Matthew Baggett
6db6395f66
* linting is fun * mis-detection of missing healthcheck staements. * typo * disable tagging vanity tags on non-main branch * Unbugger node build? * Add gitleaks detector, remove an expired secret. * More linting-derived cleanup * Fiddle with trivy * Fiddle with trivy * add a readme * Fix build bug with php flavours * Marshall should build other flavours of ubuntu. * Fiddle with act cache location. * Add concurrency checks * Composer version gubbins for 7.0/7.1 * ubuntu is just a label, and injected over the top of. * Composer version gubbins for 7.0/7.1 * Run when workflow is altered too please. * Hopefully fix composer stage. * setup tooling meta-tooling. * Add trunk * Disable mirror mode, its being problematic, and increase retries to 5. * Revisit how ghcr login works. * Add trunk checks. * All hail the linter * Heavilly revise workflow * Fettling * Fettling * Fettling * Fettling * Fettling * Cleanup * Cleanup * Fettling.. Why does mitm build but not redis? * Fettling.. Why does mitm build but not redis? * Debuggin * Fettling. * Fix build? * Permissions are a pain * Switch around some should_push logic because envs aren't available that early. * Permissionssssss * Trivy, bane of my life * Fix merge? * Fix labels * Help node along, among other things * Redis 6.1 & 7.1 aren't a thing any more. * Ffff USER nonsense * latest-openssl doesn't exist. * fixup mysqlproxy. * Fix labels * uurrgh * uurrgh * Didn't need to add the mitmproxy user, it exists * Missing ghcr login * Missing backtick * Fix build? * Add validate build step to bouncer. * Fix bouncer build * Disable laravel build * Missing env * Fix swarm mon build * Scout just doesn't seem to work.
34 lines
1.1 KiB
Docker
34 lines
1.1 KiB
Docker
# checkov:skip=CKV_DOCKER_3 user cannot be determined at this stage.
|
|
FROM ubuntu:version
|
|
|
|
LABEL maintainer="Matthew Baggett <matthew@baggett.me>" \
|
|
org.label-schema.vcs-url="https://github.com/benzine-framework/docker" \
|
|
org.opencontainers.image.source="https://github.com/benzine-framework/docker"
|
|
|
|
ARG MARSHALL_VERSION
|
|
ARG MARSHALL_BUILD_DATE
|
|
ARG MARSHALL_BUILD_HOST
|
|
ENV DEBIAN_FRONTEND="teletype" \
|
|
TERM=xterm-256color \
|
|
DEFAULT_TZ='Europe/London' \
|
|
MARSHALL_VERSION=${MARSHALL_VERSION} \
|
|
MARSHALL_BUILD_DATE=${MARSHALL_BUILD_DATE} \
|
|
MARSHALL_BUILD_HOST=${MARSHALL_BUILD_HOST}
|
|
|
|
WORKDIR /app
|
|
SHELL ["/bin/bash", "-o", "pipefail", "-c"]
|
|
ENV PATH="/app:/app/bin:/app/vendor/bin:${PATH}"
|
|
ENV PS1="\[\e[31m\][\[\e[m\]\[\e[38;5;172m\]\u\[\e[m\]@\[\e[38;5;153m\]\h\[\e[m\] \[\e[38;5;214m\]\W\[\e[m\]\[\e[31m\]]\[\e[m\]\\$ "
|
|
|
|
COPY installers /installers
|
|
COPY etc /etc
|
|
COPY usr /usr
|
|
|
|
CMD ["/usr/bin/marshall"]
|
|
|
|
RUN /installers/install && \
|
|
rm -rf /marshall /installers && \
|
|
chmod +x /usr/bin/marshall
|
|
|
|
# Disable healthcheck, as healthcheck is nonsensical for this container.
|
|
HEALTHCHECK NONE
|