00:00
VOLUME /config
Use filesystem data store to save u2f meta info
2017-01-21 19:24:35 +00:00
[FEATURE] Add health checks to containers (#1425)
2020-11-05 00:59:06 +00:00
# Set environment variables
ENV PATH="/app:${PATH}" \
build: optimize docker builds (#2059) * build: optimize docker builds This change is so that each of the COPY/RUN steps occurs in a single layer which should theoretically decrease build times. * build: include license and move scripts
2021-06-06 04:46:31 +00:00
PUID=0 \
PGID=0
Add authelia directory in the PATH of docker images. (#621)
2020-02-05 23:02:18 +00:00
build: optimize docker builds (#2059) * build: optimize docker builds This change is so that each of the COPY/RUN steps occurs in a single layer which should theoretically decrease build times. * build: include license and move scripts
2021-06-06 04:46:31 +00:00
ENTRYPOINT ["/app/entrypoint.sh"]
[FEATURE] Container privilege de-escalation (#1370) * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * very rough draft documentation * added missing header * typo changes -> changed * Update entrypoint.sh Co-authored-by: Amir Zarrinkafsh <nightah@me.com> * Apply suggestions from code review looks good Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-10-18 23:12:21 +00:00
CMD ["--config", "/config/configuration.yml"]
build: optimize docker builds (#2059) * build: optimize docker builds This change is so that each of the COPY/RUN steps occurs in a single layer which should theoretically decrease build times. * build: include license and move scripts
2021-06-06 04:46:31 +00:00
HEALTHCHECK --interval=30s --timeout=3s --start-period=1m CMD /app/healthcheck.sh