RPJosh
/
authelia
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
authelia/Dockerfile

59 lines
1.6 KiB
Docker
Raw Normal View History

Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
# =======================================
# ===== Build image for the backend =====
# =======================================
Add trimpath build flag and fix go version to guarantee reproducible build. (#553)
2020-01-16 21:17:03 +00:00
FROM golang:1.13.6-alpine AS builder-backend
First commit with tests
2016-12-10 00:47:58 +00:00
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
ARG BUILD_TAG
ARG BUILD_COMMIT
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
# gcc and musl-dev are required for building go-sqlite3
RUN apk --no-cache add gcc musl-dev
WORKDIR /go/src/app
Fix and parallelize integration tests.
2019-11-30 16:49:52 +00:00
Reduce number of Docker layers
2020-01-11 02:35:54 +00:00
COPY go.mod go.sum ./
Fix and parallelize integration tests.
2019-11-30 16:49:52 +00:00
RUN go mod download
COPY cmd cmd
COPY internal internal
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
# Set the build version and time
RUN echo "Write tag ${BUILD_TAG} and commit ${BUILD_COMMIT} in binary." && \
Add git tag back to binary artifact.
2020-01-13 00:30:05 +00:00
sed -i "s/__BUILD_TAG__/${BUILD_TAG}/" cmd/authelia/constants.go && \
Remove build time and git tag from binary artifact. That way it's easy to build a given commit and check whether it's the same binary than the one published on Github.
2020-01-11 11:20:32 +00:00
sed -i "s/__BUILD_COMMIT__/${BUILD_COMMIT}/" cmd/authelia/constants.go
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 15:51:12 +00:00
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
# CGO_ENABLED=1 is mandatory for building go-sqlite3
Reduce number of Docker layers
2020-01-11 02:35:54 +00:00
RUN cd cmd/authelia && \
Add hash-password and migrate commands to authelia binary. This reduce the size of the docker image and avoid confusing users. We keep the commands in authelia-scripts too in order to keep the current workflow of developers.
2020-01-21 22:45:04 +00:00
GOOS=linux GOARCH=amd64 CGO_ENABLED=1 go build -tags netgo -ldflags '-w -linkmode external -extldflags -static' -trimpath -o authelia
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
# ========================================
# ===== Build image for the frontend =====
# ========================================
Fix and parallelize integration tests.
2019-11-30 16:49:52 +00:00
FROM node:12-alpine AS builder-frontend
First commit with tests
2016-12-10 00:47:58 +00:00
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
WORKDIR /node/src/app
Fix and parallelize integration tests.
2019-11-30 16:49:52 +00:00
COPY web .
Strengthen password in LDAP using SHA512 crypt algorithm Uses the crypt() function to do password encryption. This function handles several schemes such as: MD5, Blowfish, SHA1, SHA2. SHA-512 is used in Authelia for best security. The algorithm is fully described in https://www.akkadia.org/drepper/SHA-crypt.txt The 'crypt3' npm package has been added as a dependency to use the crypt() function. The package needs to be compiled in order to call the c function, that's why python, make and C++ compiler are installed temporarily in the Docker image.
2017-10-19 22:42:33 +00:00
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
# Install the dependencies and build
Build docker image upfront in CI and use it in integration tests. (#555) * Build docker image upfront in CI and use it in integration tests. Previously, the development workflow was broken because the container generated from Dockerfile.CI was used in dev environments but the binary was not pre-built as it is on buildkite. I propose to just remove that image and use the "to be published" image instead in integration tests. This will have several advantages: - Fix the dev workflow. - Remove CI arch from authelia-scripts build command - Optimize CI time in buildkite since we'll cache a way small artifact - We don't build authelia more than once for earch arch. * Fix suites and only build ARM images on master or tagged commits * Optimise pipeline dependencies and Kubernetes suite to utilise cache * Run unit tests and docker image build in parallel. * Fix suite trying to write on read only fs. Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-01-17 19:46:51 +00:00
RUN yarn install --frozen-lockfile && yarn build
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
# ===================================
# ===== Authelia official image =====
# ===================================
Update alpine to 3.11.3
2020-01-21 23:19:03 +00:00
FROM alpine:3.11.3
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
RUN apk --no-cache add ca-certificates tzdata
WORKDIR /usr/app
First commit with tests
2016-12-10 00:47:58 +00:00
Add hash-password and migrate commands to authelia binary. This reduce the size of the docker image and avoid confusing users. We keep the commands in authelia-scripts too in order to keep the current workflow of developers.
2020-01-21 22:45:04 +00:00
COPY --from=builder-backend /go/src/app/cmd/authelia/authelia ./
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-01 18:31:51 +00:00
COPY --from=builder-frontend /node/src/app/build public_html
Edit nginx configuration and add redirection during login and logout
2016-12-17 18:36:41 +00:00
Fix e2e test with minimal configuration.
2019-01-30 15:47:03 +00:00
EXPOSE 9091
Expose port 80 in the dockerfile
2017-01-12 22:27:53 +00:00
Fix integration test and package Travis scripts
2017-06-28 13:57:58 +00:00
VOLUME /etc/authelia
VOLUME /var/lib/authelia
Use filesystem data store to save u2f meta info
2017-01-21 19:24:35 +00:00
Remove build time and git tag from binary artifact. That way it's easy to build a given commit and check whether it's the same binary than the one published on Github.
2020-01-11 11:20:32 +00:00
CMD ["./authelia", "--config", "/etc/authelia/configuration.yml"]