Merge branch 'hardening_manifest' into 'development'

Migrate to hardening_manifest.yaml

See merge request !11

Dockerfile

@@ -4,13 +4,6 @@ ARG BASE_TAG=8.3
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
-LABEL name="MariaDB" \
-      maintainer="bhearn@anchore.com" \
-      vendor="Open Source" \
-      version="10.5.8" \
-      release="1" \
-      summary="Image of MariaDB" \
-      description="MariaDB is a community-developed fork of the MySQL relational database management system."
 
 # copy dependencies, GPG keys, and scripts
 COPY mariadb-server.rpm mariadb-client.rpm mariadb-common.rpm mariadb-shared.rpm galera.rpm boost.rpm signatures/RPM-GPG-KEY-MariaDB signatures/RPM-GPG-KEY-CentOS-Official /

Jenkinsfile

-@Library('DCCSCR@master') _
-dccscrPipeline(version: "10.5.8")

download.yaml

----
-resources:
-  - url: "https://yum.mariadb.org/10.5.8/rhel8-amd64/rpms/MariaDB-server-10.5.8-1.el8.x86_64.rpm"
-    filename: "mariadb-server.rpm"
-    validation:
-      type: "sha256"
-      value: "14fcda323b749aec9c85d66df3bca92f827124644e312e97c29fc850b3c5515e"
-  - url: "https://yum.mariadb.org/10.5.8/rhel8-amd64/rpms/MariaDB-client-10.5.8-1.el8.x86_64.rpm"
-    filename: "mariadb-client.rpm"
-    validation:
-      type: "sha256"
-      value: "daccd783ab8adedf3d5515de3f413643028dd946b6def017170f501ac2a0c9f2"
-  - url: "https://yum.mariadb.org/10.5.8/rhel8-amd64/rpms/MariaDB-common-10.5.8-1.el8.x86_64.rpm"
-    filename: "mariadb-common.rpm"
-    validation:
-      type: "sha256"
-      value: "368ded82a22dcc45ac41841110542a4a7d3969314e04d2847018b17a9d4223df"
-  - url: "https://yum.mariadb.org/10.5.8/rhel8-amd64/rpms/MariaDB-shared-10.5.8-1.el8.x86_64.rpm"
-    filename: "mariadb-shared.rpm"
-    validation:
-      type: "sha256"
-      value: "abf5cc16105ec787c143afe02f66d93b095db8b894f1df29970d743ff3b33345"
-  - url: "https://yum.mariadb.org/10.5.8/rhel8-amd64/rpms/galera-4-26.4.5-1.el8.x86_64.rpm"
-    filename: "galera.rpm"
-    validation:
-      type: "sha256"
-      value: "7d3bf4f2920a5cc73a32bccc1a21c989845998e52b9c1c8865990ed93c331908"
-  - url: "http://mirror.centos.org/centos/8/AppStream/x86_64/os/Packages/boost-program-options-1.66.0-7.el8.x86_64.rpm"
-    filename: "boost.rpm"
-    validation:
-      type: "sha256"
-      value: "a0514f24c2bbc8ea14a13703acb5f35b1b5ba1dfb97397e6776d522c8ea60331"
\ No newline at end of file

hardening_manifest.yaml

+---
+apiVersion: v1
+
+# The repository name in registry1, excluding /ironbank/
+name: "opensource/mariadb/mariadb105"
+
+# List of tags to push for the repository in registry1
+# The most specific version should be the first tag and will be shown
+# on ironbank.dsop.io
+tags:
+- "10.5.8"
+- "latest"
+
+# Build args passed to Dockerfile ARGs
+args:
+  BASE_IMAGE: "redhat/ubi/ubi8"
+  BASE_TAG: "8.3"
+
+# Docker image labels
+labels:
+  org.opencontainers.image.title: "mariadb105"
+  # Human-readable description of the software packaged in the image
+  org.opencontainers.image.description: "MariaDB Server is one of the most popular open source relational databases."
+  # License(s) under which contained software is distributed
+  org.opencontainers.image.licenses: "GPL-2.0"
+  # URL to find more information on the image
+  org.opencontainers.image.url: "https://mariadb.org"
+  # Name of the distributing entity, organization or individual
+  org.opencontainers.image.vendor: "Maria DB Foundation"
+  org.opencontainers.image.version: "10.5.8"
+  # Keywords to help with search (ex. "cicd,gitops,golang")
+  mil.dso.ironbank.image.keywords: "opensource,database,relational"
+  # This value can be "opensource" or "commercial"
+  mil.dso.ironbank.image.type: "opensource"
+  # Product the image belongs to for grouping multiple images
+  mil.dso.ironbank.product.name: "opensource"
+
+# List of resources to make available to the offline build context
+resources:
+- filename: mariadb-server.rpm
+  url: https://yum.mariadb.org/10.5.8/rhel8-amd64/rpms/MariaDB-server-10.5.8-1.el8.x86_64.rpm
+  validation:
+    type: sha256
+    value: 14fcda323b749aec9c85d66df3bca92f827124644e312e97c29fc850b3c5515e
+- filename: mariadb-client.rpm
+  url: https://yum.mariadb.org/10.5.8/rhel8-amd64/rpms/MariaDB-client-10.5.8-1.el8.x86_64.rpm
+  validation:
+    type: sha256
+    value: daccd783ab8adedf3d5515de3f413643028dd946b6def017170f501ac2a0c9f2
+- filename: mariadb-common.rpm
+  url: https://yum.mariadb.org/10.5.8/rhel8-amd64/rpms/MariaDB-common-10.5.8-1.el8.x86_64.rpm
+  validation:
+    type: sha256
+    value: 368ded82a22dcc45ac41841110542a4a7d3969314e04d2847018b17a9d4223df
+- filename: mariadb-shared.rpm
+  url: https://yum.mariadb.org/10.5.8/rhel8-amd64/rpms/MariaDB-shared-10.5.8-1.el8.x86_64.rpm
+  validation:
+    type: sha256
+    value: abf5cc16105ec787c143afe02f66d93b095db8b894f1df29970d743ff3b33345
+- filename: galera.rpm
+  url: https://yum.mariadb.org/10.5.8/rhel8-amd64/rpms/galera-4-26.4.5-1.el8.x86_64.rpm
+  validation:
+    type: sha256
+    value: 7d3bf4f2920a5cc73a32bccc1a21c989845998e52b9c1c8865990ed93c331908
+- filename: boost.rpm
+  url: http://mirror.centos.org/centos/8/AppStream/x86_64/os/Packages/boost-program-options-1.66.0-10.el8.x86_64.rpm
+  validation:
+    type: sha256
+    value: da68048ba572927abac063a05a271297ff80e8c997df88a3c914e69cb5fbaf04
+
+# List of project maintainers
+maintainers:
+- email: "bhearn@anchore.com"
+  # The name of the current container owner
+  name: "Blake Hearn"
+  # The gitlab username of the current container owner
+  username: "blake.hearn"
+  cht_member: true