-
Notifications
You must be signed in to change notification settings - Fork 95
/
Dockerfile.rhel
92 lines (63 loc) · 1.84 KB
/
Dockerfile.rhel
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
ARG BUILD_IMAGE=registry.access.redhat.com/ubi8/nodejs-18
ARG SERVE_IMAGE=registry.access.redhat.com/ubi8/python-39
ARG PORT=8080
FROM $BUILD_IMAGE AS builder
# Disable NPM Update Notifications
ENV NPM_CONFIG_UPDATE_NOTIFIER=false
# Set the Working Directory
WORKDIR /tmp
# Switch to Root User
USER root
# Copy UI Code
COPY ./ui/. ./
# Install UI Dependencies
RUN npm ci
RUN chmod 777 -R node_modules
# Build IPAM UI
RUN npm run build
FROM $SERVE_IMAGE
ARG PORT
# Set Environment Variable
ENV PORT=${PORT}
# Disable PIP Root Warnings
ENV PIP_ROOT_USER_ACTION=ignore
# Set Working Directory
WORKDIR /tmp
# Switch to Root User
USER root
# Disable Subscription Manager YUM Plugin
RUN sed -i s/enabled=./enabled=0/g /etc/yum/pluginconf.d/subscription-manager.conf
# Install OpenSSH and set the password for root to "Docker!"
RUN yum update -y
RUN yum install -qq openssh-server -y \
&& echo "root:Docker!" | chpasswd \
&& systemctl enable sshd
# Enable SSH root login with Password Authentication
# RUN sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/g' /etc/ssh/sshd_config
# Copy 'sshd_config File' to /etc/ssh/
COPY sshd_config /etc/ssh/
RUN ssh-keygen -A
RUN mkdir /var/run/sshd
# Set Working Directory
WORKDIR /ipam
# Install Engine Dependencies
COPY ./engine/requirements.lock.txt /code/requirements.lock.txt
# Upgrade PIP
RUN pip install --upgrade pip --progress-bar off
# Install Dependencies
RUN pip install --no-cache-dir -r /code/requirements.lock.txt --progress-bar off
# Copy Engine Code
COPY ./engine/app ./app
COPY --from=builder /tmp/dist ./dist
# Copy Init Script
COPY ./init.sh .
# Set Script Execute Permissions
RUN chmod +x init.sh
RUN chown -R 1001:0 /ipam
RUN chown -R 1001:0 /etc/profile
# Switch to Standard User
USER 1001
# Expose Ports
EXPOSE $PORT 2222
# Execute Startup Script
ENTRYPOINT ./init.sh ${PORT}