-
Notifications
You must be signed in to change notification settings - Fork 3
/
Copy pathalpine.multiarch.release.Dockerfile
104 lines (92 loc) · 5.11 KB
/
alpine.multiarch.release.Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
FROM alpine:latest AS build
ARG MINIO_RELEASE_VERSION
ARG MC_RELEASE_VERSION
ENV MINIO_UPDATE_MINISIGN_PUBKEY="RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav"
RUN \
set -ex && \
apk add --no-cache curl ca-certificates minisign && \
## TARGETARCH ##
# https://en.wikipedia.org/wiki/Uname
ARCH=`uname -m` && \
echo "ARCH=$ARCH" && \
if [ "$ARCH" == "x86_64" ]; then \
echo "x86_64 (amd64)" && \
TARGETARCH="amd64"; \
elif [ "$ARCH" == "aarch64" ]; then \
echo "aarch64 (arm64)" && \
TARGETARCH="arm64"; \
elif [ "$ARCH" == "armv7l" ]; then \
echo "armv7 (arm)" && \
TARGETARCH="arm"; \
elif [ "$ARCH" == "ppc64le" ]; then \
echo "ppc64le" ; \
TARGETARCH="ppc64le"; \
else \
echo "unknown arch" && \
exit 1; \
fi && \
export TARGETARCH=$TARGETARCH && \
## GET MINIO_RELEASE_VERSION ##
MINIO_RELEASE_VERSION=${MINIO_RELEASE_VERSION:-$(curl -s https://api.github.com/repos/minio/minio/releases/latest | grep 'tag_name' | cut -d\" -f4)} && \
echo "MINIO_RELEASE_VERSION=${MINIO_RELEASE_VERSION}" && \
## Download minio binary and signature file ##
curl -s -q https://dl.min.io/server/minio/release/linux-${TARGETARCH}/archive/minio.${MINIO_RELEASE_VERSION} -o /usr/bin/minio && \
curl -s -q https://dl.min.io/server/minio/release/linux-${TARGETARCH}/archive/minio.${MINIO_RELEASE_VERSION}.minisig -o /tmp/minio.minisig && \
curl -s -q https://dl.min.io/server/minio/release/linux-${TARGETARCH}/archive/minio.${MINIO_RELEASE_VERSION}.sha256sum -o /tmp/minio.sha256sum && \
chmod +x /usr/bin/minio && \
## GET MC_RELEASE_VERSION ##
MC_RELEASE_VERSION=${MC_RELEASE_VERSION:-$(curl -s https://api.github.com/repos/minio/mc/releases/latest | grep 'tag_name' | cut -d\" -f4)} && \
echo "MC_RELEASE_VERSION=${MC_RELEASE_VERSION}" && \
## Download mc binary and signature file ##
curl -s -q https://dl.min.io/client/mc/release/linux-${TARGETARCH}/archive/mc.${MC_RELEASE_VERSION} -o /usr/bin/mc && \
curl -s -q https://dl.min.io/client/mc/release/linux-${TARGETARCH}/archive/mc.${MC_RELEASE_VERSION}.minisig -o /tmp/mc.minisig && \
curl -s -q https://dl.min.io/client/mc/release/linux-${TARGETARCH}/archive/mc.${MC_RELEASE_VERSION}.sha256sum -o /tmp/mc.sha256sum && \
chmod +x /usr/bin/mc && \
## Verify binary signature using public key ##
minisign -Vqm /usr/bin/minio -x /tmp/minio.minisig -P ${MINIO_UPDATE_MINISIGN_PUBKEY} && \
minisign -Vqm /usr/bin/mc -x /tmp/mc.minisig -P ${MINIO_UPDATE_MINISIGN_PUBKEY} && \
#echo "$(awk '{print $1}' /tmp/minio.sha256sum) /usr/bin/minio" | sha256sum -c || exit 1 && \
#echo "$(awk '{print $1}' /tmp/mc.sha256sum) /usr/bin/mc" | sha256sum -c || exit 1 && \
## Download minio cerdits, license and docker-entrypoint ##
mkdir /licenses && \
curl -s -q https://raw.githubusercontent.com/minio/minio/${MINIO_RELEASE_VERSION}/CREDITS -o /licenses/CREDITS && \
curl -s -q https://raw.githubusercontent.com/minio/minio/${MINIO_RELEASE_VERSION}/LICENSE -o /licenses/LICENSE && \
curl -s -q https://raw.githubusercontent.com/minio/minio/${MINIO_RELEASE_VERSION}/dockerscripts/docker-entrypoint.sh -o /usr/bin/docker-entrypoint.sh && \
chmod +x /usr/bin/docker-entrypoint.sh
FROM alpine:latest
ARG MINIO_RELEASE_VERSION
ARG MC_RELEASE_VERSION
ARG VCS_REF
ARG BUILD_DATE
LABEL org.opencontainers.image.title="MinIO" \
org.opencontainers.image.vendor="MinIO Inc <dev@min.io>" \
org.opencontainers.image.authors="MinIO Inc <dev@min.io>, Tobias Hargesheimer <docker@ison.ws>" \
org.opencontainers.image.version="${MINIO_RELEASE_VERSION}" \
org.opencontainers.image.created="${BUILD_DATE}" \
org.opencontainers.image.revision="${VCS_REF}" \
org.opencontainers.image.description="MinIO is a High Performance Object Storage, API compatible with Amazon S3 cloud storage service." \
org.opencontainers.image.documentation="https://min.io/docs/minio/container/index.html , https://github.com/minio/minio" \
org.opencontainers.image.licenses="AGPL-3.0" \
org.opencontainers.image.base.name="docker.io/library/alpine:latest" \
org.opencontainers.image.url="https://hub.docker.com/r/tobi312/minio" \
org.opencontainers.image.source="https://github.com/Tob1as/docker-minio"
ENV MINIO_ACCESS_KEY_FILE=access_key \
MINIO_SECRET_KEY_FILE=secret_key \
MINIO_ROOT_USER_FILE=access_key \
MINIO_ROOT_PASSWORD_FILE=secret_key \
MINIO_KMS_SECRET_KEY_FILE=kms_master_key \
MINIO_UPDATE_MINISIGN_PUBKEY="RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav" \
MINIO_CONFIG_ENV_FILE=config.env \
MC_CONFIG_DIR=/tmp/.mc
RUN apk add --no-cache curl ca-certificates
#COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
COPY --from=build /usr/bin/minio /usr/bin/minio
COPY --from=build /usr/bin/mc /usr/bin/mc
#COPY --from=build /usr/bin/curl /usr/bin/curl
COPY --from=build /licenses/CREDITS /licenses/CREDITS
COPY --from=build /licenses/LICENSE /licenses/LICENSE
COPY --from=build /usr/bin/docker-entrypoint.sh /usr/bin/docker-entrypoint.sh
EXPOSE 9000
VOLUME ["/data"]
ENTRYPOINT ["/usr/bin/docker-entrypoint.sh"]
CMD ["minio"]