harbor/make/photon/log/Dockerfile

FROM vmware/photon:1.0

RUN tdnf distro-sync -y \
    && tdnf install -y cronie rsyslog logrotate shadow tar gzip sudo net-tools >> /dev/null\
    && mkdir /etc/rsyslog.d/ \
    && mkdir /var/spool/rsyslog \
    && groupadd -r -g 10000 syslog && useradd --no-log-init -r -g 10000 -u 10000 syslog \
    && tdnf clean all

COPY rsyslog.conf /etc/rsyslog.conf

# rsyslog configuration file for docker
COPY rsyslog_docker.conf /etc/rsyslog.d/

# run logrotate hourly
RUN mv /etc/cron.daily/logrotate /etc/cron.hourly/logrotate

COPY start.sh /usr/local/bin/
RUN chmod +x /usr/local/bin/start.sh && \
    chown -R 10000:10000 /etc/rsyslog.conf /etc/rsyslog.d/ /run 

HEALTHCHECK CMD netstat -ltu|grep 10514

VOLUME /var/log/docker/ /run/ /etc/logrotate.d/

EXPOSE 10514

CMD /usr/local/bin/start.sh
Remove the Dockerfile of rsyslog image 2017-11-06 06:52:23 +01:00			`FROM vmware/photon:1.0`

Remove the workaroud for avoiding photon distro-sync error 2017-12-20 06:10:32 +01:00			`RUN tdnf distro-sync -y \`
Reduce the output of build. The following are done to avoid travis-ci failing due to too much log size. 1) Update Makefile and scripts to make go build less verbose. 2) Make tdnf less verbose 2018-02-27 08:01:14 +01:00			`&& tdnf install -y cronie rsyslog logrotate shadow tar gzip sudo net-tools >> /dev/null\`
Remove the Dockerfile of rsyslog image 2017-11-06 06:52:23 +01:00			`&& mkdir /etc/rsyslog.d/ \`
			`&& mkdir /var/spool/rsyslog \`
			`&& groupadd -r -g 10000 syslog && useradd --no-log-init -r -g 10000 -u 10000 syslog \`
			`&& tdnf clean all`
update compose template, introduce support for photon 2016-08-23 11:57:12 +02:00
Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00			`COPY rsyslog.conf /etc/rsyslog.conf`
update compose template, introduce support for photon 2016-08-23 11:57:12 +02:00
			`# rsyslog configuration file for docker`
Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00			`COPY rsyslog_docker.conf /etc/rsyslog.d/`
update compose template, introduce support for photon 2016-08-23 11:57:12 +02:00
Improve log rotation configurability 2017-11-08 06:07:27 +01:00			`# run logrotate hourly`
			`RUN mv /etc/cron.daily/logrotate /etc/cron.hourly/logrotate`

Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00			`COPY start.sh /usr/local/bin/`
			`RUN chmod +x /usr/local/bin/start.sh && \`
Refine the Dockerfile Refine the Dockerfile to remove temporary workarounds. Also fixes #3587, to make sure the configuration files of rsyslog can be read by uid 10000. 2017-11-13 11:04:17 +01:00			`chown -R 10000:10000 /etc/rsyslog.conf /etc/rsyslog.d/ /run`
update compose template, introduce support for photon 2016-08-23 11:57:12 +02:00
Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00			`HEALTHCHECK CMD netstat -ltu\|grep 10514`
update compose template, introduce support for photon 2016-08-23 11:57:12 +02:00
Improve log rotation configurability 2017-11-08 06:07:27 +01:00			`VOLUME /var/log/docker/ /run/ /etc/logrotate.d/`
Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00
			`EXPOSE 10514`

			`CMD /usr/local/bin/start.sh`