Dockerfile

ARG BASE_REGISTRY=registry1.dso.mil
ARG BASE_IMAGE=ironbank/redhat/ubi/ubi9-minimal
ARG BASE_TAG=9.5

FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} as build

COPY authservice.tar.gz /

RUN microdnf install -y gzip tar && \
    tar -zxf /authservice.tar.gz

FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}

RUN microdnf upgrade -y && \
    microdnf clean all && \
    rm -rf /var/cache/dnf && \
    echo "auth-server-grp:x:999:" >> /etc/group && \
    echo "auth-server-usr:x:1000:999::/app:/sbin/nologin" >> /etc/passwd

COPY --from=build --chown=auth-server-usr:auth-server-grp /authservice-fips-linux-amd64 /app/authservice

WORKDIR /app

USER 1000

ENTRYPOINT ["/app/authservice"]