Upstream/harbor
1
0
Fork 0
mirror of https://github.com/goharbor/harbor.git synced 2024-11-02 16:49:48 +01:00
Code Issues Projects Releases Wiki Activity
e6541672d5
harbor/make/photon/registryctl/Dockerfile

24 lines
1.1 KiB
Docker
Raw Normal View History

update base file name ane pass base version to build file Signed-off-by: wang yan <wangyan@vmware.com>
2019-11-12 04:20:54 +01:00
ARG harbor_base_image_version
feat(cicd) parameterize docker base image and external url Signed-off-by: Ziming Zhang <zziming@vmware.com>
2020-04-01 13:46:45 +02:00
ARG harbor_base_namespace
FROM ${harbor_base_namespace}/harbor-registryctl-base:${harbor_base_image_version}
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it.
2018-07-16 10:50:28 +02:00
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
COPY ./make/photon/common/install_cert.sh /home/harbor
add warning to registry binary name Fixes #11606 As we DO NOT want to user to execute GC in the container, rename it and append the warning message. Signed-off-by: wang yan <wangyan@vmware.com>
2020-04-14 09:16:47 +02:00
COPY ./make/photon/registry/binary/registry /usr/bin/registry_DO_NOT_USE_GC
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
COPY ./make/photon/registryctl/start.sh /home/harbor
COPY ./make/photon/registryctl/harbor_registryctl /home/harbor
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it.
2018-07-16 10:50:28 +02:00
Change certs's owner to 10000 Signed-off-by: DQ <dengq@vmware.com>
2019-10-22 15:24:49 +02:00
RUN chown -R harbor:harbor /etc/pki/tls/certs \
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
&& chown harbor:harbor /home/harbor/harbor_registryctl && chmod u+x /home/harbor/harbor_registryctl \
add warning to registry binary name Fixes #11606 As we DO NOT want to user to execute GC in the container, rename it and append the warning message. Signed-off-by: wang yan <wangyan@vmware.com>
2020-04-14 09:16:47 +02:00
&& chown harbor:harbor /usr/bin/registry_DO_NOT_USE_GC && chmod u+x /usr/bin/registry_DO_NOT_USE_GC \
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
&& chown harbor:harbor /home/harbor/start.sh && chmod u+x /home/harbor/start.sh \
&& chown harbor:harbor /home/harbor/install_cert.sh && chmod u+x /home/harbor/install_cert.sh
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it.
2018-07-16 10:50:28 +02:00
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
Fix health check for jobservice and regctl need cert when mTLS is enabled Signed-off-by: DQ <dengq@vmware.com>
2020-04-09 14:35:46 +02:00
HEALTHCHECK CMD curl --fail -s http://127.0.0.1:8080/api/health || curl -sk --fail --key /etc/harbor/ssl/registryctl.key --cert /etc/harbor/ssl/registryctl.crt https://127.0.0.1:8443/api/health || exit 1
Add the registry controller httpserver, it's responsible for controlling (#5265) docker regsitry. This version has the API to call regsitry GC with jobservice secret. Seprates it into a standalone container as do not want to invoke two processes in one container. It needs to mount the registry storage into this container in order to do GC, and needs to copy the registry binary into it.
2018-07-16 10:50:28 +02:00
VOLUME ["/var/lib/registry"]
Add registryctl to non-root And the install_cert.sh will changed for non-root too Signed-off-by: DQ <dengq@vmware.com>
2019-10-13 12:27:06 +02:00
ENTRYPOINT ["/home/harbor/start.sh"]
USER harbor
Reference in New Issue Copy Permalink