Roll utils and non-root stuff into main image
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
e19280151e
commit
9a8dbdbfef
12
Dockerfile
12
Dockerfile
@ -7,12 +7,19 @@ LABEL maintainer="ian@iamthefij.com"
|
|||||||
ARG ARCH=x86_64
|
ARG ARCH=x86_64
|
||||||
COPY ./build/qemu-${ARCH}-static /usr/bin/
|
COPY ./build/qemu-${ARCH}-static /usr/bin/
|
||||||
|
|
||||||
COPY ./sample-config.yml /app/config.yml
|
# Add common checking tools
|
||||||
|
RUN apk add bash curl jq
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
|
||||||
|
# Add minitor user for running as non-root
|
||||||
|
RUN addgroup -S minitor && adduser -S minitor -G minitor
|
||||||
|
|
||||||
# Expose default metrics port
|
# Expose default metrics port
|
||||||
EXPOSE 8080
|
EXPOSE 8080
|
||||||
|
|
||||||
|
# Copy default sample config
|
||||||
|
COPY ./sample-config.yml /app/config.yml
|
||||||
|
|
||||||
# Copy Python package to container
|
# Copy Python package to container
|
||||||
COPY ./README.md /app/
|
COPY ./README.md /app/
|
||||||
COPY ./setup.py /app/
|
COPY ./setup.py /app/
|
||||||
@ -25,4 +32,7 @@ COPY ./scripts /app/scripts
|
|||||||
# Allow all users to execute minitor and scripts
|
# Allow all users to execute minitor and scripts
|
||||||
RUN chmod -R 755 /app
|
RUN chmod -R 755 /app
|
||||||
|
|
||||||
|
# Drop to non-root user
|
||||||
|
USER minitor
|
||||||
|
|
||||||
ENTRYPOINT [ "python3", "-m", "minitor.main" ]
|
ENTRYPOINT [ "python3", "-m", "minitor.main" ]
|
||||||
|
@ -1,7 +0,0 @@
|
|||||||
FROM minitor-dev-linux-amd64
|
|
||||||
|
|
||||||
RUN apk add bash jq curl
|
|
||||||
|
|
||||||
RUN addgroup -S minitor && adduser -S minitor -G minitor
|
|
||||||
|
|
||||||
USER minitor
|
|
@ -1,7 +1,7 @@
|
|||||||
version: '2'
|
version: '2'
|
||||||
services:
|
services:
|
||||||
minitor:
|
minitor:
|
||||||
build: .
|
build: ../..
|
||||||
volumes:
|
volumes:
|
||||||
- ./config.yml:/app/config.yml
|
- ./config.yml:/app/config.yml
|
||||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||||
|
Loading…
Reference in New Issue
Block a user