harbor/make/photon/registry/Dockerfile

ARG harbor_base_image_version
FROM goharbor/harbor-registry-base:${harbor_base_image_version}

COPY ./make/photon/common/install_cert.sh /home/harbor
COPY ./make/photon/registry/entrypoint.sh /home/harbor
COPY ./make/photon/registry/binary/registry /usr/bin

RUN chown -R harbor:harbor /etc/pki/tls/certs \
    && chown harbor:harbor /home/harbor/entrypoint.sh && chmod u+x /home/harbor/entrypoint.sh \
    && chown harbor:harbor /home/harbor/install_cert.sh && chmod u+x /home/harbor/install_cert.sh \
    && chown harbor:harbor /usr/bin/registry && chmod u+x /usr/bin/registry

HEALTHCHECK CMD curl --fail -s http://127.0.0.1:5000 || curl -k --fail -s https://127.0.0.1:5443 || exit 1

USER harbor

ENTRYPOINT ["/home/harbor/entrypoint.sh"]

VOLUME ["/storage"]
EXPOSE 5000
update base file name ane pass base version to build file Signed-off-by: wang yan <wangyan@vmware.com> 2019-11-12 04:20:54 +01:00			`ARG harbor_base_image_version`
add base images when to build harbor assets * add base images when to build harbor assets Signed-off-by: wang yan <wangyan@vmware.com> 2019-11-11 11:56:36 +01:00			`FROM goharbor/harbor-registry-base:${harbor_base_image_version}`
Install custom cert for clair, registry, chartmuseum Signed-off-by: stonezdj <stonezdj@gmail.com> 2018-11-09 08:02:59 +01:00
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com> 2019-10-13 12:27:06 +02:00			`COPY ./make/photon/common/install_cert.sh /home/harbor`
			`COPY ./make/photon/registry/entrypoint.sh /home/harbor`
Clean make file unused code and unify docker build method (#59) Signed-off-by: Yan <wangyan@vmware.com> 2018-09-03 11:40:26 +02:00			`COPY ./make/photon/registry/binary/registry /usr/bin`
add install cert for registry contoller (#7633) Mount the ca bunlder into registry controller, and add them into os trust store that resolves the problem of garabe collection on ca enabled registry. Signed-off-by: wang yan <wangyan@vmware.com> 2019-05-05 09:24:52 +02:00
Change certs's owner to 10000 Signed-off-by: DQ <dengq@vmware.com> 2019-10-22 15:24:49 +02:00			`RUN chown -R harbor:harbor /etc/pki/tls/certs \`
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com> 2019-10-13 12:27:06 +02:00			`&& chown harbor:harbor /home/harbor/entrypoint.sh && chmod u+x /home/harbor/entrypoint.sh \`
			`&& chown harbor:harbor /home/harbor/install_cert.sh && chmod u+x /home/harbor/install_cert.sh \`
			`&& chown harbor:harbor /usr/bin/registry && chmod u+x /usr/bin/registry`
update registry to 2.6.2 (#2851) rm dockerfile update add comments 2017-07-24 11:19:32 +02:00
Fix health check url health check url should depend on internal https Signed-off-by: DQ <dengq@vmware.com> 2020-04-04 19:43:12 +02:00			`HEALTHCHECK CMD curl --fail -s http://127.0.0.1:5000 \|\| curl -k --fail -s https://127.0.0.1:5443 \|\| exit 1`
Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com> 2019-10-13 12:27:06 +02:00			`USER harbor`

			`ENTRYPOINT ["/home/harbor/entrypoint.sh"]`

enhance[cicd] introduce github action for CICD In order to replace travis. Implement 5 CI jobs - UTTEST - APITEST_DB - APITEST_LDAP - OFFLINE - UI_UT Signed-off-by: Ziming Zhang <zziming@vmware.com> 2019-12-11 12:11:20 +01:00			`VOLUME ["/storage"]`
update registry to 2.6.2 (#2851) rm dockerfile update add comments 2017-07-24 11:19:32 +02:00			`EXPOSE 5000`