5406849598
OBS-URL: https://build.opensuse.org/package/show/devel:BCI:Tumbleweed/nginx-image?expand=0&rev=334
74 lines
3.4 KiB
Docker
74 lines
3.4 KiB
Docker
# SPDX-License-Identifier: MIT
|
|
|
|
# Copyright (c) 2026 SUSE LLC
|
|
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon.
|
|
|
|
# The content of THIS FILE IS AUTOGENERATED and should not be manually modified.
|
|
# It is maintained by the BCI team and generated by
|
|
# https://github.com/SUSE/BCI-dockerfile-generator
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
# You can contact the BCI team via https://github.com/SUSE/bci/discussions
|
|
|
|
#!UseOBSRepositories
|
|
|
|
#!BuildTag: opensuse/nginx:1.29-%RELEASE%
|
|
#!BuildTag: opensuse/nginx:1.29
|
|
#!BuildTag: opensuse/nginx:latest
|
|
|
|
FROM opensuse/bci/bci-micro:latest AS target
|
|
FROM opensuse/tumbleweed:latest AS builder
|
|
COPY --from=target / /target
|
|
|
|
RUN set -euo pipefail; \
|
|
export PERMCTL_ALLOW_INSECURE_MODE_IF_NO_PROC=1; \
|
|
zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends curl gawk nginx findutils envsubst
|
|
# sanity check that the version from the tag is equal to the version of nginx that we expect
|
|
RUN set -euo pipefail; \
|
|
[ "$(rpm --root /target -q --qf '%{version}' nginx | \
|
|
cut -d '.' -f -2)" = "1.29" ]
|
|
|
|
# cleanup logs and temporary files
|
|
RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
|
|
rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
|
|
rm -rf {/target,}/run/*; \
|
|
rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
|
|
rm -f {/target,}/usr/lib/sysimage/rpm/.rpm.lock; \
|
|
rm -f {/target,}/var/cache/ldconfig/aux-cache; \
|
|
command -v zypper >/dev/null 2>&1 || rm -f /var/lib/zypp/AutoInstalled
|
|
|
|
# set the day of last password change to empty
|
|
RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
|
|
FROM opensuse/bci/bci-micro:latest
|
|
COPY --from=builder /target /
|
|
# Define labels according to https://en.opensuse.org/Building_derived_containers
|
|
# labelprefix=org.opensuse.application.nginx
|
|
LABEL org.opencontainers.image.title="openSUSE Tumbleweed NGINX"
|
|
LABEL org.opencontainers.image.description="NGINX open source all-in-one load balancer, content cache and web server based on the openSUSE Tumbleweed Base Container Image."
|
|
LABEL org.opencontainers.image.version="1.29"
|
|
LABEL org.opencontainers.image.url="https://www.opensuse.org"
|
|
LABEL org.opencontainers.image.created="%BUILDTIME%"
|
|
LABEL org.opencontainers.image.vendor="openSUSE Project"
|
|
LABEL org.opencontainers.image.source="%SOURCEURL%"
|
|
LABEL org.opencontainers.image.ref.name="1.29-%RELEASE%"
|
|
LABEL org.opensuse.reference="registry.opensuse.org/opensuse/nginx:1.29-%RELEASE%"
|
|
LABEL org.openbuildservice.disturl="%DISTURL%"
|
|
LABEL org.opensuse.lifecycle-url="https://en.opensuse.org/Lifetime#openSUSE_BCI"
|
|
LABEL org.opensuse.release-stage="released"
|
|
# endlabelprefix
|
|
LABEL io.artifacthub.package.readme-url="%SOURCEURL_WITH(README.md)%"
|
|
ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
|
|
CMD ["nginx", "-g", "daemon off;"]
|
|
EXPOSE 80/tcp
|
|
|
|
RUN set -euo pipefail; mkdir /docker-entrypoint.d
|
|
COPY [1-3]0-*.sh /docker-entrypoint.d/
|
|
COPY docker-entrypoint.sh /usr/local/bin
|
|
COPY index.html /srv/www/htdocs/
|
|
RUN set -euo pipefail; chmod +x /docker-entrypoint.d/*.sh /usr/local/bin/docker-entrypoint.sh
|
|
RUN set -euo pipefail; install -d -o nginx -g nginx -m 750 /var/log/nginx; ln -sf /dev/stdout /var/log/nginx/access.log; ln -sf /dev/stderr /var/log/nginx/error.log
|
|
STOPSIGNAL SIGQUIT
|