* feat: add Dockerfile for FIPS compliance * refactor: reorganize FIPS build configuration in GitHub Actions workflow - Moved the FIPS build input to a more logical position in the workflow. - Updated environment variable handling for FIPS builds. - Removed the deprecated docker-compose-fips.yml file and adjusted related upload steps. - Improved readability by consolidating Dockerfile path conditions. * chore: update GitHub Actions workflow to use [email protected] and streamline Dockerfile path handling - Upgraded the build-push action version to v1.3.0 for all build steps. - Simplified Dockerfile path conditions for various services. - Consolidated FIPS build logic for better clarity and maintainability. * refactor: simplify FIPS build logic in GitHub Actions workflow - Removed conditional FIPS build suffix from branch name generation. - Updated airgapped artifacts packaging condition to focus solely on airgapped builds. * fix: remove quotes from Dockerfile paths in GitHub Actions workflow - Updated Dockerfile paths in the build-branch-ee.yml workflow to remove unnecessary quotes for consistency and clarity.
68 lines
1.4 KiB
Docker
68 lines
1.4 KiB
Docker
FROM registry.access.redhat.com/ubi10/python-312-minimal
|
|
|
|
# -------------------------
|
|
# Base environment
|
|
# -------------------------
|
|
USER root
|
|
|
|
ENV PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
PIP_DISABLE_PIP_VERSION_CHECK=1 \
|
|
INSTANCE_CHANGELOG_URL=https://sites.plane.so/pages/f366114e9aba4cbfbe4265b8f2b74f65/
|
|
|
|
WORKDIR /code
|
|
|
|
# -------------------------
|
|
# Runtime OS dependencies
|
|
# -------------------------
|
|
RUN microdnf install -y \
|
|
postgresql-libs \
|
|
postgresql-devel \
|
|
libxslt \
|
|
xmlsec1 \
|
|
xmlsec1-openssl \
|
|
ca-certificates \
|
|
openldap-devel \
|
|
libffi-devel \
|
|
python3.12-devel \
|
|
gcc \
|
|
make \
|
|
hostname \
|
|
iproute \
|
|
procps-ng \
|
|
gawk \
|
|
openssl \
|
|
&& microdnf clean all \
|
|
&& rm -rf /var/cache/microdnf
|
|
|
|
# -------------------------
|
|
# Python deps
|
|
# -------------------------
|
|
COPY requirements.txt .
|
|
COPY requirements ./requirements
|
|
|
|
RUN pip install -r requirements.txt --compile --no-cache-dir
|
|
|
|
# -------------------------
|
|
# App files
|
|
# -------------------------
|
|
COPY manage.py manage.py
|
|
COPY plane plane/
|
|
COPY templates templates/
|
|
COPY package.json package.json
|
|
COPY ./bin ./bin/
|
|
|
|
RUN mkdir -p /code/plane/logs && \
|
|
chown -R 1001:0 /code/plane && \
|
|
chmod +x ./bin/*
|
|
|
|
# -------------------------
|
|
# Drop privileges
|
|
# -------------------------
|
|
USER 1001
|
|
|
|
# Expose container port and run entry point script
|
|
EXPOSE 8000
|
|
|
|
CMD ["./bin/docker-entrypoint-api.sh"]
|