Move Dockerfiles to Component Directories #1846
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,52 @@ | ||
| # syntax=docker/dockerfile:1@sha256:e87caa74dcb7d46cd820352bfea12591f3dba3ddc4285e19c7dcd13359f7cefd | ||
|
There was a problem hiding this comment. instead of creating a dockerfiles directory, put each dockerfile in the correct directory according to his suffix |
||
|
|
||
| # xx is a helper for cross-compilation | ||
| FROM --platform=$BUILDPLATFORM tonistiigi/xx:1.4.0@sha256:0cd3f05c72d6c9b038eb135f91376ee1169ef3a330d34e418e65e2a5c2e9c0d4 AS xx | ||
|
|
||
| FROM --platform=$BUILDPLATFORM golang:1.22.4-bullseye@sha256:067c5c7fe6d79f900c5ebe8351166356d6e3bbfcc6f807030e89b9a929252273 AS builder | ||
|
|
||
| COPY --link --from=xx / / | ||
|
|
||
| ARG TARGETPLATFORM | ||
|
|
||
| RUN --mount=type=cache,id=${TARGETPLATFORM}-apt,target=/var/cache/apt,sharing=locked \ | ||
| apt-get update \ | ||
| && xx-apt-get install -y --no-install-recommends \ | ||
| gcc \ | ||
| libc6-dev | ||
|
|
||
| WORKDIR /build/api/server | ||
|
|
||
| RUN --mount=type=cache,target=/go/pkg/mod \ | ||
| --mount=type=cache,target=/root/.cache/go-build \ | ||
| --mount=type=bind,source=.,target=/build,ro \ | ||
| xx-go mod download -x | ||
|
|
||
| ARG VERSION | ||
| ARG BUILD_TIMESTAMP | ||
| ARG COMMIT_HASH | ||
| ARG BUILD_OPTS | ||
|
|
||
| ENV CGO_ENABLED=1 | ||
|
|
||
| RUN --mount=type=cache,target=/go/pkg/mod \ | ||
| --mount=type=cache,target=/root/.cache/go-build \ | ||
| --mount=type=bind,source=.,target=/build,ro \ | ||
| xx-go build ${BUILD_OPTS} -ldflags="-s -w -extldflags -static \ | ||
| -X 'github.com/openclarity/vmclarity/core/version.Version=${VERSION}' \ | ||
| -X 'github.com/openclarity/vmclarity/core/version.CommitHash=${COMMIT_HASH}' \ | ||
| -X 'github.com/openclarity/vmclarity/core/version.BuildTimestamp=${BUILD_TIMESTAMP}'" \ | ||
| -o /bin/vmclarity-apiserver ./cmd/main.go | ||
|
|
||
| RUN xx-verify /bin/vmclarity-apiserver | ||
|
|
||
| FROM alpine:3.20@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0 | ||
|
|
||
| RUN apk add --update --no-cache \ | ||
| ca-certificates \ | ||
| libc6-compat | ||
|
|
||
| COPY --from=builder ["/bin/vmclarity-apiserver", "/bin/vmclarity-apiserver"] | ||
|
|
||
| ENTRYPOINT ["/bin/vmclarity-apiserver"] | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,56 @@ | ||
| # syntax=docker/dockerfile:1@sha256:e87caa74dcb7d46cd820352bfea12591f3dba3ddc4285e19c7dcd13359f7cefd | ||
|
|
||
| ARG VMCLARITY_TOOLS_BASE=ghcr.io/openclarity/vmclarity-tools-base:v0.6.0@sha256:dc9779be25bdbd3a8725e768764a223b8ba5fd906fc5afc67b417886086806d8 | ||
| # xx is a helper for cross-compilation | ||
| FROM --platform=$BUILDPLATFORM tonistiigi/xx:1.4.0@sha256:0cd3f05c72d6c9b038eb135f91376ee1169ef3a330d34e418e65e2a5c2e9c0d4 AS xx | ||
|
|
||
| FROM --platform=$BUILDPLATFORM golang:1.22.4-bullseye@sha256:067c5c7fe6d79f900c5ebe8351166356d6e3bbfcc6f807030e89b9a929252273 AS builder | ||
|
|
||
| COPY --link --from=xx / / | ||
|
|
||
| ARG TARGETPLATFORM | ||
|
|
||
| RUN --mount=type=cache,id=${TARGETPLATFORM}-apt,target=/var/cache/apt,sharing=locked \ | ||
| apt-get update \ | ||
| && xx-apt-get install -y --no-install-recommends \ | ||
| gcc \ | ||
| libc6-dev | ||
|
|
||
| WORKDIR /build/cli | ||
|
|
||
| RUN --mount=type=cache,target=/go/pkg/mod \ | ||
| --mount=type=cache,target=/root/.cache/go-build \ | ||
| --mount=type=bind,source=.,target=/build,ro \ | ||
| xx-go mod download -x | ||
|
|
||
| ARG VERSION | ||
| ARG BUILD_TIMESTAMP | ||
| ARG COMMIT_HASH | ||
| ARG BUILD_OPTS | ||
|
|
||
| ENV CGO_ENABLED=1 | ||
|
|
||
| RUN --mount=type=cache,target=/go/pkg/mod \ | ||
| --mount=type=cache,target=/root/.cache/go-build \ | ||
| --mount=type=bind,source=.,target=/build,ro \ | ||
| xx-go build ${BUILD_OPTS} -ldflags="-s -w -extldflags -static \ | ||
| -X 'github.com/openclarity/vmclarity/core/version.Version=${VERSION}' \ | ||
| -X 'github.com/openclarity/vmclarity/core/version.CommitHash=${COMMIT_HASH}' \ | ||
| -X 'github.com/openclarity/vmclarity/core/version.BuildTimestamp=${BUILD_TIMESTAMP}'" \ | ||
| -o /bin/vmclarity-cli cmd/main.go | ||
|
|
||
| FROM ${VMCLARITY_TOOLS_BASE} | ||
|
|
||
| RUN apk upgrade --quiet --no-cache | ||
|
|
||
| RUN apk add --update --no-cache \ | ||
| util-linux \ | ||
| ca-certificates \ | ||
| libc6-compat | ||
|
|
||
| COPY --from=builder /bin/vmclarity-cli /bin/vmclarity-cli | ||
|
|
||
| ENTRYPOINT ["/bin/vmclarity-cli"] | ||
|
|
||
| CMD ["--help"] | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,52 @@ | ||
| # syntax=docker/dockerfile:1@sha256:e87caa74dcb7d46cd820352bfea12591f3dba3ddc4285e19c7dcd13359f7cefd | ||
|
|
||
| # xx is a helper for cross-compilation | ||
| FROM --platform=$BUILDPLATFORM tonistiigi/xx:1.4.0@sha256:0cd3f05c72d6c9b038eb135f91376ee1169ef3a330d34e418e65e2a5c2e9c0d4 AS xx | ||
|
|
||
| FROM --platform=$BUILDPLATFORM golang:1.22.4-bullseye@sha256:067c5c7fe6d79f900c5ebe8351166356d6e3bbfcc6f807030e89b9a929252273 AS builder | ||
|
|
||
| COPY --link --from=xx / / | ||
|
|
||
| ARG TARGETPLATFORM | ||
|
|
||
| RUN --mount=type=cache,id=${TARGETPLATFORM}-apt,target=/var/cache/apt,sharing=locked \ | ||
| apt-get update \ | ||
| && xx-apt-get install -y --no-install-recommends \ | ||
| gcc \ | ||
| libc6-dev | ||
|
|
||
| WORKDIR /build/orchestrator | ||
|
|
||
| RUN --mount=type=cache,target=/go/pkg/mod \ | ||
| --mount=type=cache,target=/root/.cache/go-build \ | ||
| --mount=type=bind,source=.,target=/build,ro \ | ||
| xx-go mod download -x | ||
|
|
||
| ARG VERSION | ||
| ARG BUILD_TIMESTAMP | ||
| ARG COMMIT_HASH | ||
| ARG BUILD_OPTS | ||
|
|
||
| ENV CGO_ENABLED=1 | ||
|
|
||
| RUN --mount=type=cache,target=/go/pkg/mod \ | ||
| --mount=type=cache,target=/root/.cache/go-build \ | ||
| --mount=type=bind,source=.,target=/build,ro \ | ||
| xx-go build ${BUILD_OPTS} -ldflags="-s -w -extldflags -static \ | ||
| -X 'github.com/openclarity/vmclarity/core/version.Version=${VERSION}' \ | ||
| -X 'github.com/openclarity/vmclarity/core/version.CommitHash=${COMMIT_HASH}' \ | ||
| -X 'github.com/openclarity/vmclarity/core/version.BuildTimestamp=${BUILD_TIMESTAMP}'" \ | ||
| -o /bin/vmclarity-orchestrator ./cmd/main.go | ||
|
|
||
| RUN xx-verify /bin/vmclarity-orchestrator | ||
|
|
||
| FROM alpine:3.20@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0 | ||
|
|
||
| COPY --from=builder ["/bin/vmclarity-orchestrator", "/bin/vmclarity-orchestrator"] | ||
|
|
||
| RUN apk add --update --no-cache \ | ||
| ca-certificates \ | ||
| libc6-compat | ||
|
|
||
| ENTRYPOINT ["/bin/vmclarity-orchestrator"] | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,25 @@ | ||
| FROM --platform=$BUILDPLATFORM golang:1.22.4-alpine3.19@sha256:c46c4609d3cc74a149347161fc277e11516f523fd8aa6347c9631527da0b7a56 AS builder | ||
|
|
||
| ARG TARGETOS TARGETARCH | ||
|
|
||
| WORKDIR /build/plugins/sdk-go/example | ||
|
|
||
| RUN --mount=type=cache,target=/go/pkg/mod \ | ||
| --mount=type=bind,source=.,target=/build,ro \ | ||
| go mod download -x | ||
|
|
||
| RUN --mount=type=cache,target=/go/pkg/mod \ | ||
| --mount=type=cache,target=/root/.cache/go-build \ | ||
| --mount=type=bind,source=.,target=/build,ro \ | ||
| GOOS=$TARGETOS GOARCH=$TARGETARCH CGO_ENABLED=0 \ | ||
| go build -ldflags="-s -w -extldflags -static" \ | ||
| -o /bin/scanner ./main.go | ||
|
|
||
| FROM alpine:3.20@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0 | ||
|
|
||
| COPY --from=builder /bin/scanner /bin/scanner | ||
|
|
||
| USER 65534 | ||
|
|
||
| ENTRYPOINT ["/bin/scanner"] | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,22 @@ | ||
| FROM python:3.12-slim | ||
|
|
||
| RUN apt-get update && \ | ||
| apt-get install --no-install-recommends -y git | ||
|
|
||
| # Set the working directory in the container | ||
| WORKDIR /app | ||
|
|
||
| # Copy the current directory contents into the container at /app | ||
| COPY . /app | ||
|
|
||
| # Install any needed dependencies specified in requirements.txt | ||
| RUN pip install --no-cache-dir -r requirements.txt | ||
|
|
||
| # Make sure all messages always reach console | ||
| ENV PYTHONUNBUFFERED=1 | ||
|
|
||
| USER 65534 | ||
|
|
||
| # Run scanner when the container launches | ||
| CMD ["python3", "/app/scanner.py"] | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,44 @@ | ||
| FROM ubuntu:24.04 AS builder-image | ||
|
|
||
| # Avoid stuck build due to user prompt | ||
| ARG DEBIAN_FRONTEND=noninteractive | ||
|
|
||
| RUN apt-get update && \ | ||
| apt-get install --no-install-recommends -y python3.12 python3.12-dev python3.12-venv python3-pip python3-wheel build-essential && \ | ||
| apt-get clean && rm -rf /var/lib/apt/lists/* | ||
|
|
||
| # Create and activate virtual environment | ||
| # Using final folder name to avoid path issues with packages | ||
| RUN python3.12 -m venv /venv | ||
| ENV PATH="/venv/bin:$PATH" | ||
|
|
||
| # Install SDK from folder | ||
| COPY ./plugins/sdk-python /pluginsdk | ||
| RUN pip3 install --no-cache-dir wheel | ||
| RUN pip3 install --no-cache-dir /pluginsdk | ||
|
|
||
|
|
||
| FROM ubuntu:24.04 AS runner-image | ||
|
|
||
| RUN apt-get update && \ | ||
| apt-get install --no-install-recommends -y python3.12 python3-venv && \ | ||
| apt-get clean && rm -rf /var/lib/apt/lists/* | ||
|
|
||
| # Copy installed venv packages | ||
| COPY --from=builder-image /venv /venv | ||
|
|
||
| # Make sure all messages always reach console | ||
| ENV PYTHONUNBUFFERED=1 | ||
|
|
||
| # Activate virtual environment | ||
| ENV VIRTUAL_ENV=/venv | ||
| ENV PATH="/venv/bin:$PATH" | ||
|
|
||
| # Copy example | ||
| COPY ./plugins/sdk-python/example ./src | ||
|
|
||
| USER 65534 | ||
|
|
||
| # Run example scanner | ||
| CMD ["python3", "/src/scanner.py"] | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| # syntax=docker/dockerfile:1@sha256:e87caa74dcb7d46cd820352bfea12591f3dba3ddc4285e19c7dcd13359f7cefd | ||
|
|
||
| FROM --platform=$BUILDPLATFORM node:20-slim AS site-build | ||
|
|
||
| WORKDIR /src | ||
|
|
||
| COPY --link ./ui /src | ||
|
|
||
| RUN --mount=type=cache,target=/src/node_modules \ | ||
| npm install | ||
|
|
||
| RUN --mount=type=cache,target=/src/node_modules \ | ||
| npm run build | ||
|
|
||
| FROM nginx:1.27.0@sha256:9c367186df9a6b18c6735357b8eb7f407347e84aea09beb184961cb83543d46e | ||
|
|
||
| COPY --from=site-build ["/src/build", "/usr/share/nginx/html"] | ||
|
|
||
| COPY --link ["ui/nginx.conf", "/etc/nginx/conf.d/default.conf"] | ||
|
|
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
why did you change this?