harbor/make/photon/registry/Dockerfile

FROM photon:1.0

MAINTAINER wangyan@vmware.com

# The original script in the docker offical registry image.
RUN tdnf distro-sync -y \
    && tdnf erase vim -y \
    && tdnf install sudo -y >> /dev/null\
    && tdnf clean all \
    && groupadd -r -g 10000 harbor && useradd --no-log-init -r -g 10000 -u 10000 harbor

COPY ./make/photon/registry/entrypoint.sh /
RUN chmod u+x /entrypoint.sh

RUN mkdir -p /etc/registry

COPY ./make/photon/registry/binary/registry /usr/bin
RUN chmod u+x /usr/bin/registry

HEALTHCHECK CMD curl 127.0.0.1:5000/

VOLUME ["/var/lib/registry"]
EXPOSE 5000
ENTRYPOINT ["/entrypoint.sh"]
CMD ["/etc/registry/config.yml"]
Update photon base images (#5346) This commit update the base photon image from vmware/photon:1.0 to photon:1.0, per suggestion by photon team. 2018-07-19 14:45:20 +02:00			`FROM photon:1.0`
update registry to 2.6.2 (#2851) rm dockerfile update add comments 2017-07-24 11:19:32 +02:00
			`MAINTAINER wangyan@vmware.com`

			`# The original script in the docker offical registry image.`
Remove the workaroud for avoiding photon distro-sync error 2017-12-20 06:10:32 +01:00			`RUN tdnf distro-sync -y \`
Update registry image oss package to latest 1>Change base image to vmware/photon 2>update oss pakcage and remove vim package. 2017-10-30 04:06:48 +01:00			`&& tdnf erase vim -y \`
Reduce the output of build. The following are done to avoid travis-ci failing due to too much log size. 1) Update Makefile and scripts to make go build less verbose. 2) Make tdnf less verbose 2018-02-27 08:01:14 +01:00			`&& tdnf install sudo -y >> /dev/null\`
Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00			`&& tdnf clean all \`
			`&& groupadd -r -g 10000 harbor && useradd --no-log-init -r -g 10000 -u 10000 harbor`

Clean make file unused code and unify docker build method (#59) Signed-off-by: Yan <wangyan@vmware.com> 2018-09-03 11:40:26 +02:00			`COPY ./make/photon/registry/entrypoint.sh /`
update registry to 2.6.2 (#2851) rm dockerfile update add comments 2017-07-24 11:19:32 +02:00			`RUN chmod u+x /entrypoint.sh`

Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00			`RUN mkdir -p /etc/registry`
update registry image (#3135) update update 2017-08-30 10:13:54 +02:00
Clean make file unused code and unify docker build method (#59) Signed-off-by: Yan <wangyan@vmware.com> 2018-09-03 11:40:26 +02:00			`COPY ./make/photon/registry/binary/registry /usr/bin`
update registry to 2.6.2 (#2851) rm dockerfile update add comments 2017-07-24 11:19:32 +02:00			`RUN chmod u+x /usr/bin/registry`

Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00			`HEALTHCHECK CMD curl 127.0.0.1:5000/`

update registry to 2.6.2 (#2851) rm dockerfile update add comments 2017-07-24 11:19:32 +02:00			`VOLUME ["/var/lib/registry"]`
			`EXPOSE 5000`
			`ENTRYPOINT ["/entrypoint.sh"]`
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it. 2018-07-16 10:50:28 +02:00			`CMD ["/etc/registry/config.yml"]`