luisgulo/focalboard
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
focalboard/docker/Dockerfile

39 lines
1.1 KiB
Text
Raw Normal View History

docker: fix docker file image and apply some good practices (#552) * docker: fix docker file image and apply some good practices * update docker-compose
2021-07-01 11:46:03 +02:00
### Webapp build
Pin the FROM in dockerfiles. This prevents supply chain attacks where the latest image is replaced with a malicious version. (#2302) Pinning done by using https://github.com/Jille/dockpin
2022-03-18 18:57:26 +01:00
FROM node:16.3.0@sha256:ca6daf1543242acb0ca59ff425509eab7defb9452f6ae07c156893db06c7a9a4 as nodebuild
Add Dockerfile to run service in a container Fixes #75 NOTE: At the moment, the focalboard version is hard-coded and there is a bug that means the download is not actually a .tar.gz file, but a .tgz.gz file inside a .zip file.
2021-03-17 18:07:04 +01:00
docker: fix docker file image and apply some good practices (#552) * docker: fix docker file image and apply some good practices * update docker-compose
2021-07-01 11:46:03 +02:00
WORKDIR /webapp
ADD webapp/ /webapp
Split RUN commands into two layers
2021-03-18 07:57:33 +01:00
docker: fix docker file image and apply some good practices (#552) * docker: fix docker file image and apply some good practices * update docker-compose
2021-07-01 11:46:03 +02:00
RUN npm install --no-optional && \
npm run pack
Add Dockerfile to run service in a container Fixes #75 NOTE: At the moment, the focalboard version is hard-coded and there is a bug that means the download is not actually a .tar.gz file, but a .tgz.gz file inside a .zip file.
2021-03-17 18:07:04 +01:00
docker: fix docker file image and apply some good practices (#552) * docker: fix docker file image and apply some good practices * update docker-compose
2021-07-01 11:46:03 +02:00
### Go build
Pin the FROM in dockerfiles. This prevents supply chain attacks where the latest image is replaced with a malicious version. (#2302) Pinning done by using https://github.com/Jille/dockpin
2022-03-18 18:57:26 +01:00
FROM golang:1.16.5@sha256:3ba07778b0a48cef0820fe630220089b74ac9bd06a92ac1cf7b2f1abceffcdaa as gobuild
recreate dockerfile (#168) This commit recreates the entire dockerfile for several reasons: * compile focalboard instead of downloading and extracting a tarball * it uses an alpine image and intermediate containers to obtain a much smaller image * run focalboard as user inside the container instead of root Co-authored-by: Jesús Espino <jespinog@gmail.com>
2021-04-28 16:55:29 +02:00
docker: fix docker file image and apply some good practices (#552) * docker: fix docker file image and apply some good practices * update docker-compose
2021-07-01 11:46:03 +02:00
WORKDIR /go/src/focalboard
ADD . /go/src/focalboard
recreate dockerfile (#168) This commit recreates the entire dockerfile for several reasons: * compile focalboard instead of downloading and extracting a tarball * it uses an alpine image and intermediate containers to obtain a much smaller image * run focalboard as user inside the container instead of root Co-authored-by: Jesús Espino <jespinog@gmail.com>
2021-04-28 16:55:29 +02:00
docker: fix docker file image and apply some good practices (#552) * docker: fix docker file image and apply some good practices * update docker-compose
2021-07-01 11:46:03 +02:00
RUN make server-linux
fix: fixed user nobody not owning /data (#683) Co-authored-by: Hossein <hahmadia@users.noreply.github.com> Co-authored-by: Carlos Tadeu Panato Junior <carlos@mattermost.com>
2021-07-20 15:01:02 +02:00
RUN mkdir /data
recreate dockerfile (#168) This commit recreates the entire dockerfile for several reasons: * compile focalboard instead of downloading and extracting a tarball * it uses an alpine image and intermediate containers to obtain a much smaller image * run focalboard as user inside the container instead of root Co-authored-by: Jesús Espino <jespinog@gmail.com>
2021-04-28 16:55:29 +02:00
docker: fix docker file image and apply some good practices (#552) * docker: fix docker file image and apply some good practices * update docker-compose
2021-07-01 11:46:03 +02:00
## Final image
Pin the FROM in dockerfiles. This prevents supply chain attacks where the latest image is replaced with a malicious version. (#2302) Pinning done by using https://github.com/Jille/dockpin
2022-03-18 18:57:26 +01:00
FROM gcr.io/distroless/base-debian10@sha256:d2ce069a83a6407e98c7e0844f4172565f439dab683157bf93b6de20c5b46155
recreate dockerfile (#168) This commit recreates the entire dockerfile for several reasons: * compile focalboard instead of downloading and extracting a tarball * it uses an alpine image and intermediate containers to obtain a much smaller image * run focalboard as user inside the container instead of root Co-authored-by: Jesús Espino <jespinog@gmail.com>
2021-04-28 16:55:29 +02:00
docker: fix docker file image and apply some good practices (#552) * docker: fix docker file image and apply some good practices * update docker-compose
2021-07-01 11:46:03 +02:00
WORKDIR /opt/focalboard
Add Docker volume persistence (#159) * Add persistence to the default Docker container This sets a default volume of `/data` for the Docker container. This allows for persistence when using the default SQLite database, and the option of mounting the volume to the host for backing up. * Add -v flag description Co-authored-by: Jesús Espino <jespinog@gmail.com>
2021-06-07 11:20:32 +02:00
fix: fixed user nobody not owning /data (#683) Co-authored-by: Hossein <hahmadia@users.noreply.github.com> Co-authored-by: Carlos Tadeu Panato Junior <carlos@mattermost.com>
2021-07-20 15:01:02 +02:00
COPY --from=gobuild --chown=nobody:nobody /data /data
COPY --from=nodebuild --chown=nobody:nobody /webapp/pack pack/
COPY --from=gobuild --chown=nobody:nobody /go/src/focalboard/bin/linux/focalboard-server bin/
COPY --from=gobuild --chown=nobody:nobody /go/src/focalboard/LICENSE.txt LICENSE.txt
COPY --from=gobuild --chown=nobody:nobody /go/src/focalboard/docker/server_config.json config.json
Add Dockerfile to run service in a container Fixes #75 NOTE: At the moment, the focalboard version is hard-coded and there is a bug that means the download is not actually a .tar.gz file, but a .tgz.gz file inside a .zip file.
2021-03-17 18:07:04 +01:00
docker: fix docker file image and apply some good practices (#552) * docker: fix docker file image and apply some good practices * update docker-compose
2021-07-01 11:46:03 +02:00
USER nobody
Add Dockerfile to run service in a container Fixes #75 NOTE: At the moment, the focalboard version is hard-coded and there is a bug that means the download is not actually a .tar.gz file, but a .tgz.gz file inside a .zip file.
2021-03-17 18:07:04 +01:00
docker: fix docker file image and apply some good practices (#552) * docker: fix docker file image and apply some good practices * update docker-compose
2021-07-01 11:46:03 +02:00
EXPOSE 8000/tcp
recreate dockerfile (#168) This commit recreates the entire dockerfile for several reasons: * compile focalboard instead of downloading and extracting a tarball * it uses an alpine image and intermediate containers to obtain a much smaller image * run focalboard as user inside the container instead of root Co-authored-by: Jesús Espino <jespinog@gmail.com>
2021-04-28 16:55:29 +02:00
docker: fix docker file image and apply some good practices (#552) * docker: fix docker file image and apply some good practices * update docker-compose
2021-07-01 11:46:03 +02:00
EXPOSE 8000/tcp 9092/tcp
recreate dockerfile (#168) This commit recreates the entire dockerfile for several reasons: * compile focalboard instead of downloading and extracting a tarball * it uses an alpine image and intermediate containers to obtain a much smaller image * run focalboard as user inside the container instead of root Co-authored-by: Jesús Espino <jespinog@gmail.com>
2021-04-28 16:55:29 +02:00
docker: fix docker file image and apply some good practices (#552) * docker: fix docker file image and apply some good practices * update docker-compose
2021-07-01 11:46:03 +02:00
VOLUME /data
recreate dockerfile (#168) This commit recreates the entire dockerfile for several reasons: * compile focalboard instead of downloading and extracting a tarball * it uses an alpine image and intermediate containers to obtain a much smaller image * run focalboard as user inside the container instead of root Co-authored-by: Jesús Espino <jespinog@gmail.com>
2021-04-28 16:55:29 +02:00
CMD ["/opt/focalboard/bin/focalboard-server"]
Reference in a new issue Copy permalink