-
Notifications
You must be signed in to change notification settings - Fork 4
Expand file tree
/
Copy pathDockerfile
More file actions
47 lines (33 loc) · 1.03 KB
/
Dockerfile
File metadata and controls
47 lines (33 loc) · 1.03 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
FROM alpine:3.23.2@sha256:865b95f46d98cf867a156fe4a135ad3fe50d2056aa3f25ed31662dff6da4eb62
HEALTHCHECK NONE
ARG USER_NAME=default
ARG USER_HOME=/home/default
ARG USER_ID=1000
ARG USER_GECOS=Default
SHELL ["/bin/ash", "-euo", "pipefail", "-c"]
RUN apk upgrade --no-cache \
&& apk add --no-cache \
bash=5.3.3-r1 \
curl=8.17.0-r1 \
git=2.52.0-r0 \
gnupg=2.4.9-r0 \
&& apk cache --no-cache clean \
&& rm -rf /var/cache/apk/*
# create gpg directory to prevent keyboxd to automagically start, see https://github.com/nodejs/docker-node/pull/1895#issuecomment-1550389150
RUN mkdir -m 700 /root/.gnupg \
&& gpg --list-keys \
&& gpgconf --kill all
RUN mkdir -m 777 /tmp/pgp-verify-jar
COPY pgp-verify-jar.sh /opt/pgp-verify-jar.sh
RUN chmod ugo+rx /opt/pgp-verify-jar.sh
RUN adduser \
--home "${USER_HOME}" \
--uid "${USER_ID}" \
--gecos "${USER_GECOS}" \
--disabled-password \
"${USER_NAME}"
USER "${USER_NAME}"
ENV HOME="${USER_HOME}"
WORKDIR "${HOME}"
ENTRYPOINT ["/opt/pgp-verify-jar.sh"]
CMD []