diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000000000000000000000000000000000000..1ca616cb353258fa5842871fbdfe64398c5421d5 --- /dev/null +++ b/Dockerfile @@ -0,0 +1,21 @@ +ARG BASE_REGISTRY=registry1.dso.mil +ARG BASE_IMAGE=ironbank/redhat/ubi/ubi8-minimal +ARG BASE_TAG=8.4 + +FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} + +ARG DEFAULTUID=1001 +ARG DEFAULTGID=1001 + +COPY rda-converter.zip /tmp +RUN microdnf install -y unzip shadow-utils && \ + groupadd -g ${DEFAULTGID} -r default && \ + useradd -u ${DEFAULTUID} -r -g default default && \ + unzip /tmp/rda-converter.zip -d /usr/local/bin && \ + microdnf remove -y unzip shadow-utils && \ + microdnf clean all && \ + rm -rf /var/cache/yum /var/tmp/* /tmp/* /var/tmp/.???* /tmp/.???* + +USER ${DEFAULTUID} + +ENTRYPOINT ["/usr/local/bin/rda-converter"] \ No newline at end of file diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000000000000000000000000000000000000..ff836b59dcca5a79aa81794c97d3144d7652cef9 --- /dev/null +++ b/LICENSE @@ -0,0 +1,5 @@ +Data Rights and Intellectual Property Rights in accordance with the rights +described in DFARS 252.227-7013 [Rights in Technical Data—Noncommercial Items +(Nov 1995), DFARS 252.227-7014 [Rights in Noncommercial Computer Software and +Noncommercial Computer Software Documentation (June 1995)] and DFARS +252.227-7015 [Rights in Technical Data – Noncommercial Items (Nov. 1995)] \ No newline at end of file diff --git a/README.md b/README.md index 5dc6fa6db4361c22da2f35edf0544d83ba6001e2..f8f04ab51512addeee082941b2a0d29eab161e21 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,5 @@ -# <application name> +# rda-converter -Project template for all Iron Bank container repositories. \ No newline at end of file +A container image that includes the [rda-converter](https://gitlab.devforce.disa.mil/up/rda-converter) application. + +To update this image, first get the URL to the version of the rda-converter from [nexus](https://nexus.devforce.disa.mil/#browse/search/maven=attributes.maven2.groupId%3Dbdp.rda%20AND%20attributes.maven2.artifactId%3Drda-converter). Then, download the artifact and calculate the SHA256. Update the `hardening_manifest.yaml` with the URL and SHA256 of the artifact. \ No newline at end of file diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml new file mode 100644 index 0000000000000000000000000000000000000000..9d4eedba7b838cbed7b62b8b383ddc8cde5f2d23 --- /dev/null +++ b/hardening_manifest.yaml @@ -0,0 +1,52 @@ +--- +apiVersion: v1 + +# The repository name in registry1, excluding /ironbank/ +name: "bdp/rda/converter" + +# List of tags to push for the repository in registry1 +# The most specific version should be the first tag and will be shown +# on ironbank.dsop.io +tags: + - "0.4.0" + - "latest" + +# Build args passed to Dockerfile ARGs +args: + BASE_IMAGE: "redhat/ubi/ubi8-minimal" + BASE_TAG: "8.4" + +# Docker image labels +labels: + org.opencontainers.image.title: "converter" + ## Human-readable description of the software packaged in the image + org.opencontainers.image.description: "A container image that includes the rda-converter application." + ## License(s) under which contained software is distributed + org.opencontainers.image.licenses: "proprietary" + ## URL to find more information on the image + org.opencontainers.image.url: "https://repo1.dso.mil/dsop/bdp/rda/converter" + ## Name of the distributing entity, organization or individual + org.opencontainers.image.vendor: "BDP" + org.opencontainers.image.version: "0.4.0" + ## Keywords to help with search (ex. "cicd,gitops,golang") + mil.dso.ironbank.image.keywords: "rda,bdp,updn,k8s,converter" + ## This value can be "opensource" or "commercial" + mil.dso.ironbank.image.type: "commercial" + ## Product the image belongs to for grouping multiple images + mil.dso.ironbank.product.name: "BDP RDA" + +resources: + - url: "https://nexus.devforce.disa.mil/repository/UP-Releases/bdp/rda/rda-converter/0.4.0/rda-converter-0.4.0.zip" + filename: "rda-converter.zip" + auth: + type: "basic" + id: "nexus" + validation: + type: "sha256" + value: "7dce8d9a5ed34a55ca7dd7a352b027ff1945df64bfdb7e9f2f91ea78a0080a55" + +# List of project maintainers +maintainers: +- email: "lstigdon@eitccorp.com" + name: "Luke Stigdon" + username: "lstigdon"