2022-01-19 00:40:28 +00:00
|
|
|
ARG BASEIMAGE=alpine:3.15.0
|
|
|
|
|
2022-01-07 04:06:48 +00:00
|
|
|
FROM golang:1.17.6-alpine3.14 AS builder
|
2016-08-09 22:26:32 +00:00
|
|
|
|
2021-01-23 18:13:13 +00:00
|
|
|
WORKDIR /usr/local/src/dex
|
|
|
|
|
2022-01-18 17:40:27 +00:00
|
|
|
RUN apk add --no-cache --update alpine-sdk ca-certificates openssl
|
2021-01-23 18:13:13 +00:00
|
|
|
|
2020-09-27 21:47:39 +00:00
|
|
|
ARG TARGETOS
|
|
|
|
ARG TARGETARCH
|
|
|
|
ARG TARGETVARIANT=""
|
|
|
|
|
2021-01-23 18:13:13 +00:00
|
|
|
ENV GOOS=${TARGETOS} GOARCH=${TARGETARCH} GOARM=${TARGETVARIANT}
|
2017-09-18 06:56:39 +00:00
|
|
|
|
2020-11-05 13:26:39 +00:00
|
|
|
ARG GOPROXY
|
|
|
|
|
|
|
|
COPY go.mod go.sum ./
|
|
|
|
COPY api/v2/go.mod api/v2/go.sum ./api/v2/
|
|
|
|
RUN go mod download
|
|
|
|
|
2020-09-27 21:47:39 +00:00
|
|
|
COPY . .
|
|
|
|
|
|
|
|
RUN make release-binary
|
2017-09-18 06:56:39 +00:00
|
|
|
|
2022-01-19 00:40:28 +00:00
|
|
|
FROM alpine:3.15.0 AS stager
|
|
|
|
|
|
|
|
RUN mkdir -p /var/dex
|
|
|
|
RUN mkdir -p /etc/dex
|
|
|
|
COPY config.docker.yaml /etc/dex/
|
|
|
|
|
2021-11-25 04:05:42 +00:00
|
|
|
FROM alpine:3.15.0 AS gomplate
|
2021-01-29 04:34:38 +00:00
|
|
|
|
|
|
|
ARG TARGETOS
|
|
|
|
ARG TARGETARCH
|
|
|
|
ARG TARGETVARIANT
|
2021-02-04 15:43:00 +00:00
|
|
|
|
|
|
|
ENV GOMPLATE_VERSION=v3.9.0
|
2021-01-29 04:34:38 +00:00
|
|
|
|
2021-01-28 21:48:30 +00:00
|
|
|
RUN wget -O /usr/local/bin/gomplate \
|
2021-11-15 13:27:45 +00:00
|
|
|
"https://github.com/hairyhenderson/gomplate/releases/download/${GOMPLATE_VERSION}/gomplate_${TARGETOS:-linux}-${TARGETARCH:-amd64}${TARGETVARIANT}" \
|
|
|
|
&& chmod +x /usr/local/bin/gomplate
|
2016-08-09 22:26:32 +00:00
|
|
|
|
2021-01-29 09:46:47 +00:00
|
|
|
|
2022-01-19 00:40:28 +00:00
|
|
|
FROM $BASEIMAGE
|
2020-09-27 21:47:39 +00:00
|
|
|
|
2016-11-15 01:25:19 +00:00
|
|
|
# Dex connectors, such as GitHub and Google logins require root certificates.
|
|
|
|
# Proper installations should manage those certificates, but it's a bad user
|
|
|
|
# experience when this doesn't work out of the box.
|
|
|
|
#
|
2022-01-18 17:40:27 +00:00
|
|
|
# See https://go.dev/src/crypto/x509/root_linux.go for Go root CA bundle locations.
|
|
|
|
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
2016-08-09 22:26:32 +00:00
|
|
|
|
2022-01-19 00:40:28 +00:00
|
|
|
COPY --from=stager --chown=1001:1001 /var/dex /var/dex
|
|
|
|
COPY --from=stager --chown=1001:1001 /etc/dex /etc/dex
|
2021-01-28 11:25:55 +00:00
|
|
|
|
2021-01-23 17:45:12 +00:00
|
|
|
# Copy module files for CVE scanning / dependency analysis.
|
2021-01-23 17:58:04 +00:00
|
|
|
COPY --from=builder /usr/local/src/dex/go.mod /usr/local/src/dex/go.sum /usr/local/src/dex/
|
|
|
|
COPY --from=builder /usr/local/src/dex/api/v2/go.mod /usr/local/src/dex/api/v2/go.sum /usr/local/src/dex/api/v2/
|
2021-01-23 17:45:12 +00:00
|
|
|
|
2021-01-23 17:58:04 +00:00
|
|
|
COPY --from=builder /go/bin/dex /usr/local/bin/dex
|
2022-01-18 17:24:05 +00:00
|
|
|
COPY --from=builder /go/bin/docker-entrypoint /usr/local/bin/docker-entrypoint
|
2021-03-22 10:59:55 +00:00
|
|
|
COPY --from=builder /usr/local/src/dex/web /srv/dex/web
|
2021-01-23 17:46:56 +00:00
|
|
|
|
2021-03-22 10:59:55 +00:00
|
|
|
COPY --from=gomplate /usr/local/bin/gomplate /usr/local/bin/gomplate
|
2016-11-30 22:26:54 +00:00
|
|
|
|
2021-01-23 18:06:24 +00:00
|
|
|
USER 1001:1001
|
|
|
|
|
2022-01-18 17:24:05 +00:00
|
|
|
ENTRYPOINT ["/usr/local/bin/docker-entrypoint"]
|
2021-02-04 15:43:00 +00:00
|
|
|
CMD ["dex", "serve", "/etc/dex/config.docker.yaml"]
|