mirror of
https://github.com/ZwareBear/JFrog-Cloud-Installers.git
synced 2026-01-21 07:06:56 -06:00
62 lines
2.6 KiB
Docker
62 lines
2.6 KiB
Docker
# An example of customising Artifactory using RedHat Univeral Base Image (UBI).
|
|
# Using Docker multi stage build.
|
|
# Taking the Artifactory file system
|
|
ARG ARTIFACTORY_BASE_VERSION
|
|
|
|
# The Artifactory official Docker image
|
|
FROM docker.bintray.io/jfrog/artifactory-pro:${ARTIFACTORY_BASE_VERSION} AS base
|
|
|
|
# The new image based on registry.access.redhat.com/ubi
|
|
FROM registry.access.redhat.com/ubi8
|
|
|
|
LABEL name="JFrog Artifactory Pro" \
|
|
description="JFrog Artifactory Pro image based on the Red Hat Universal Base Image." \
|
|
vendor="JFrog" \
|
|
summary="JFrog Artifactory Pro (Red Hat UBI)" \
|
|
com.jfrog.license_terms="https://jfrog.com/artifactory/eula/"
|
|
|
|
# Environment needed for Artifactory
|
|
ENV JF_ARTIFACTORY_USER=artifactory \
|
|
ARTIFACTORY_USER_ID=1000721030 \
|
|
ARTIFACTORY_VERSION=${ARTIFACTORY_BASE_VERSION} \
|
|
JF_PRODUCT_HOME=/opt/jfrog/artifactory \
|
|
JF_PRODUCT_DATA_INTERNAL=/var/opt/jfrog/artifactory \
|
|
RECOMMENDED_MAX_OPEN_FILES=32000 \
|
|
MIN_MAX_OPEN_FILES=10000 \
|
|
RECOMMENDED_MAX_OPEN_PROCESSES=1024 \
|
|
POSTGRESQL_VERSION=9.4.1212
|
|
|
|
# Copy needed file system from base (Artifactory image)
|
|
COPY --from=base /opt/jfrog /opt/jfrog
|
|
COPY --from=base /var/opt/jfrog/artifactory /var/opt/jfrog/artifactory
|
|
COPY --from=base /entrypoint-artifactory.sh /entrypoint-artifactory.sh
|
|
|
|
# Add license information to meet the Red Hat container image certification requirements
|
|
COPY --from=base /opt/jfrog/artifactory/app/doc/* /licenses/
|
|
|
|
# Metadata to let Artifactory know its installation source
|
|
RUN mkdir -p /artifactory_bootstrap/info/
|
|
RUN echo "{\"productId\":\"UBI8_artifactory/1.0.0\",\"features\":[{\"featureId\":\"Partner/ACC-006983\"}]}" > /artifactory_bootstrap/info/installer-info.json
|
|
|
|
# Create the user, fix file system ownership and install needed tools with Yum
|
|
# NOTE - wget must be installed for Artifactory HA
|
|
# procps must be installed to run Artifactory
|
|
# hostname is needed to generate nodeID
|
|
RUN useradd -M -s /usr/sbin/nologin --uid ${ARTIFACTORY_USER_ID} --user-group ${JF_ARTIFACTORY_USER} && \
|
|
chown -R ${JF_ARTIFACTORY_USER}:${JF_ARTIFACTORY_USER} ${JF_PRODUCT_HOME} ${JF_PRODUCT_DATA_INTERNAL} && \
|
|
yum install -y --disableplugin=subscription-manager wget && \
|
|
yum install -y --disableplugin=subscription-manager procps && \
|
|
yum install -y --disableplugin=subscription-manager net-tools && \
|
|
yum install -y --disableplugin=subscription-manager hostname
|
|
|
|
# Add RUN instruction for updating the vulnerability found in openssl-libs package.
|
|
|
|
RUN yum update openssl-libs -y
|
|
|
|
|
|
USER $JF_ARTIFACTORY_USER
|
|
|
|
VOLUME ${JF_PRODUCT_DATA_INTERNAL}
|
|
|
|
ENTRYPOINT ["/entrypoint-artifactory.sh"]
|