MyFavMirrors
/
minio
mirror of https://github.com/minio/minio.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
minio/Dockerfile.release

53 lines
2.2 KiB
Docker
Raw Normal View History

upgrade container base image to ubi-minimal:8.5 (#14231)
2022-02-02 11:54:36 -05:00
FROM registry.access.redhat.com/ubi8/ubi-minimal:8.5
Add docker release files. (#4473) We used to release by building directly on the docker hub auto build process, which is sufficient for edge but it is not a good idea to do it for stable releases. Do not build docker release binaries again, but instead use the released binaries themselves which are signed and validated.
2017-06-14 05:08:35 -04:00
fix: docker buildx support for multiplatform build (#10983)
2020-11-26 12:47:30 -05:00
ARG TARGETARCH
add release build-arg to docker multiarch builds (#11752)
2021-03-10 12:41:44 -05:00
ARG RELEASE
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-08 14:14:06 -05:00
LABEL name="MinIO" \
vendor="MinIO Inc <dev@min.io>" \
maintainer="MinIO Inc <dev@min.io>" \
add release build-arg to docker multiarch builds (#11752)
2021-03-10 12:41:44 -05:00
version="${RELEASE}" \
release="${RELEASE}" \
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-08 14:14:06 -05:00
summary="MinIO is a High Performance Object Storage, API compatible with Amazon S3 cloud storage service." \
description="MinIO object storage is fundamentally different. Designed for performance and the S3 API, it is 100% open-source. MinIO is ideal for large, private cloud environments with stringent security requirements and delivers mission-critical availability across a diverse range of workloads."
change MAINTAINER to LABEL (#5843)
2018-04-24 12:57:48 -04:00
Revert "fix: remove deprecated MINIO_ACCESS_KEY, MINIO_SECRET_KEY envs (#12173)" This reverts commit b0baaeaa3ddee9573d3b1ac698e1182d2cc883fe.
2021-04-29 13:55:05 -04:00
ENV MINIO_ACCESS_KEY_FILE=access_key \
MINIO_SECRET_KEY_FILE=secret_key \
MINIO_ROOT_USER_FILE=access_key \
feat: migrate to ROOT_USER/PASSWORD from ACCESS/SECRET_KEY (#11185)
2021-01-05 13:22:57 -05:00
MINIO_ROOT_PASSWORD_FILE=secret_key \
kms: encrypt IAM/config data with the KMS (#12041) This commit changes the config/IAM encryption process. Instead of encrypting config data (users, policies etc.) with the root credentials MinIO now encrypts this data with a KMS - if configured. Therefore, this PR moves the MinIO-KMS configuration (via env. variables) to a "top-level" configuration. The KMS configuration cannot be stored in the config file since it is used to decrypt the config file in the first place. As a consequence, this commit also removes support for Hashicorp Vault - which has been deprecated anyway. Signed-off-by: Andreas Auernhammer <aead@mail.de>
2021-04-22 11:45:30 -04:00
MINIO_KMS_SECRET_KEY_FILE=kms_master_key \
Allow MinIO to load configurations from env file (#12706) docker-entrypoint.sh will load configuration values from 'config.env' file, this is useful when MinIO is deployed in Kubernetes environments and want to avoid reading secrets from environment variables Signed-off-by: Lenin Alevski <alevsk.8772@gmail.com>
2021-07-14 19:55:59 -04:00
MINIO_UPDATE_MINISIGN_PUBKEY="RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav" \
fix: add Dockerfile.release* /opt/bin writable
2021-09-10 01:19:11 -04:00
MINIO_CONFIG_ENV_FILE=config.env \
update dockerfile with proper PATHs
2021-11-22 19:48:05 -05:00
PATH=/opt/bin:$PATH
Support in-place upgrades of new minio binary and releases. (#4961) This PR allows 'minio update' to not only shows update banner but also allows for in-place upgrades. Updates are done safely by validating the downloaded sha256 of the binary. Fixes #4781
2017-12-15 15:33:42 -05:00
fix: docker buildx support for multiplatform build (#10983)
2020-11-26 12:47:30 -05:00
COPY dockerscripts/verify-minio.sh /usr/bin/verify-minio.sh
COPY dockerscripts/docker-entrypoint.sh /usr/bin/docker-entrypoint.sh
COPY CREDITS /licenses/CREDITS
COPY LICENSE /licenses/LICENSE
Add docker release files. (#4473) We used to release by building directly on the docker hub auto build process, which is sufficient for edge but it is not a good idea to do it for stable releases. Do not build docker release binaries again, but instead use the released binaries themselves which are signed and validated.
2017-06-14 05:08:35 -04:00
RUN \
remove unnecessary RPMs to reduce security reports (#13565)
2021-11-02 17:15:46 -04:00
microdnf clean all && \
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-08 14:14:06 -05:00
microdnf update --nodocs && \
add util-linux RPM for setpriv command
2021-11-02 17:24:42 -04:00
microdnf install curl ca-certificates shadow-utils util-linux --nodocs && \
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-08 14:14:06 -05:00
rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm && \
microdnf install minisign --nodocs && \
fix: add Dockerfile.release* /opt/bin writable
2021-09-10 01:19:11 -04:00
mkdir -p /opt/bin && chmod -R 777 /opt/bin && \
curl -s -q https://dl.min.io/server/minio/release/linux-${TARGETARCH}/archive/minio.${RELEASE} -o /opt/bin/minio && \
curl -s -q https://dl.min.io/server/minio/release/linux-${TARGETARCH}/archive/minio.${RELEASE}.sha256sum -o /opt/bin/minio.sha256sum && \
curl -s -q https://dl.min.io/server/minio/release/linux-${TARGETARCH}/archive/minio.${RELEASE}.minisig -o /opt/bin/minio.minisig && \
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-08 14:14:06 -05:00
microdnf clean all && \
fix: add Dockerfile.release* /opt/bin writable
2021-09-10 01:19:11 -04:00
chmod +x /opt/bin/minio && \
Add support for minioreleaser a fork for goreleaser (#9890) This is to support building containers for multiple platforms, rpms and debs all in a single build process https://github.com/harshavardhana/minioreleaser
2020-06-22 11:26:40 -04:00
chmod +x /usr/bin/docker-entrypoint.sh && \
add minisign verification for container builds (#10115)
2020-07-22 20:09:31 -04:00
chmod +x /usr/bin/verify-minio.sh && \
remove unnecessary RPMs to reduce security reports (#13565)
2021-11-02 17:15:46 -04:00
/usr/bin/verify-minio.sh && \
microdnf clean all
Add docker release files. (#4473) We used to release by building directly on the docker hub auto build process, which is sufficient for edge but it is not a good idea to do it for stable releases. Do not build docker release binaries again, but instead use the released binaries themselves which are signed and validated.
2017-06-14 05:08:35 -04:00
EXPOSE 9000
ENTRYPOINT ["/usr/bin/docker-entrypoint.sh"]
Update volume in Dockerfiles (#5646) All sample commands in Minio docs use the volume path as /data. Updated the dockerfiles to follow the same pattern. Fixes #5635
2018-03-13 21:29:27 -04:00
VOLUME ["/data"]
Add docker release files. (#4473) We used to release by building directly on the docker hub auto build process, which is sufficient for edge but it is not a good idea to do it for stable releases. Do not build docker release binaries again, but instead use the released binaries themselves which are signed and validated.
2017-06-14 05:08:35 -04:00
CMD ["minio"]