| ADD alpine-minirootfs-3.23.4-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| ARG BIN_NAME=bao |
| ARG NAME=openbao |
| ARG PRODUCT_VERSION |
| ARG PRODUCT_REVISION |
| LABEL name=OpenBao maintainer=OpenBao <openbao@lists.openssf.org> vendor=OpenBao version= release= revision= summary=OpenBao is a tool for securely accessing secrets. description=OpenBao is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. OpenBao provides a unified interface to any secret, while providing tight access control and recording a detailed audit log. |
| COPY LICENSE /licenses/mozilla.txt # buildkit |
| ENV NAME=openbao |
| ENV VERSION= |
| RUN |4 BIN_NAME=bao NAME=openbao PRODUCT_VERSION= PRODUCT_REVISION= /bin/sh -c addgroup ${NAME} && adduser -S -G ${NAME} ${NAME} # buildkit |
| ARG EXTRA_PACKAGES |
| RUN |5 BIN_NAME=bao NAME=openbao PRODUCT_VERSION= PRODUCT_REVISION= EXTRA_PACKAGES= /bin/sh -c apk add --no-cache libcap su-exec dumb-init tzdata ${EXTRA_PACKAGES} # buildkit |
| COPY bao /bin/ # buildkit |
| RUN |5 BIN_NAME=bao NAME=openbao PRODUCT_VERSION= PRODUCT_REVISION= EXTRA_PACKAGES= /bin/sh -c ln -s /bin/${BIN_NAME} /bin/vault # buildkit |
| RUN |5 BIN_NAME=bao NAME=openbao PRODUCT_VERSION= PRODUCT_REVISION= EXTRA_PACKAGES= /bin/sh -c mkdir -p /openbao/logs && mkdir -p /openbao/file && mkdir -p /openbao/config && chown -R ${NAME}:${NAME} /openbao # buildkit |
| VOLUME [/openbao/logs] |
| VOLUME [/openbao/file] |
| EXPOSE [8200/tcp] |
| COPY .release/docker/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh # buildkit |
| ENTRYPOINT ["docker-entrypoint.sh"] |
| CMD ["server" "-dev" "-dev-no-store-token"] |
| LABEL maintainer=support@cloudless.no |
| RUN /bin/sh -c apk upgrade --no-cache && apk add --no-cache git bash ca-certificates curl kubectl yq jq && rm -rf /var/cache/apk/* && update-ca-certificates # buildkit |
| COPY entrypoint.sh /entrypoint.sh # buildkit |
| RUN /bin/sh -c chmod +x /entrypoint.sh # buildkit |
| ENTRYPOINT ["/entrypoint.sh"] |
