From edfc5d5949106f2557cfbf9eb9c39c006943c78c Mon Sep 17 00:00:00 2001 From: Matthias Bertschy Date: Thu, 26 Oct 2023 22:39:09 +0200 Subject: [PATCH] fix docker build for kubescape-cli Signed-off-by: Matthias Bertschy --- .github/workflows/d-publish-image.yaml | 12 +++++++----- build/kubescape-cli.Dockerfile | 4 ++-- 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/.github/workflows/d-publish-image.yaml b/.github/workflows/d-publish-image.yaml index 71422ab0..4e345aa0 100644 --- a/.github/workflows/d-publish-image.yaml +++ b/.github/workflows/d-publish-image.yaml @@ -62,12 +62,14 @@ jobs: id: download-artifact with: path: . + - name: mv kubescape amd64 binary + run: mv kubescape-ubuntu-latest/kubescape-ubuntu-latest kubescape-amd64-ubuntu-latest + - name: mv kubescape arm64 binary + run: mv kubescape-ubuntu-latest/kubescape-arm64-ubuntu-latest kubescape-arm64-ubuntu-latest - name: chmod +x - run: chmod +x -v kubescape-*/kubescape-* - - name: Build and push image for linux/amd64 - run: docker buildx build . --file build/kubescape-cli.Dockerfile --tag ${{ inputs.image_name }}:${{ inputs.image_tag }} --tag ${{ inputs.image_name }}:latest --build-arg image_version=${{ inputs.image_tag }} --build-arg client=${{ inputs.client }} --build-arg ks_binary=kubescape-ubuntu-latest/kubescape-ubuntu-latest --push --platform linux/amd64 - - name: Build and push image for linux/arm64 - run: docker buildx build . --file build/kubescape-cli.Dockerfile --tag ${{ inputs.image_name }}:${{ inputs.image_tag }} --tag ${{ inputs.image_name }}:latest --build-arg image_version=${{ inputs.image_tag }} --build-arg client=${{ inputs.client }} --build-arg ks_binary=kubescape-arm64-ubuntu-latest/kubescape-arm64-ubuntu-latest --push --platform linux/arm64 + run: chmod +x -v kubescape-a* + - name: Build and push images + run: docker buildx build . --file build/kubescape-cli.Dockerfile --tag ${{ inputs.image_name }}:${{ inputs.image_tag }} --tag ${{ inputs.image_name }}:latest --build-arg image_version=${{ inputs.image_tag }} --build-arg client=${{ inputs.client }} --push --platform linux/amd64,linux/arm64 - name: Install cosign uses: sigstore/cosign-installer@4079ad3567a89f68395480299c77e40170430341 # ratchet:sigstore/cosign-installer@main with: diff --git a/build/kubescape-cli.Dockerfile b/build/kubescape-cli.Dockerfile index 48391802..a2622f8c 100644 --- a/build/kubescape-cli.Dockerfile +++ b/build/kubescape-cli.Dockerfile @@ -3,10 +3,10 @@ FROM gcr.io/distroless/base-debian11:debug-nonroot USER nonroot WORKDIR /home/nonroot/ -ARG image_version client ks_binary +ARG image_version client TARGETARCH ENV RELEASE=$image_version CLIENT=$client -COPY $ks_binary /usr/bin/kubescape +COPY kubescape-${TARGETARCH}-ubuntu-latest /usr/bin/kubescape RUN ["kubescape", "download", "artifacts"] ENTRYPOINT ["kubescape"]