3f2cc870b8
Pull in updated git packages to address CVE-2022-23521. This is a direct copy of work done in Ib08ff1fc7b3c8623fa6b927f3010af72e1b946cf Change-Id: Ie7d4c3c50f4b72e83f32c91f17ea7e893c3d943a
51 lines
1.7 KiB
Docker
51 lines
1.7 KiB
Docker
# Copyright (c) 2020 Red Hat, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
|
# implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
FROM docker.io/opendevorg/python-base:3.9-bullseye
|
|
|
|
ENV GOPATH /go
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y curl golang git
|
|
|
|
RUN go get github.com/hound-search/hound/cmds/...
|
|
|
|
RUN pip install git+https://opendev.org/opendev/jeepyb#egg=jeepyb \
|
|
supervisor
|
|
|
|
RUN apt-get clean \
|
|
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
|
|
|
# Begin temporary git package upgrade
|
|
RUN ARCH=`dpkg --print-architecture` \
|
|
&& cd /tmp \
|
|
&& apt-get update \
|
|
&& apt-get -y install wget \
|
|
&& wget https://static.opendev.org/project/opendev.org/debs/git/git_2.30.2-1opendev1.0_$ARCH.deb \
|
|
&& wget https://static.opendev.org/project/opendev.org/debs/git/git-man_2.30.2-1opendev1.0_all.deb \
|
|
&& apt-get -y install /tmp/git_*.deb /tmp/git-man_*.deb \
|
|
&& rm -f /tmp/*.deb \
|
|
&& apt-get clean \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
# End temporary git package upgrade
|
|
|
|
ADD supervisord.conf /etc/supervisor/conf.d/supervisord.conf
|
|
ADD start-container.sh /usr/bin/start-container
|
|
ADD update-hound-config.sh /usr/local/bin/update-hound-config
|
|
ADD resync-hound.sh /usr/local/bin/resync-hound
|
|
ADD sample-projects.yaml /var/run/sample-projects.yaml
|
|
|
|
ENTRYPOINT ["start-container"]
|
|
|