initial-commit

Dockerfile

+ARG BASE_REGISTRY=registry1.dso.mil
+ARG BASE_IMAGE=ironbank/redhat/ubi/ubi8
+ARG BASE_TAG=8.3
+
+FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
+
+USER root
+
+ENV USER=rstudio
+ENV R_VERSION=4.0.4
+ENV RSTUDIO_VERSION=1.4.1106
+
+COPY rstudio-signing.key R-${R_VERSION}-1-1.x86_64.rpm rstudio-server-rhel-${RSTUDIO_VERSION}-x86_64.rpm /tmp
+
+RUN groupadd -g 1000 ${USER} && \
+    useradd -r -u 1000 -m -g ${USER} ${USER} && \
+    mkdir -p /etc/R && \
+    cd /tmp && \
+    rpm --import rstudio-signing.key && \
+    rpm -K R-${R_VERSION}-1-1.x86_64.rpm && \
+    rpm -K rstudio-server-rhel-${RSTUDIO_VERSION}-x86_64.rpm && \
+    dnf upgrade -y && \
+    dnf --nogpgcheck install -y initscripts procps-ng R-${R_VERSION}-1-1.x86_64.rpm rstudio-server-rhel-${RSTUDIO_VERSION}-x86_64.rpm && \
+    ln -s /opt/R/${R_VERSION}/bin/R /usr/local/bin/R && \
+    ln -s /opt/R/${R_VERSION}/bin/Rscript /usr/local/bin/Rscript && \
+    chown $USER:$USER /var/lib/rstudio-server && \
+    chown $USER:$USER /var/run/rstudio-server && \
+    chmod +t /var/run/rstudio-server && \
+    dnf clean all && \
+    rm -rf /var/cache/dnf /tmp/*
+
+USER ${USER}
+
+HEALTHCHECK --start-period=60s CMD /usr/lib/rstudio-server/bin/rserver status
+
+EXPOSE 8787
+
+ENTRYPOINT ["/usr/lib/rstudio-server/bin/rserver", "--server-daemonize", "0", "--auth-none", "1"]
\ No newline at end of file

README.md

-# <application name>
+# Security Notes
 
-Project template for all Iron Bank container repositories.
\ No newline at end of file
+# This container is only approved for DoD use if it is NOT internet facing. Access should be achieved through a Zero Trust stack, for example, CNAP or any approved DoD VPN.
+
+
+[RStudio Server](https://rstudio.com/products/rstudio/#rstudio-server) is an integrated development environment (IDE) for R. It includes a console, syntax-highlighting editor that supports direct code execution, as well as tools for plotting, history, debugging and workspace management. data.
+
+## Documentation
+
+To learn more about Rstudio Server Opensouce [go to the complete documentation](https://support.rstudio.com/hc/en-us/articles/200552306-Getting-Started).

hardening_manifest.yaml

+---
+apiVersion: v1
+# The repository name in registry1, excluding /ironbank/
+name: "opensource/rstudio"
+# List of tags to push for the repository in registry1
+# The most specific version should be the first tag and will be shown
+# on ironbank.dsop.io
+tags:
+- "4.0.4"
+- "latest"
+# Build args passed to Dockerfile ARGs
+args:
+  BASE_IMAGE: "redhat/ubi/ubi8"
+  BASE_TAG: "8.3"
+# Docker image labels
+labels:
+  org.opencontainers.image.title: "rstudio"
+  ## Human-readable description of the software packaged in the image
+  org.opencontainers.image.description: "RStudio provides free and open source tools for R and enterprise-ready professional software for data science teams to develop and share their work at scale."
+  ## License(s) under which contained software is distributed
+  org.opencontainers.image.licenses: "Apache-2.0"
+  ## URL to find more information on the image
+  org.opencontainers.image.url: "https://rstudio.com/"
+  ## Name of the distributing entity, organization or individual
+  org.opencontainers.image.vendor: "RStudio"
+  org.opencontainers.image.version: "4.0.4"
+  ## Keywords to help with search (ex. "cicd,gitops,golang")
+  mil.dso.ironbank.image.keywords: "ide,ai,ml"
+  ## This value can be "opensource" or "commercial"
+  mil.dso.ironbank.image.type: "opensource"
+  ## Product the image belongs to for grouping multiple images
+  mil.dso.ironbank.product.name: "RStudio"
+# List of resources to make available to the offline build context
+resources:
+- filename: R-4.0.4-1-1.x86_64.rpm
+  url: https://cdn.rstudio.com/r/centos-8/pkgs/R-4.0.4-1-1.x86_64.rpm
+  validation:
+    type: sha256
+    value: 72ad549c436890020cfd06640bfc9f09e68ea48d5f210812987e203a46ea82ef
+- filename: rstudio-server-rhel-1.4.1106-x86_64.rpm
+  url: https://download2.rstudio.org/server/centos8/x86_64/rstudio-server-rhel-1.4.1106-x86_64.rpm
+  validation:
+    type: sha256
+    value: 0fd54e5ec3504c970c2e7c912fc651446e65e3ccb3b504d4615e2e97176ab406
+
+# List of project maintainers
+maintainers:
+- name: "Matt Vasquez"
+  username: "matt.vasquez"
+  email: "vasquez_matt@bah.com"
+  cht_member: false

rstudio-signing.key

+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=WoWq
+-----END PGP PUBLIC KEY BLOCK-----
\ No newline at end of file