harbor/make/photon/log/Dockerfile

FROM photon:2.0

RUN tdnf install -y cronie rsyslog logrotate shadow tar gzip sudo >> /dev/null\
    && mkdir /var/spool/rsyslog \
    && groupadd -r -g 10000 syslog && useradd --no-log-init -r -g 10000 -u 10000 syslog \
    && tdnf clean all

COPY ./make/photon/log/rsyslog.conf /etc/rsyslog.conf

# rsyslog configuration file for docker
COPY ./make/photon/log/rsyslog_docker.conf /etc/rsyslog.d/

# remove the original "logrotate" in directory "/etc/cron.daily/"
# and copy the customized one to directory "/etc/cron.hourly/" 
# to run logrotate hourly
RUN rm /etc/cron.daily/logrotate
COPY ./make/photon/log/logrotate /etc/cron.hourly/

COPY ./make/photon/log/start.sh /usr/local/bin/
RUN chmod +x /usr/local/bin/start.sh /etc/rsyslog.d/ && \
    chown -R 10000:10000 /etc/rsyslog.conf /etc/rsyslog.d/ /run /var/lib/logrotate/

HEALTHCHECK CMD netstat -ltun|grep 10514

VOLUME /var/log/docker/ /run/ /etc/logrotate.d/

EXPOSE 10514

CMD /usr/local/bin/start.sh
Rebuild Harbor images based on photon:2.0 (#6054) Make necessary change to make things work with photon 2.0 docker image. Remove distro-sync to mitigate the build issue and add `--pull` to docker build command to make sure the latest photon:2.0 will be pulled during build process. Signed-off-by: Daniel Jiang <jiangd@vmware.com> 2018-10-18 05:03:28 +02:00			`FROM photon:2.0`
Remove the Dockerfile of rsyslog image 2017-11-06 06:52:23 +01:00
Rebuild Harbor images based on photon:2.0 (#6054) Make necessary change to make things work with photon 2.0 docker image. Remove distro-sync to mitigate the build issue and add `--pull` to docker build command to make sure the latest photon:2.0 will be pulled during build process. Signed-off-by: Daniel Jiang <jiangd@vmware.com> 2018-10-18 05:03:28 +02:00			`RUN tdnf install -y cronie rsyslog logrotate shadow tar gzip sudo >> /dev/null\`
Remove the Dockerfile of rsyslog image 2017-11-06 06:52:23 +01:00			`&& mkdir /var/spool/rsyslog \`
			`&& groupadd -r -g 10000 syslog && useradd --no-log-init -r -g 10000 -u 10000 syslog \`
			`&& tdnf clean all`
update compose template, introduce support for photon 2016-08-23 11:57:12 +02:00
Clean make file unused code and unify docker build method (#59) Signed-off-by: Yan <wangyan@vmware.com> 2018-09-03 11:40:26 +02:00			`COPY ./make/photon/log/rsyslog.conf /etc/rsyslog.conf`
update compose template, introduce support for photon 2016-08-23 11:57:12 +02:00
			`# rsyslog configuration file for docker`
Clean make file unused code and unify docker build method (#59) Signed-off-by: Yan <wangyan@vmware.com> 2018-09-03 11:40:26 +02:00			`COPY ./make/photon/log/rsyslog_docker.conf /etc/rsyslog.d/`
update compose template, introduce support for photon 2016-08-23 11:57:12 +02:00
Run logrotate as user 10000 to avoid issue #6895 (#6913) This commit fixes issue #6895 by running logrotate with user 10000 Signed-off-by: Wenkai Yin <yinw@vmware.com> 2019-02-19 06:18:45 +01:00			`# remove the original "logrotate" in directory "/etc/cron.daily/"`
			`# and copy the customized one to directory "/etc/cron.hourly/"`
			`# to run logrotate hourly`
			`RUN rm /etc/cron.daily/logrotate`
			`COPY ./make/photon/log/logrotate /etc/cron.hourly/`
Improve log rotation configurability 2017-11-08 06:07:27 +01:00
Clean make file unused code and unify docker build method (#59) Signed-off-by: Yan <wangyan@vmware.com> 2018-09-03 11:40:26 +02:00			`COPY ./make/photon/log/start.sh /usr/local/bin/`
Fix permission issue in rsyslog container. This commit fixes the permission issues introduced after migration to photon:2.0 base image. Signed-off-by: Daniel Jiang <jiangd@vmware.com> 2018-10-22 05:34:27 +02:00			`RUN chmod +x /usr/local/bin/start.sh /etc/rsyslog.d/ && \`
Run logrotate as user 10000 to avoid issue #6895 (#6913) This commit fixes issue #6895 by running logrotate with user 10000 Signed-off-by: Wenkai Yin <yinw@vmware.com> 2019-02-19 06:18:45 +01:00			`chown -R 10000:10000 /etc/rsyslog.conf /etc/rsyslog.d/ /run /var/lib/logrotate/`
update compose template, introduce support for photon 2016-08-23 11:57:12 +02:00
Update Dockerfile I guess that the purpose of this check is to verify that the container is listening on port 10514. Healthcheck default timeout is 30 sec. In places where the DNS resolver is not working properly, this check could take more than 30 sec, which leads to decide that the container health is unhealthy. I advise you to add to your check the option n, which prevents netstat trying to determine the symbolic host. Signed-off-by: overdogwatch <overdogwatch@gmail.com> 2018-12-27 08:39:19 +01:00			`HEALTHCHECK CMD netstat -ltun\|grep 10514`
update compose template, introduce support for photon 2016-08-23 11:57:12 +02:00
Improve log rotation configurability 2017-11-08 06:07:27 +01:00			`VOLUME /var/log/docker/ /run/ /etc/logrotate.d/`
Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00
			`EXPOSE 10514`

			`CMD /usr/local/bin/start.sh`