harbor/make/docker-compose.clair.tpl

version: '2'
services:
  core:
    networks:
      harbor-clair:
        aliases:
          - harbor-core
  jobservice:
    networks:
      - harbor-clair
  registry:
    networks:
      - harbor-clair
  postgresql:
    networks:
      harbor-clair:
        aliases:
          - harbor-db
  clair:
    networks:
      - harbor-clair
    container_name: clair
    image: goharbor/clair-photon:__clair_version__
    restart: always
    cap_drop:
      - ALL
    cap_add:
      - DAC_OVERRIDE
      - SETGID
      - SETUID
    cpu_quota: 50000
    dns_search: .
    depends_on:
      - postgresql
    volumes:
      - ./common/config/clair/config.yaml:/etc/clair/config.yaml:z
      - ./common/config/custom-ca-bundle.crt:/harbor_cust_cert/custom-ca-bundle.crt:z
    logging:
      driver: "syslog"
      options:  
        syslog-address: "tcp://127.0.0.1:1514"
        tag: "clair"
    env_file:
      ./common/config/clair/clair_env
networks:
  harbor-clair:
    external: false
use docker-compose to deploy clair with harbor 2017-04-27 13:01:45 +02:00			`version: '2'`
			`services:`
Rename harbor-ui to harbor-core 1. Update the nginx.conf 2. Update Makefile 3. Update docker-compose 4. Update image name 5. Rename folder ui to core 6. Change the harbor-ui's package name to core 7. Remove unused static file on harbor-core 8. Remove unused code for harbor-portal Signed-off-by: Qian Deng <dengq@vmware.com> 2018-09-12 08:38:29 +02:00			`core:`
use docker-compose to deploy clair with harbor 2017-04-27 13:01:45 +02:00			`networks:`
			`harbor-clair:`
			`aliases:`
Rename harbor-ui to harbor-core 1. Update the nginx.conf 2. Update Makefile 3. Update docker-compose 4. Update image name 5. Rename folder ui to core 6. Change the harbor-ui's package name to core 7. Remove unused static file on harbor-core 8. Remove unused code for harbor-portal Signed-off-by: Qian Deng <dengq@vmware.com> 2018-09-12 08:38:29 +02:00			`- harbor-core`
use docker-compose to deploy clair with harbor 2017-04-27 13:01:45 +02:00			`jobservice:`
			`networks:`
			`- harbor-clair`
handlers for image scan, store results overview in DB 2017-06-13 15:46:52 +02:00			`registry:`
			`networks:`
			`- harbor-clair`
Fully migrate harbor db to postgresql (#4689) * Merge harbor db to postgres 2018-04-27 11:27:12 +02:00			`postgresql:`
use docker-compose to deploy clair with harbor 2017-04-27 13:01:45 +02:00			`networks:`
			`harbor-clair:`
			`aliases:`
Fully migrate harbor db to postgresql (#4689) * Merge harbor db to postgres 2018-04-27 11:27:12 +02:00			`- harbor-db`
use docker-compose to deploy clair with harbor 2017-04-27 13:01:45 +02:00			`clair:`
			`networks:`
			`- harbor-clair`
			`container_name: clair`
Batch update docker image namespace to goharbor This commit is to move all the images of harbor from vmware to goharbor 2018-08-10 08:16:59 +02:00			`image: goharbor/clair-photon:__clair_version__`
use docker-compose to deploy clair with harbor 2017-04-27 13:01:45 +02:00			`restart: always`
Drop all capabilities when starting containers Drop all capabilities when starting containers by modifying docker-compose files to avoid security issue Signed-off-by: Wenkai Yin <yinw@vmware.com> 2018-11-22 09:21:04 +01:00			`cap_drop:`
			`- ALL`
			`cap_add:`
			`- DAC_OVERRIDE`
			`- SETGID`
			`- SETUID`
Restrict the CPU usage of Clair (#5217) This commit fixes #5072 Due to an issue in bzr, Clair container may consume a lot of CPU resource while updating the vuln data. This commit mitigates the impact by setting the cpu_quota of clair container. (default value of cpu_period is 100000 in v2 docker-compose template) 2018-07-03 05:23:56 +02:00			`cpu_quota: 50000`
Use docker official way to unset dns search According docker official document, use 'dns_search= .' in the docker compose file if you don't wish to set the search domain. https://docs.docker.com/v17.09/engine/userguide/networking/default_network/configure-dns/ Signed-off-by: wang yan <wangyan@vmware.com> 2018-10-17 08:27:25 +02:00			`dns_search: .`
use docker-compose to deploy clair with harbor 2017-04-27 13:01:45 +02:00			`depends_on:`
Fully migrate harbor db to postgresql (#4689) * Merge harbor db to postgres 2018-04-27 11:27:12 +02:00			`- postgresql`
use docker-compose to deploy clair with harbor 2017-04-27 13:01:45 +02:00			`volumes:`
Do not call `chown` to config files This commit fixes a recently discovered issue on Kubernetes #4496 It make necessary to avoid calling `chown` to config files during the bootstrap of the containers. 2018-04-08 17:43:45 +02:00			`- ./common/config/clair/config.yaml:/etc/clair/config.yaml:z`
Install custom cert for clair, registry, chartmuseum Signed-off-by: stonezdj <stonezdj@gmail.com> 2018-11-09 08:02:59 +01:00			`- ./common/config/custom-ca-bundle.crt:/harbor_cust_cert/custom-ca-bundle.crt:z`
use docker-compose to deploy clair with harbor 2017-04-27 13:01:45 +02:00			`logging:`
			`driver: "syslog"`
			`options:`
			`syslog-address: "tcp://127.0.0.1:1514"`
			`tag: "clair"`
Add http_proxy configuration for Clair service Clair needs Internet access to download vulnerabilities data. Fix issue https://github.com/vmware/harbor/issues/4272 2018-03-28 12:49:40 +02:00			`env_file:`
			`./common/config/clair/clair_env`
use docker-compose to deploy clair with harbor 2017-04-27 13:01:45 +02:00			`networks:`
			`harbor-clair:`
			`external: false`