forked from Azure/ipam
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Dockerfile.rhel
92 lines (63 loc) · 1.82 KB
/
Dockerfile.rhel
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
ARG BUILD_IMAGE=registry.access.redhat.com/ubi8/nodejs-18
ARG SERVE_IMAGE=registry.access.redhat.com/ubi8/python-39
ARG PORT=8080
FROM $BUILD_IMAGE AS builder
# Disable NPM Update Notifications
ENV NPM_CONFIG_UPDATE_NOTIFIER=false
# Set the Working Directory
WORKDIR /tmp
# Add `/app/node_modules/.bin` to $PATH
ENV PATH /tmp/node_modules/.bin:$PATH
# Install UI Dependencies
COPY ./ui/package.json ./
COPY ./ui/package-lock.json ./
RUN npm install
RUN chmod 777 node_modules
# Copy UI Code
COPY ./ui/. ./
# Build IPAM UI
RUN npm run build
FROM $SERVE_IMAGE
ARG PORT
# Set Environment Variable
ENV PORT=${PORT}
# Disable PIP Root Warnings
ENV PIP_ROOT_USER_ACTION=ignore
# Set Working Directory
WORKDIR /tmp
# Switch to Root User
USER root
# Install OpenSSH and set the password for root to "Docker!"
RUN yum update -y
RUN yum install -qq openssh-server -y \
&& echo "root:Docker!" | chpasswd \
&& systemctl enable sshd
# Enable SSH root login with Password Authentication
# RUN sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/g' /etc/ssh/sshd_config
# Copy 'sshd_config File' to /etc/ssh/
COPY sshd_config /etc/ssh/
RUN ssh-keygen -A
RUN mkdir /var/run/sshd
# Set Working Directory
WORKDIR /ipam
# Install Engine Dependencies
COPY ./engine/requirements.txt /code/requirements.txt
# Upgrade PIP
RUN pip install --upgrade pip --progress-bar off
# Install Dependencies
RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt --progress-bar off
# Copy Engine Code
COPY ./engine/app ./app
COPY --from=builder /tmp/dist ./dist
# Copy Init Script
COPY ./init.sh .
# Set Script Execute Permissions
RUN chmod +x init.sh
RUN chown -R 1001:0 /ipam
RUN chown -R 1001:0 /etc/profile
# Switch to Standard User
USER 1001
# Expose Ports
EXPOSE $PORT 2222
# Execute Startup Script
ENTRYPOINT ./init.sh ${PORT}