|
1 | | -FROM --platform=$BUILDPLATFORM tonistiigi/xx:1.4.0@sha256:0cd3f05c72d6c9b038eb135f91376ee1169ef3a330d34e418e65e2a5c2e9c0d4 AS xx |
| 1 | +FROM alpine:latest |
2 | 2 |
|
3 | | -FROM --platform=$BUILDPLATFORM golang:1.22.3-alpine3.18@sha256:d1a601b64de09e2fa38c95e55838961811d5ca11062a8f4230a5c434b3ae2a34 AS builder |
4 | | - |
5 | | -COPY --from=xx / / |
6 | | - |
7 | | -RUN apk add --update --no-cache ca-certificates make git curl clang lld |
8 | | - |
9 | | -ARG TARGETPLATFORM |
10 | | - |
11 | | -RUN xx-apk --update --no-cache add musl-dev gcc |
12 | | - |
13 | | -RUN xx-go --wrap |
14 | | - |
15 | | -WORKDIR /usr/local/src/bank-vaults |
16 | | - |
17 | | -ARG GOPROXY |
18 | | - |
19 | | -ENV CGO_ENABLED=1 |
20 | | - |
21 | | -COPY go.* ./ |
22 | | -RUN go mod download |
23 | | - |
24 | | -COPY . . |
25 | | - |
26 | | -RUN go build -o /usr/local/bin/bank-vaults ./cmd/bank-vaults/ |
27 | | -RUN xx-verify /usr/local/bin/bank-vaults |
28 | | - |
29 | | -RUN go build -o /usr/local/bin/template ./cmd/template/ |
30 | | -RUN xx-verify /usr/local/bin/template |
31 | | - |
32 | | -FROM alpine:3.20.1@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0 AS common |
33 | | - |
34 | | -RUN apk add --update --no-cache ca-certificates tzdata |
35 | | - |
36 | | -# Install tools for accessing smart cards |
37 | | -RUN apk add --no-cache ccid opensc pcsc-lite-libs |
38 | | - |
39 | | -COPY --from=builder /usr/local/bin/bank-vaults /usr/local/bin/bank-vaults |
40 | | -COPY --from=builder /usr/local/bin/template /usr/local/bin/template |
41 | | -COPY --from=builder /usr/local/src/bank-vaults/scripts/pcscd-entrypoint.sh /usr/local/bin/pcscd-entrypoint.sh |
42 | | - |
43 | | -ENTRYPOINT ["bank-vaults"] |
44 | | - |
45 | | -FROM common AS softhsm |
46 | | - |
47 | | -RUN apk add --no-cache softhsm |
48 | | - |
49 | | -USER 65534 |
50 | | - |
51 | | -# Initializing SoftHSM to be able to create a working example (only for dev), |
52 | | -# sharing the HSM device is emulated with a pre-created keypair in the image. |
53 | | -RUN softhsm2-util --init-token --free --label bank-vaults --so-pin bank-vaults --pin bank-vaults |
54 | | -RUN pkcs11-tool --module /usr/lib/softhsm/libsofthsm2.so --keypairgen --key-type rsa:2048 --pin bank-vaults --token-label bank-vaults --label bank-vaults |
55 | | - |
56 | | -FROM common |
57 | | - |
58 | | -USER 65534 |
| 3 | +CMD ["/bin/sh", "-c", "echo Hello world"] |
0 commit comments