engineering/sshpiper
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: Dockerfile - Use HereDoc syntax (#567)

Browse source 
* chore: `Dockerfile` - Use HereDoc syntax

* Update Dockerfile

* Update Dockerfile
This commit is contained in:
Brennan Kinney 2025-04-29 05:05:36 +12:00 • committed by GitHub
parent 587fb74c50
commit 52e8f9afc4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 28 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

45
Dockerfile
View file

@ -1,38 +1,49 @@
FROM docker.io/golang:1.24-bookworm as builder
ARG VER=devel
ARG BUILDTAGS=""
ARG EXTERNAL="0"
ARG BUILDTAGS
ARG EXTERNAL=0
ENV CGO_ENABLED=0
RUN mkdir -p /sshpiperd/plugins
WORKDIR /src
RUN --mount=target=/src,type=bind,source=. --mount=type=cache,target=/root/.cache/go-build if [ "$EXTERNAL" = "1" ]; then cp sshpiperd /sshpiperd; else go build -o /sshpiperd -ldflags "-X main.mainver=$VER" ./cmd/... ; fi
RUN --mount=target=/src,type=bind,source=. --mount=type=cache,target=/root/.cache/go-build if [ "$EXTERNAL" = "1" ]; then cp -r plugins /sshpiperd ; else go build -o /sshpiperd/plugins -tags "$BUILDTAGS" ./plugin/... ./e2e/testplugin/...; fi
RUN \
--mount=target=/src,type=bind,source=. \
--mount=type=cache,target=/root/.cache/go-build \
<<HEREDOC
# Create directories required for `cp` / `go build -o`:
mkdir -p /sshpiperd/plugins
if [ "${EXTERNAL}" = "1" ]; then
cp sshpiperd /sshpiperd
cp -r plugins /sshpiperd
else
go build -o /sshpiperd -ldflags "-X main.mainver=${VER}" ./cmd/...
go build -o /sshpiperd/plugins -tags "${BUILDTAGS}" ./plugin/... ./e2e/testplugin/...
fi
HEREDOC
ADD entrypoint.sh /sshpiperd
FROM builder as testrunner
COPY --from=farmer1992/openssh-static:V_9_8_P1 /usr/bin/ssh /usr/bin/ssh-9.8p1
COPY --from=farmer1992/openssh-static:V_8_0_P1 /usr/bin/ssh /usr/bin/ssh-8.0p1
FROM docker.io/busybox
# LABEL maintainer="Boshi Lian<farmer1992@gmail.com>"
RUN mkdir /etc/ssh/
# Add user nobody with id 1
ARG USERID=1000
ARG GROUPID=1000
RUN addgroup -g $GROUPID -S sshpiperd && adduser -u $USERID -S sshpiperd -G sshpiperd
RUN <<HEREDOC
# Add a non-root system (-S) user/group to run `sshpiperd` with (final arg is group/user name):
addgroup -S -g "${GROUPID}" sshpiperd
adduser -S -u "${USERID}" -G sshpiperd sshpiperd
# Add execution rwx to user 1
RUN chown -R $USERID:$GROUPID /etc/ssh/
# Support `SSHPIPERD_SERVER_KEY_GENERATE_MODE=notexist` to create host key at `/etc/ssh`:
mkdir /etc/ssh/
chown -R "${USERID}:${GROUPID}" /etc/ssh/
HEREDOC
COPY --from=builder --chown=${USERID} /sshpiperd/ /sshpiperd
USER $USERID:$GROUPID
COPY --from=builder --chown=$USERID /sshpiperd/ /sshpiperd
# Runtime setup:
USER ${USERID}:${GROUPID}
EXPOSE 2222
ENTRYPOINT ["/sshpiperd/entrypoint.sh"]