dyndnsd/docker/Dockerfile

FROM alpine:3.13.5

EXPOSE 5353 8080

ARG DYNDNSD_VERSION

RUN apk --no-cache add openssl ca-certificates && \
    apk upgrade apk-tools libcrypto1.1 libssl1.1 && \
    apk --no-cache add ruby ruby-etc ruby-io-console ruby-json ruby-webrick && \
    apk --no-cache add --virtual .build-deps linux-headers ruby-dev build-base tzdata && \
    gem install --no-document dyndnsd -v ${DYNDNSD_VERSION} && \
    rm -rf /usr/lib/ruby/gems/*/cache/ && \
    # set timezone to Berlin
    cp /usr/share/zoneinfo/Europe/Berlin /etc/localtime && \
    apk del .build-deps

# Follow the principle of least privilege: run as unprivileged user.
# Running as non-root enables running this image in platforms like OpenShift
# that do not allow images running as root.
# User ID 65534 is usually user 'nobody'.
USER 65534

ENTRYPOINT ["dyndnsd", "/etc/dyndnsd/config.yml"]
docker: revert update alpine Docker tag to v3.14.0 - https://github.com/aquasecurity/trivy/releases/tag/v0.18.3 does not support Alpine 3.14 yet - https://wiki.alpinelinux.org/wiki/Release_Notes_for_Alpine_3.14.0#faccessat2 poses problems on older Docker hosts, do not reduce compatibility right now This reverts commit dcd4201523be3b32c1e12d2249ea01dbcf8dc0ce. 2021-06-23 12:40:43 +02:00			`FROM alpine:3.13.5`
docs: add example Dockerfile 2020-07-30 19:49:31 +02:00
			`EXPOSE 5353 8080`

docs: improve release process 2021-04-16 23:16:58 +02:00			`ARG DYNDNSD_VERSION`
docs: add example Dockerfile 2020-07-30 19:49:31 +02:00
docker: revert update Alpine tools to fix apk-tools vulnerability (ineffective) This reverts commit b8fd42fd85acb51d32102f0ce40c5f64c505d4ca. 2021-08-20 12:56:38 +02:00			`RUN apk --no-cache add openssl ca-certificates && \`
docker: update Alpine tools to fix openssl vulnerability 2021-08-26 21:19:34 +02:00			`apk upgrade apk-tools libcrypto1.1 libssl1.1 && \`
docs: add example Dockerfile 2020-07-30 19:49:31 +02:00			`apk --no-cache add ruby ruby-etc ruby-io-console ruby-json ruby-webrick && \`
docker: allow successful compiling of nio4r gem dependency - now seems to need linux-headers, see https://github.com/socketry/nio4r/issues/225 2021-02-18 11:25:05 +01:00			`apk --no-cache add --virtual .build-deps linux-headers ruby-dev build-base tzdata && \`
docker: add image release on tag and periodic vulnerability scan 2020-08-17 12:08:42 +02:00			`gem install --no-document dyndnsd -v ${DYNDNSD_VERSION} && \`
ci: use locally built gem file for testing Docker image build 2021-04-16 18:11:23 +02:00			`rm -rf /usr/lib/ruby/gems/*/cache/ && \`
docs: add example Dockerfile 2020-07-30 19:49:31 +02:00			`# set timezone to Berlin`
			`cp /usr/share/zoneinfo/Europe/Berlin /etc/localtime && \`
			`apk del .build-deps`

docker: run as non-root user by default 2021-04-02 10:54:48 +02:00			`# Follow the principle of least privilege: run as unprivileged user.`
			`# Running as non-root enables running this image in platforms like OpenShift`
			`# that do not allow images running as root.`
			`# User ID 65534 is usually user 'nobody'.`
			`USER 65534`

docs: add example Dockerfile 2020-07-30 19:49:31 +02:00			`ENTRYPOINT ["dyndnsd", "/etc/dyndnsd/config.yml"]`