MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2024-12-25 22:55:54 -05:00
Code Issues Packages Projects Releases Wiki Activity
03dc65e12d
minio/Dockerfile.release

55 lines
2.4 KiB
Docker
Raw Normal View History

upgrade container base image to ubi-9 (#18313) This commit updates the container base image from ubi:8.8 to ubi:9.2. Signed-off-by: Andreas Auernhammer <github@aead.dev>
2023-10-25 11:32:18 -04:00
FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2
Add docker release files. (#4473) We used to release by building directly on the docker hub auto build process, which is sufficient for edge but it is not a good idea to do it for stable releases. Do not build docker release binaries again, but instead use the released binaries themselves which are signed and validated.
2017-06-14 05:08:35 -04:00
fix: docker buildx support for multiplatform build (#10983)
2020-11-26 12:47:30 -05:00
ARG TARGETARCH
add release build-arg to docker multiarch builds (#11752)
2021-03-10 12:41:44 -05:00
ARG RELEASE
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-08 14:14:06 -05:00
LABEL name="MinIO" \
vendor="MinIO Inc <dev@min.io>" \
maintainer="MinIO Inc <dev@min.io>" \
add release build-arg to docker multiarch builds (#11752)
2021-03-10 12:41:44 -05:00
version="${RELEASE}" \
release="${RELEASE}" \
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-08 14:14:06 -05:00
summary="MinIO is a High Performance Object Storage, API compatible with Amazon S3 cloud storage service." \
description="MinIO object storage is fundamentally different. Designed for performance and the S3 API, it is 100% open-source. MinIO is ideal for large, private cloud environments with stringent security requirements and delivers mission-critical availability across a diverse range of workloads."
change MAINTAINER to LABEL (#5843)
2018-04-24 12:57:48 -04:00
Revert "fix: remove deprecated MINIO_ACCESS_KEY, MINIO_SECRET_KEY envs (#12173)" This reverts commit b0baaeaa3ddee9573d3b1ac698e1182d2cc883fe.
2021-04-29 13:55:05 -04:00
ENV MINIO_ACCESS_KEY_FILE=access_key \
MINIO_SECRET_KEY_FILE=secret_key \
MINIO_ROOT_USER_FILE=access_key \
feat: migrate to ROOT_USER/PASSWORD from ACCESS/SECRET_KEY (#11185)
2021-01-05 13:22:57 -05:00
MINIO_ROOT_PASSWORD_FILE=secret_key \
kms: encrypt IAM/config data with the KMS (#12041) This commit changes the config/IAM encryption process. Instead of encrypting config data (users, policies etc.) with the root credentials MinIO now encrypts this data with a KMS - if configured. Therefore, this PR moves the MinIO-KMS configuration (via env. variables) to a "top-level" configuration. The KMS configuration cannot be stored in the config file since it is used to decrypt the config file in the first place. As a consequence, this commit also removes support for Hashicorp Vault - which has been deprecated anyway. Signed-off-by: Andreas Auernhammer <aead@mail.de>
2021-04-22 11:45:30 -04:00
MINIO_KMS_SECRET_KEY_FILE=kms_master_key \
Allow MinIO to load configurations from env file (#12706) docker-entrypoint.sh will load configuration values from 'config.env' file, this is useful when MinIO is deployed in Kubernetes environments and want to avoid reading secrets from environment variables Signed-off-by: Lenin Alevski <alevsk.8772@gmail.com>
2021-07-14 19:55:59 -04:00
MINIO_UPDATE_MINISIGN_PUBKEY="RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav" \
fix: add Dockerfile.release* /opt/bin writable
2021-09-10 01:19:11 -04:00
MINIO_CONFIG_ENV_FILE=config.env \
add MC_CONFIG_DIR to use mc from writable path (#18317) `mc` will currenly fail inside MinIO pod without `--config-dir` option, instead use the ENV to avoid passing flags.
2023-10-26 13:52:10 -04:00
MC_CONFIG_DIR=/tmp/.mc \
update dockerfile with proper PATHs
2021-11-22 19:48:05 -05:00
PATH=/opt/bin:$PATH
Support in-place upgrades of new minio binary and releases. (#4961) This PR allows 'minio update' to not only shows update banner but also allows for in-place upgrades. Updates are done safely by validating the downloaded sha256 of the binary. Fixes #4781
2017-12-15 15:33:42 -05:00
fix: docker buildx support for multiplatform build (#10983)
2020-11-26 12:47:30 -05:00
COPY dockerscripts/verify-minio.sh /usr/bin/verify-minio.sh
COPY dockerscripts/docker-entrypoint.sh /usr/bin/docker-entrypoint.sh
COPY CREDITS /licenses/CREDITS
COPY LICENSE /licenses/LICENSE
Add docker release files. (#4473) We used to release by building directly on the docker hub auto build process, which is sufficient for edge but it is not a good idea to do it for stable releases. Do not build docker release binaries again, but instead use the released binaries themselves which are signed and validated.
2017-06-14 05:08:35 -04:00
RUN \
remove unnecessary RPMs to reduce security reports (#13565)
2021-11-02 17:15:46 -04:00
microdnf clean all && \
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-08 14:14:06 -05:00
microdnf update --nodocs && \
rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm && \
add additional tools that help in debugging (#17325)
2023-05-31 16:06:08 -04:00
microdnf install curl ca-certificates shadow-utils util-linux gzip lsof tar net-tools iproute iputils jq minisign --nodocs && \
fix: add Dockerfile.release* /opt/bin writable
2021-09-10 01:19:11 -04:00
mkdir -p /opt/bin && chmod -R 777 /opt/bin && \
curl -s -q https://dl.min.io/server/minio/release/linux-${TARGETARCH}/archive/minio.${RELEASE} -o /opt/bin/minio && \
curl -s -q https://dl.min.io/server/minio/release/linux-${TARGETARCH}/archive/minio.${RELEASE}.sha256sum -o /opt/bin/minio.sha256sum && \
curl -s -q https://dl.min.io/server/minio/release/linux-${TARGETARCH}/archive/minio.${RELEASE}.minisig -o /opt/bin/minio.minisig && \
ship mc along with MinIO container image (#16156)
2022-12-02 14:19:22 -05:00
curl -s -q https://dl.min.io/client/mc/release/linux-${TARGETARCH}/mc -o /opt/bin/mc && \
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-08 14:14:06 -05:00
microdnf clean all && \
fix: add Dockerfile.release* /opt/bin writable
2021-09-10 01:19:11 -04:00
chmod +x /opt/bin/minio && \
fix: allow mc executable inside minio containers (#17755)
2023-07-31 03:13:41 -04:00
chmod +x /opt/bin/mc && \
Add support for minioreleaser a fork for goreleaser (#9890) This is to support building containers for multiple platforms, rpms and debs all in a single build process https://github.com/harshavardhana/minioreleaser
2020-06-22 11:26:40 -04:00
chmod +x /usr/bin/docker-entrypoint.sh && \
add minisign verification for container builds (#10115)
2020-07-22 20:09:31 -04:00
chmod +x /usr/bin/verify-minio.sh && \
remove unnecessary RPMs to reduce security reports (#13565)
2021-11-02 17:15:46 -04:00
/usr/bin/verify-minio.sh && \
microdnf clean all
Add docker release files. (#4473) We used to release by building directly on the docker hub auto build process, which is sufficient for edge but it is not a good idea to do it for stable releases. Do not build docker release binaries again, but instead use the released binaries themselves which are signed and validated.
2017-06-14 05:08:35 -04:00
EXPOSE 9000
ENTRYPOINT ["/usr/bin/docker-entrypoint.sh"]
Update volume in Dockerfiles (#5646) All sample commands in Minio docs use the volume path as /data. Updated the dockerfiles to follow the same pattern. Fixes #5635
2018-03-13 21:29:27 -04:00
VOLUME ["/data"]
Add docker release files. (#4473) We used to release by building directly on the docker hub auto build process, which is sufficient for edge but it is not a good idea to do it for stable releases. Do not build docker release binaries again, but instead use the released binaries themselves which are signed and validated.
2017-06-14 05:08:35 -04:00
CMD ["minio"]
Reference in New Issue Copy Permalink