mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
bd6a8e3ea2
* feat: hardened authelia binaries This change ensures that all Authelia binaries which are compiled and distributed are hardened with the following standards: * RELRO * Stack canary * NX * PIE/ASLR * Stripped RPATH AND RUNPATH * Stripped Symbols * Fortify The musl variants currently [do not support Fortify](https://wiki.musl-libc.org/future-ideas.html#Fortify). * refactor: docker pull for authelia/crossbuild in background
33 lines
664 B
Docker
33 lines
664 B
Docker
# ===================================
|
|
# ===== Authelia official image =====
|
|
# ===================================
|
|
FROM alpine:3.14.2
|
|
|
|
ARG TARGETOS
|
|
ARG TARGETARCH
|
|
|
|
WORKDIR /app
|
|
|
|
# Set environment variables
|
|
ENV PATH="/app:${PATH}" \
|
|
PUID=0 \
|
|
PGID=0
|
|
|
|
RUN \
|
|
apk --no-cache add ca-certificates su-exec tzdata
|
|
|
|
COPY LICENSE .healthcheck.env entrypoint.sh healthcheck.sh ./
|
|
|
|
RUN \
|
|
chmod 0666 /app/.healthcheck.env
|
|
|
|
COPY authelia-${TARGETOS}-${TARGETARCH}-musl ./authelia
|
|
|
|
EXPOSE 9091
|
|
|
|
VOLUME /config
|
|
|
|
ENTRYPOINT ["/app/entrypoint.sh"]
|
|
CMD ["--config", "/config/configuration.yml"]
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=1m CMD /app/healthcheck.sh
|