harbor/make/photon/registry/Dockerfile

FROM photon:2.0

LABEL maintainer="wangyan@vmware.com"

# The original script in the docker offical registry image.
RUN tdnf install sudo -y >> /dev/null\
    && tdnf clean all \
    && mkdir -p /etc/registry \
    && groupadd -r -g 10000 harbor && useradd --no-log-init -m -g 10000 -u 10000 harbor  

COPY ./make/photon/common/install_cert.sh /home/harbor
COPY ./make/photon/registry/entrypoint.sh /home/harbor
COPY ./make/photon/registry/binary/registry /usr/bin

RUN chown -R harbor:harbor /etc/pki/tls/certs \
    && chown harbor:harbor /home/harbor/entrypoint.sh && chmod u+x /home/harbor/entrypoint.sh \
    && chown harbor:harbor /home/harbor/install_cert.sh && chmod u+x /home/harbor/install_cert.sh \
    && chown harbor:harbor /usr/bin/registry && chmod u+x /usr/bin/registry

HEALTHCHECK CMD curl 127.0.0.1:5000/

USER harbor

ENTRYPOINT ["/home/harbor/entrypoint.sh"]

VOLUME ["/var/lib/registry"]
EXPOSE 5000
Rebuild Harbor images based on photon:2.0 (#6054) Make necessary change to make things work with photon 2.0 docker image. Remove distro-sync to mitigate the build issue and add `--pull` to docker build command to make sure the latest photon:2.0 will be pulled during build process. Signed-off-by: Daniel Jiang <jiangd@vmware.com> 2018-10-18 05:03:28 +02:00			`FROM photon:2.0`
update registry to 2.6.2 (#2851) rm dockerfile update add comments 2017-07-24 11:19:32 +02:00
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com> 2019-10-13 12:27:06 +02:00			`LABEL maintainer="wangyan@vmware.com"`
update registry to 2.6.2 (#2851) rm dockerfile update add comments 2017-07-24 11:19:32 +02:00
			`# The original script in the docker offical registry image.`
Rebuild Harbor images based on photon:2.0 (#6054) Make necessary change to make things work with photon 2.0 docker image. Remove distro-sync to mitigate the build issue and add `--pull` to docker build command to make sure the latest photon:2.0 will be pulled during build process. Signed-off-by: Daniel Jiang <jiangd@vmware.com> 2018-10-18 05:03:28 +02:00			`RUN tdnf install sudo -y >> /dev/null\`
Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00			`&& tdnf clean all \`
add install cert for registry contoller (#7633) Mount the ca bunlder into registry controller, and add them into os trust store that resolves the problem of garabe collection on ca enabled registry. Signed-off-by: wang yan <wangyan@vmware.com> 2019-05-05 09:24:52 +02:00			`&& mkdir -p /etc/registry \`
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com> 2019-10-13 12:27:06 +02:00			`&& groupadd -r -g 10000 harbor && useradd --no-log-init -m -g 10000 -u 10000 harbor`
Install custom cert for clair, registry, chartmuseum Signed-off-by: stonezdj <stonezdj@gmail.com> 2018-11-09 08:02:59 +01:00
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com> 2019-10-13 12:27:06 +02:00			`COPY ./make/photon/common/install_cert.sh /home/harbor`
			`COPY ./make/photon/registry/entrypoint.sh /home/harbor`
Clean make file unused code and unify docker build method (#59) Signed-off-by: Yan <wangyan@vmware.com> 2018-09-03 11:40:26 +02:00			`COPY ./make/photon/registry/binary/registry /usr/bin`
add install cert for registry contoller (#7633) Mount the ca bunlder into registry controller, and add them into os trust store that resolves the problem of garabe collection on ca enabled registry. Signed-off-by: wang yan <wangyan@vmware.com> 2019-05-05 09:24:52 +02:00
Change certs's owner to 10000 Signed-off-by: DQ <dengq@vmware.com> 2019-10-22 15:24:49 +02:00			`RUN chown -R harbor:harbor /etc/pki/tls/certs \`
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com> 2019-10-13 12:27:06 +02:00			`&& chown harbor:harbor /home/harbor/entrypoint.sh && chmod u+x /home/harbor/entrypoint.sh \`
			`&& chown harbor:harbor /home/harbor/install_cert.sh && chmod u+x /home/harbor/install_cert.sh \`
			`&& chown harbor:harbor /usr/bin/registry && chmod u+x /usr/bin/registry`
update registry to 2.6.2 (#2851) rm dockerfile update add comments 2017-07-24 11:19:32 +02:00
Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00			`HEALTHCHECK CMD curl 127.0.0.1:5000/`

Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com> 2019-10-13 12:27:06 +02:00			`USER harbor`

			`ENTRYPOINT ["/home/harbor/entrypoint.sh"]`

update registry to 2.6.2 (#2851) rm dockerfile update add comments 2017-07-24 11:19:32 +02:00			`VOLUME ["/var/lib/registry"]`
			`EXPOSE 5000`