Files
plane/apps/api/Dockerfile.fips
T
pratapalakshmiandGitHub ea35af3250 [INFRA-302] feat: make plane-ee FIPS compliant (#5326)
* feat: add Dockerfile for FIPS compliance

* refactor: reorganize FIPS build configuration in GitHub Actions workflow

- Moved the FIPS build input to a more logical position in the workflow.
- Updated environment variable handling for FIPS builds.
- Removed the deprecated docker-compose-fips.yml file and adjusted related upload steps.
- Improved readability by consolidating Dockerfile path conditions.

* chore: update GitHub Actions workflow to use [email protected] and streamline Dockerfile path handling

- Upgraded the build-push action version to v1.3.0 for all build steps.
- Simplified Dockerfile path conditions for various services.
- Consolidated FIPS build logic for better clarity and maintainability.

* refactor: simplify FIPS build logic in GitHub Actions workflow

- Removed conditional FIPS build suffix from branch name generation.
- Updated airgapped artifacts packaging condition to focus solely on airgapped builds.

* fix: remove quotes from Dockerfile paths in GitHub Actions workflow

- Updated Dockerfile paths in the build-branch-ee.yml workflow to remove unnecessary quotes for consistency and clarity.
2026-02-09 16:06:25 +05:30

68 lines
1.4 KiB
Docker

FROM registry.access.redhat.com/ubi10/python-312-minimal
# -------------------------
# Base environment
# -------------------------
USER root
ENV PYTHONDONTWRITEBYTECODE=1 \
PYTHONUNBUFFERED=1 \
PIP_DISABLE_PIP_VERSION_CHECK=1 \
INSTANCE_CHANGELOG_URL=https://sites.plane.so/pages/f366114e9aba4cbfbe4265b8f2b74f65/
WORKDIR /code
# -------------------------
# Runtime OS dependencies
# -------------------------
RUN microdnf install -y \
postgresql-libs \
postgresql-devel \
libxslt \
xmlsec1 \
xmlsec1-openssl \
ca-certificates \
openldap-devel \
libffi-devel \
python3.12-devel \
gcc \
make \
hostname \
iproute \
procps-ng \
gawk \
openssl \
&& microdnf clean all \
&& rm -rf /var/cache/microdnf
# -------------------------
# Python deps
# -------------------------
COPY requirements.txt .
COPY requirements ./requirements
RUN pip install -r requirements.txt --compile --no-cache-dir
# -------------------------
# App files
# -------------------------
COPY manage.py manage.py
COPY plane plane/
COPY templates templates/
COPY package.json package.json
COPY ./bin ./bin/
RUN mkdir -p /code/plane/logs && \
chown -R 1001:0 /code/plane && \
chmod +x ./bin/*
# -------------------------
# Drop privileges
# -------------------------
USER 1001
# Expose container port and run entry point script
EXPOSE 8000
CMD ["./bin/docker-entrypoint-api.sh"]