[bitnami/cosign] Release 3.0.1-debian-12-r0 (#87309)
Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
This commit is contained in:
Bitnami Bot
GitHub
parent
e8df430fc8
commit
2fb5f6b61c
|
|
@ -0,0 +1,59 @@
|
||||||
|
# Copyright Broadcom, Inc. All Rights Reserved.
|
||||||
|
# SPDX-License-Identifier: APACHE-2.0
|
||||||
|
|
||||||
|
FROM docker.io/bitnami/minideb:bookworm
|
||||||
|
|
||||||
|
ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith"
|
||||||
|
ARG TARGETARCH
|
||||||
|
|
||||||
|
LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
|
||||||
|
org.opencontainers.image.created="2025-10-09T09:34:41Z" \
|
||||||
|
org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
|
||||||
|
org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/cosign/README.md" \
|
||||||
|
org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/cosign" \
|
||||||
|
org.opencontainers.image.title="cosign" \
|
||||||
|
org.opencontainers.image.vendor="Broadcom, Inc." \
|
||||||
|
org.opencontainers.image.version="3.0.1"
|
||||||
|
|
||||||
|
ENV HOME="/" \
|
||||||
|
OS_ARCH="${TARGETARCH:-amd64}" \
|
||||||
|
OS_FLAVOUR="debian-12" \
|
||||||
|
OS_NAME="linux"
|
||||||
|
|
||||||
|
COPY prebuildfs /
|
||||||
|
SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"]
|
||||||
|
# Install required system packages and dependencies
|
||||||
|
RUN install_packages ca-certificates curl procps
|
||||||
|
RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
|
||||||
|
DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
|
||||||
|
mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
|
||||||
|
COMPONENTS=( \
|
||||||
|
"cosign-3.0.1-0-linux-${OS_ARCH}-debian-12" \
|
||||||
|
) ; \
|
||||||
|
for COMPONENT in "${COMPONENTS[@]}"; do \
|
||||||
|
if [ ! -f "${COMPONENT}.tar.gz" ]; then \
|
||||||
|
curl -SsLf "https://${DOWNLOADS_URL}/${COMPONENT}.tar.gz" -O ; \
|
||||||
|
curl -SsLf "https://${DOWNLOADS_URL}/${COMPONENT}.tar.gz.sha256" -O ; \
|
||||||
|
fi ; \
|
||||||
|
sha256sum -c "${COMPONENT}.tar.gz.sha256" ; \
|
||||||
|
tar -zxf "${COMPONENT}.tar.gz" -C /opt/bitnami --strip-components=2 --no-same-owner ; \
|
||||||
|
rm -rf "${COMPONENT}".tar.gz{,.sha256} ; \
|
||||||
|
done
|
||||||
|
RUN apt-get update && apt-get upgrade -y && \
|
||||||
|
apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives
|
||||||
|
RUN chmod g+rwX /opt/bitnami
|
||||||
|
RUN mkdir -p "/cosign-keys" && chmod -R 777 "/cosign-keys"
|
||||||
|
RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
|
||||||
|
RUN mkdir "/.docker" && chmod g+rwX "/.docker"
|
||||||
|
RUN mkdir "/.sigstore" && chmod g+rwX "/.sigstore"
|
||||||
|
RUN uninstall_packages curl
|
||||||
|
|
||||||
|
ENV APP_VERSION="3.0.1" \
|
||||||
|
BITNAMI_APP_NAME="cosign" \
|
||||||
|
IMAGE_REVISION="0" \
|
||||||
|
PATH="/opt/bitnami/cosign/bin:$PATH"
|
||||||
|
|
||||||
|
WORKDIR /cosign-keys
|
||||||
|
USER 1001
|
||||||
|
ENTRYPOINT [ "cosign" ]
|
||||||
|
CMD [ "--help" ]
|
||||||
|
|
@ -0,0 +1,2 @@
|
||||||
|
Bitnami containers ship with software bundles. You can find the licenses under:
|
||||||
|
/opt/bitnami/[name-of-bundle]/licenses/[bundle-version].txt
|
||||||
|
|
@ -0,0 +1,27 @@
|
||||||
|
#!/bin/sh
|
||||||
|
# Copyright Broadcom, Inc. All Rights Reserved.
|
||||||
|
# SPDX-License-Identifier: APACHE-2.0
|
||||||
|
set -eu
|
||||||
|
|
||||||
|
n=0
|
||||||
|
max=2
|
||||||
|
export DEBIAN_FRONTEND=noninteractive
|
||||||
|
|
||||||
|
until [ $n -gt $max ]; do
|
||||||
|
set +e
|
||||||
|
(
|
||||||
|
apt-get update -qq &&
|
||||||
|
apt-get install -y --no-install-recommends "$@"
|
||||||
|
)
|
||||||
|
CODE=$?
|
||||||
|
set -e
|
||||||
|
if [ $CODE -eq 0 ]; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
if [ $n -eq $max ]; then
|
||||||
|
exit $CODE
|
||||||
|
fi
|
||||||
|
echo "apt failed, retrying"
|
||||||
|
n=$(($n + 1))
|
||||||
|
done
|
||||||
|
apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives
|
||||||
|
|
@ -0,0 +1,24 @@
|
||||||
|
#!/bin/sh
|
||||||
|
# Copyright Broadcom, Inc. All Rights Reserved.
|
||||||
|
# SPDX-License-Identifier: APACHE-2.0
|
||||||
|
set -u
|
||||||
|
|
||||||
|
if [ $# -eq 0 ]; then
|
||||||
|
>&2 echo "No arguments provided"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
script=$1
|
||||||
|
exit_code="${2:-96}"
|
||||||
|
fail_if_not_present="${3:-n}"
|
||||||
|
|
||||||
|
if test -f "$script"; then
|
||||||
|
sh $script
|
||||||
|
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $((exit_code))
|
||||||
|
fi
|
||||||
|
elif [ "$fail_if_not_present" = "y" ]; then
|
||||||
|
>&2 echo "script not found: $script"
|
||||||
|
exit 127
|
||||||
|
fi
|
||||||
|
|
@ -0,0 +1,26 @@
|
||||||
|
#!/bin/sh
|
||||||
|
# Copyright Broadcom, Inc. All Rights Reserved.
|
||||||
|
# SPDX-License-Identifier: APACHE-2.0
|
||||||
|
set -eu
|
||||||
|
|
||||||
|
n=0
|
||||||
|
max=2
|
||||||
|
export DEBIAN_FRONTEND=noninteractive
|
||||||
|
|
||||||
|
until [ $n -gt $max ]; do
|
||||||
|
set +e
|
||||||
|
(
|
||||||
|
apt-get autoremove --purge -y "$@"
|
||||||
|
)
|
||||||
|
CODE=$?
|
||||||
|
set -e
|
||||||
|
if [ $CODE -eq 0 ]; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
if [ $n -eq $max ]; then
|
||||||
|
exit $CODE
|
||||||
|
fi
|
||||||
|
echo "apt failed, retrying"
|
||||||
|
n=$(($n + 1))
|
||||||
|
done
|
||||||
|
apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives
|
||||||
Loading…
Reference in New Issue