techies/authelia
1
0
Fork 0
mirror of https://github.com/0rangebananaspy/authelia.git synced 2024-09-14 22:47:21 +07:00
Code Issues Projects Releases Wiki Activity
b12d9d405f
authelia/Dockerfile

61 lines
1.6 KiB
Docker
Raw Normal View History

Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-02 01:31:51 +07:00
# =======================================
# ===== Build image for the backend =====
# =======================================
[MISC] Update Go to 1.14.2 (#863)
2020-04-13 17:14:49 +07:00
FROM golang:1.14.2-alpine AS builder-backend
First commit with tests
2016-12-10 07:47:58 +07:00
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 22:51:12 +07:00
ARG BUILD_TAG
ARG BUILD_COMMIT
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-02 01:31:51 +07:00
# gcc and musl-dev are required for building go-sqlite3
RUN apk --no-cache add gcc musl-dev
WORKDIR /go/src/app
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
Reduce number of Docker layers
2020-01-11 09:35:54 +07:00
COPY go.mod go.sum ./
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
RUN go mod download
COPY cmd cmd
COPY internal internal
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-02 01:31:51 +07:00
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 22:51:12 +07:00
# Set the build version and time
RUN echo "Write tag ${BUILD_TAG} and commit ${BUILD_COMMIT} in binary." && \
Add git tag back to binary artifact.
2020-01-13 07:30:05 +07:00
sed -i "s/__BUILD_TAG__/${BUILD_TAG}/" cmd/authelia/constants.go && \
Remove build time and git tag from binary artifact. That way it's easy to build a given commit and check whether it's the same binary than the one published on Github.
2020-01-11 18:20:32 +07:00
sed -i "s/__BUILD_COMMIT__/${BUILD_COMMIT}/" cmd/authelia/constants.go
Introduce version command to Authelia to check the version The version command displays the tag and the commit hash of the built commit along with the time when the build was done.
2019-12-08 22:51:12 +07:00
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-02 01:31:51 +07:00
# CGO_ENABLED=1 is mandatory for building go-sqlite3
Reduce number of Docker layers
2020-01-11 09:35:54 +07:00
RUN cd cmd/authelia && \
Add hash-password and migrate commands to authelia binary. This reduce the size of the docker image and avoid confusing users. We keep the commands in authelia-scripts too in order to keep the current workflow of developers.
2020-01-22 05:45:04 +07:00
GOOS=linux GOARCH=amd64 CGO_ENABLED=1 go build -tags netgo -ldflags '-w -linkmode external -extldflags -static' -trimpath -o authelia
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-02 01:31:51 +07:00
# ========================================
# ===== Build image for the frontend =====
# ========================================
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
FROM node:12-alpine AS builder-frontend
First commit with tests
2016-12-10 07:47:58 +07:00
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-02 01:31:51 +07:00
WORKDIR /node/src/app
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
COPY web .
Strengthen password in LDAP using SHA512 crypt algorithm Uses the crypt() function to do password encryption. This function handles several schemes such as: MD5, Blowfish, SHA1, SHA2. SHA-512 is used in Authelia for best security. The algorithm is fully described in https://www.akkadia.org/drepper/SHA-crypt.txt The 'crypt3' npm package has been added as a dependency to use the crypt() function. The package needs to be compiled in order to call the c function, that's why python, make and C++ compiler are installed temporarily in the Docker image.
2017-10-20 05:42:33 +07:00
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-02 01:31:51 +07:00
# Install the dependencies and build
[FEATURE] Add Content-Security-Policy meta to login portal. (#822) CSP is used to avoid some attacks where the hacker tries to execute untrusted code in the browser. The policy is to use assets hosted on the the original website and in order to make CSP work with material UI, a nonce is generated at each request of index.html and injected in the template as well as provided in the Content-Security-Policy header (https://material-ui.com/styles/advanced/#how-does-one-implement-csp) Fix #815
2020-04-21 07:23:28 +07:00
RUN yarn install --frozen-lockfile && INLINE_RUNTIME_CHUNK=false yarn build
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-02 01:31:51 +07:00
# ===================================
# ===== Authelia official image =====
# ===================================
Update alpine to 3.11.3
2020-01-22 06:19:03 +07:00
FROM alpine:3.11.3
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-02 01:31:51 +07:00
RUN apk --no-cache add ca-certificates tzdata
WORKDIR /usr/app
First commit with tests
2016-12-10 07:47:58 +07:00
Add hash-password and migrate commands to authelia binary. This reduce the size of the docker image and avoid confusing users. We keep the commands in authelia-scripts too in order to keep the current workflow of developers.
2020-01-22 05:45:04 +07:00
COPY --from=builder-backend /go/src/app/cmd/authelia/authelia ./
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc.
2019-11-02 01:31:51 +07:00
COPY --from=builder-frontend /node/src/app/build public_html
Edit nginx configuration and add redirection during login and logout
2016-12-18 01:36:41 +07:00
Fix e2e test with minimal configuration.
2019-01-30 22:47:03 +07:00
EXPOSE 9091
Expose port 80 in the dockerfile
2017-01-13 05:27:53 +07:00
Fix integration test and package Travis scripts
2017-06-28 20:57:58 +07:00
VOLUME /etc/authelia
VOLUME /var/lib/authelia
Use filesystem data store to save u2f meta info
2017-01-22 02:24:35 +07:00
Add authelia directory in the PATH of docker images. (#621)
2020-02-06 06:02:18 +07:00
ENV PATH="/usr/app:${PATH}"
Remove build time and git tag from binary artifact. That way it's easy to build a given commit and check whether it's the same binary than the one published on Github.
2020-01-11 18:20:32 +07:00
CMD ["./authelia", "--config", "/etc/authelia/configuration.yml"]
Reference in New Issue Copy Permalink