mirror of
https://github.com/kubescape/kubescape.git
synced 2026-03-20 18:38:36 +00:00
Compare commits
1 Commits
pool
...
github-act
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
e09bb2e310 |
@@ -1,38 +1,50 @@
|
|||||||
FROM golang:1.20-bullseye as builder
|
FROM golang:1.20-alpine as builder
|
||||||
ARG image_version client
|
|
||||||
ENV GO111MODULE=on CGO_ENABLED=1 PYTHONUNBUFFERED=1 RELEASE=$image_version CLIENT=$client
|
ARG image_version
|
||||||
|
ARG client
|
||||||
|
|
||||||
|
ENV RELEASE=$image_version
|
||||||
|
ENV CLIENT=$client
|
||||||
|
|
||||||
|
ENV GO111MODULE=
|
||||||
|
|
||||||
|
ENV CGO_ENABLED=1
|
||||||
|
|
||||||
# Install required python/pip
|
# Install required python/pip
|
||||||
RUN apt update
|
ENV PYTHONUNBUFFERED=1
|
||||||
RUN apt install -y cmake python3-pip
|
RUN apk add --update --no-cache python3 gcc make git libc-dev binutils-gold cmake pkgconfig && ln -sf python3 /usr/bin/python
|
||||||
|
RUN python3 -m ensurepip
|
||||||
RUN pip3 install --no-cache --upgrade pip setuptools
|
RUN pip3 install --no-cache --upgrade pip setuptools
|
||||||
|
|
||||||
WORKDIR /work
|
WORKDIR /work
|
||||||
ADD . .
|
ADD . .
|
||||||
|
|
||||||
# install libgit2
|
# install libgit2
|
||||||
RUN --mount=type=cache,target=/root/.cache/go-build \
|
RUN rm -rf git2go && make libgit2
|
||||||
--mount=type=cache,target=/go/pkg \
|
|
||||||
make libgit2
|
|
||||||
|
|
||||||
# build kubescape server
|
# build kubescape server
|
||||||
WORKDIR /work/httphandler
|
WORKDIR /work/httphandler
|
||||||
RUN --mount=type=cache,target=/root/.cache/go-build \
|
RUN python build.py
|
||||||
--mount=type=cache,target=/go/pkg \
|
|
||||||
python3 build.py
|
|
||||||
RUN ls -ltr build/
|
RUN ls -ltr build/
|
||||||
|
|
||||||
# build kubescape cmd
|
# build kubescape cmd
|
||||||
WORKDIR /work
|
WORKDIR /work
|
||||||
RUN --mount=type=cache,target=/root/.cache/go-build \
|
RUN python build.py
|
||||||
--mount=type=cache,target=/go/pkg \
|
|
||||||
python3 build.py
|
|
||||||
|
|
||||||
RUN /work/build/kubescape-ubuntu-latest download artifacts -o /work/artifacts
|
RUN /work/build/kubescape-ubuntu-latest download artifacts -o /work/artifacts
|
||||||
|
|
||||||
FROM gcr.io/distroless/base-debian11:nonroot
|
FROM alpine:3.16.2
|
||||||
|
|
||||||
|
RUN addgroup -S ks && adduser -S ks -G ks
|
||||||
|
|
||||||
|
COPY --from=builder /work/artifacts/ /home/ks/.kubescape
|
||||||
|
|
||||||
|
RUN chown -R ks:ks /home/ks/.kubescape
|
||||||
|
|
||||||
|
USER ks
|
||||||
|
|
||||||
|
WORKDIR /home/ks
|
||||||
|
|
||||||
COPY --from=builder /work/artifacts/ /home/nonroot/.kubescape
|
|
||||||
COPY --from=builder /work/httphandler/build/kubescape-ubuntu-latest /usr/bin/ksserver
|
COPY --from=builder /work/httphandler/build/kubescape-ubuntu-latest /usr/bin/ksserver
|
||||||
COPY --from=builder /work/build/kubescape-ubuntu-latest /usr/bin/kubescape
|
COPY --from=builder /work/build/kubescape-ubuntu-latest /usr/bin/kubescape
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user