UNCLASSIFIED
Skip to content
GitLab
Projects
Groups
Snippets
Help
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Open sidebar
Ironbank Containers
K
Kubeflow
common
kflogin-ui-v0.5.0
Commits
1d351beb
Commit
1d351beb
authored
May 04, 2021
by
Daniel Etrata
Browse files
Narrowing down initially updated packages
parent
cbdee703
Pipeline
#244433
failed with stages
in 13 minutes and 19 seconds
Changes
3
Pipelines
1
Expand all
Hide whitespace changes
Inline
Side-by-side
Showing
3 changed files
with
450 additions
and
176 deletions
+450
-176
Dockerfile
Dockerfile
+8
-6
Makefile
Makefile
+0
-8
hardening_manifest.yaml
hardening_manifest.yaml
+442
-162
No files found.
Dockerfile
View file @
1d351beb
...
...
@@ -12,10 +12,12 @@ RUN dnf upgrade -y && \
dnf clean all
&&
\
rm
-rf
/var/cache/dnf
COPY
--from=source /app /app
COPY
. /tgz
COPY
artifacts/tgz/ /tgz
# COPY . /tgz
RUN
cd
/app
;
\
find /tgz
-type
f
-print
-exec
npm cache add
{}
\;
\
find /tgz
-type
f
-print
-exec
npm cache add
{}
\;
RUN
cd
/app
;
\
find /tgz
-type
f
-print
-exec
npm
install
{}
--prefer-offline
--no-optional
--no-audit
--verbose
\;
EXPOSE
5000
...
...
@@ -29,7 +31,7 @@ RUN chown common-kflogin:common-kflogin $ENTRYPOINT_EXEC
RUN
chmod
+x
$ENTRYPOINT_EXEC
&&
\
find /app/node_modules
-type
f
\(
-iname
\*
.key
-o
-iname
\*
.pem
-o
-iname
\*
.priv
\)
-exec
rm
-f
{}
\;
RUN
chown
common-kflogin:common-kflogin /home/node
USER
common-kflogin
##### END PERMISSION REQUIREMENTS #####
HEALTHCHECK
CMD curl --fail http://localhost:5000 || exit 1
CMD
/app/node_modules/.bin/ecstatic build --port 5000 --baseDir kflogin
#
USER common-kflogin
#
##### END PERMISSION REQUIREMENTS #####
#
HEALTHCHECK CMD curl --fail http://localhost:5000 || exit 1
#
CMD /app/node_modules/.bin/ecstatic build --port 5000 --baseDir kflogin
Makefile
View file @
1d351beb
...
...
@@ -20,20 +20,12 @@ DOCKER_ARGS?=${ARTIFACTS}
help
:
##
this help message
@
grep
-E
'^[a-zA-Z_-]+:.*?## .*$$'
$(MAKEFILE_LIST)
|
sort
|
awk
'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-30s\033[0m %s\n", $$1, $$2}'
download
:
##
Download all pip packages
# mkdir -p pip_pkgs
./scripts/download_pippkgs.sh
download_conda
:
##
Download all pip packages
./scripts/download_conda_pkgs.sh
build_ubi
:
DOCKER_BUILDKIT
=
1 docker build
--no-cache
-f
ubi.Dockerfile
-t
$(VERSIONED_NAME)
:builder
.
|
tee
-a
build.log
_build_ubi
:
DOCKER_BUILDKIT
=
1 docker build
-f
ubi.Dockerfile
-t
$(VERSIONED_NAME)
:builder
.
|
tee
-a
build.log
build
:
download
##
build to a docker container with no cache
build
:
DOCKER_BUILD_ARGS=--no-cache
build
:
docker build
$(DOCKER_BUILD_ARGS)
-f
$(DOCKERFILE)
-t
$(VERSIONED_NAME)
:
$(VERSION)
.
|
tee
-a
build.log
...
...
hardening_manifest.yaml
View file @
1d351beb
This diff is collapsed.
Click to expand it.
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment