Upstream/harbor
1
0
Fork 0
mirror of https://github.com/goharbor/harbor.git synced 2024-11-30 06:03:45 +01:00
Code Issues Projects Releases Wiki Activity
06e4e124d8
harbor/make/photon/registryctl/Dockerfile

29 lines
1.0 KiB
Docker
Raw Normal View History

Rebuild Harbor images based on photon:2.0 (#6054) Make necessary change to make things work with photon 2.0 docker image. Remove distro-sync to mitigate the build issue and add `--pull` to docker build command to make sure the latest photon:2.0 will be pulled during build process. Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2018-10-18 05:03:28 +02:00
FROM photon:2.0
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it.
2018-07-16 10:50:28 +02:00
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
Label maintainer="wangyan@vmware.com"
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it.
2018-07-16 10:50:28 +02:00
add install cert for registry contoller (#7633) Mount the ca bunlder into registry controller, and add them into os trust store that resolves the problem of garabe collection on ca enabled registry. Signed-off-by: wang yan <wangyan@vmware.com>
2019-05-05 09:24:52 +02:00
RUN tdnf install sudo -y >> /dev/null \
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it.
2018-07-16 10:50:28 +02:00
&& tdnf clean all \
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
&& groupadd -r -g 10000 harbor && useradd --no-log-init -m -g 10000 -u 10000 harbor \
&& mkdir -p /etc/registry
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it.
2018-07-16 10:50:28 +02:00
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
COPY ./make/photon/common/install_cert.sh /home/harbor
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it.
2018-07-16 10:50:28 +02:00
COPY ./make/photon/registry/binary/registry /usr/bin
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
COPY ./make/photon/registryctl/start.sh /home/harbor
COPY ./make/photon/registryctl/harbor_registryctl /home/harbor
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it.
2018-07-16 10:50:28 +02:00
Change certs's owner to 10000 Signed-off-by: DQ <dengq@vmware.com>
2019-10-22 15:24:49 +02:00
RUN chown -R harbor:harbor /etc/pki/tls/certs \
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
&& chown harbor:harbor /home/harbor/harbor_registryctl && chmod u+x /home/harbor/harbor_registryctl \
&& chown harbor:harbor /usr/bin/registry && chmod u+x /usr/bin/registry \
&& chown harbor:harbor /home/harbor/start.sh && chmod u+x /home/harbor/start.sh \
&& chown harbor:harbor /home/harbor/install_cert.sh && chmod u+x /home/harbor/install_cert.sh
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it.
2018-07-16 10:50:28 +02:00
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
HEALTHCHECK CMD curl --fail -s http://127.0.0.1:8080/api/health || exit 1
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it.
2018-07-16 10:50:28 +02:00
VOLUME ["/var/lib/registry"]
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
ENTRYPOINT ["/home/harbor/start.sh"]
USER harbor
Reference in New Issue Copy Permalink