29 lines
1.2 KiB
Docker
29 lines
1.2 KiB
Docker
FROM docker.io/bitnami/minideb:bullseye
|
|
ENV HOME="/" \
|
|
OS_ARCH="amd64" \
|
|
OS_FLAVOUR="debian-11" \
|
|
OS_NAME="linux"
|
|
|
|
COPY prebuildfs /
|
|
SHELL ["/bin/bash", "-o", "pipefail", "-c"]
|
|
# Install required system packages and dependencies
|
|
RUN install_packages ca-certificates curl gzip procps tar wget
|
|
RUN wget -nc -P /tmp/bitnami/pkg/cache/ https://downloads.bitnami.com/files/stacksmith/cosign-1.10.0-0-linux-amd64-debian-11.tar.gz && \
|
|
echo "ca7916594c448f416c99031e89ab90bf9ccb25e3774c2df701841d95747de21e /tmp/bitnami/pkg/cache/cosign-1.10.0-0-linux-amd64-debian-11.tar.gz" | sha256sum -c - && \
|
|
tar -zxf /tmp/bitnami/pkg/cache/cosign-1.10.0-0-linux-amd64-debian-11.tar.gz -P --transform 's|^[^/]*/files|/opt/bitnami|' --wildcards '*/files' && \
|
|
rm -rf /tmp/bitnami/pkg/cache/cosign-1.10.0-0-linux-amd64-debian-11.tar.gz
|
|
RUN apt-get update && apt-get upgrade -y && \
|
|
rm -r /var/lib/apt/lists /var/cache/apt/archives
|
|
RUN chmod g+rwX /opt/bitnami
|
|
RUN mkdir -p "/cosign-keys" && chmod -R 777 "/cosign-keys"
|
|
RUN mkdir /.sigstore && chmod g+rwX /.sigstore
|
|
|
|
ENV APP_VERSION="1.10.0" \
|
|
BITNAMI_APP_NAME="cosign" \
|
|
PATH="/opt/bitnami/cosign/bin:$PATH"
|
|
|
|
WORKDIR /cosign-keys
|
|
USER 1001
|
|
ENTRYPOINT [ "cosign" ]
|
|
CMD [ "--help" ]
|