public_git/kaniko
1
0
Fork 0
mirror of https://github.com/GoogleContainerTools/kaniko synced 2026-10-18 10:39:18 +02:00
Code Issues Releases Wiki Activity

CA certificates tasks in kaniko images (#2142)

Browse Source 
* deploy: avoid duplicate certificates in images

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>

* deploy: use current stable Debian release image

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
This commit is contained in:
Konstantin Demin
2022-06-21 14:28:11 -04:00
committed by GitHub
parent 679c71c907
commit 18f745de5b
4 changed files with 12 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/Dockerfile
+3 -8
View File
@@ -41,20 +41,15 @@ RUN \
make GOARCH=$TARGETARCH
# Generate latest ca-certificates
FROM debian:buster-slim AS certs
RUN \
apt update && \
apt install -y ca-certificates && \
cat /etc/ssl/certs/* > /ca-certificates.crt
FROM debian:bullseye-slim AS certs
RUN apt update && apt install -y ca-certificates
FROM scratch
COPY --from=0 /src/out/executor /kaniko/executor
COPY --from=0 /usr/local/bin/docker-credential-gcr /kaniko/docker-credential-gcr
COPY --from=0 /usr/local/bin/docker-credential-ecr-login /kaniko/docker-credential-ecr-login
COPY --from=0 /usr/local/bin/docker-credential-acr-env /kaniko/docker-credential-acr-env
COPY --from=certs /ca-certificates.crt /kaniko/ssl/certs/
COPY --from=certs /etc/ssl/certs/ca-certificates.crt /kaniko/ssl/certs/
COPY --from=0 /kaniko/.docker /kaniko/.docker
COPY files/nsswitch.conf /etc/nsswitch.conf
ENV HOME /root
deploy/Dockerfile_debug
+3 -8
View File
@@ -42,13 +42,8 @@ RUN \
make GOARCH=$TARGETARCH out/warmer
# Generate latest ca-certificates
FROM debian:buster-slim AS certs
RUN \
apt update && \
apt install -y ca-certificates && \
cat /etc/ssl/certs/* > /ca-certificates.crt
FROM debian:bullseye-slim AS certs
RUN apt update && apt install -y ca-certificates
FROM scratch
COPY --from=0 /src/out/executor /kaniko/executor
@@ -65,7 +60,7 @@ COPY --from=busybox:1.32.0 /*lib /lib
# Declare /busybox as a volume to get it automatically in the path to ignore
VOLUME /busybox
COPY --from=certs /ca-certificates.crt /kaniko/ssl/certs/
COPY --from=certs /etc/ssl/certs/ca-certificates.crt /kaniko/ssl/certs/
COPY --from=0 /kaniko/.docker /kaniko/.docker
COPY files/nsswitch.conf /etc/nsswitch.conf
ENV HOME /root
deploy/Dockerfile_slim
+3 -8
View File
@@ -27,18 +27,13 @@ RUN \
make GOARCH=$TARGETARCH
# Generate latest ca-certificates
FROM debian:buster-slim AS certs
RUN \
apt update && \
apt install -y ca-certificates && \
cat /etc/ssl/certs/* > /ca-certificates.crt
FROM debian:bullseye-slim AS certs
RUN apt update && apt install -y ca-certificates
FROM scratch
COPY --from=0 /src/out/executor /kaniko/executor
COPY files/nsswitch.conf /etc/nsswitch.conf
COPY --from=certs /ca-certificates.crt /kaniko/ssl/certs/
COPY --from=certs /etc/ssl/certs/ca-certificates.crt /kaniko/ssl/certs/
ENV HOME /root
ENV USER root
ENV PATH /usr/local/bin:/kaniko
deploy/Dockerfile_warmer
+3 -8
View File
@@ -41,20 +41,15 @@ RUN \
make GOARCH=$TARGETARCH out/warmer
# Generate latest ca-certificates
FROM debian:buster-slim AS certs
RUN \
apt update && \
apt install -y ca-certificates && \
cat /etc/ssl/certs/* > /ca-certificates.crt
FROM debian:bullseye-slim AS certs
RUN apt update && apt install -y ca-certificates
FROM scratch
COPY --from=0 /src/out/warmer /kaniko/warmer
COPY --from=0 /usr/local/bin/docker-credential-gcr /kaniko/docker-credential-gcr
COPY --from=0 /usr/local/bin/docker-credential-ecr-login /kaniko/docker-credential-ecr-login
COPY --from=0 /usr/local/bin/docker-credential-acr-env /kaniko/docker-credential-acr-env
COPY --from=certs /ca-certificates.crt /kaniko/ssl/certs/
COPY --from=certs /etc/ssl/certs/ca-certificates.crt /kaniko/ssl/certs/
COPY --from=0 /kaniko/.docker /kaniko/.docker
COPY files/nsswitch.conf /etc/nsswitch.conf
ENV HOME /root