-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathDockerfile
103 lines (90 loc) · 5.27 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
# Setup build arguments with default versions
ARG TERRAFORM_VERSION=1.1.7
ARG PYTHON_MAJOR_VERSION=3.7
ARG DEBIAN_VERSION=buster-20220316-slim
ARG ARCHITECTURE=amd64
# Download Terraform binary
FROM debian:${DEBIAN_VERSION} as terraform-cli
ARG TERRAFORM_VERSION
# platform of the build result. Eg linux/amd64, linux/arm/v7, windows/amd64
ARG TARGETPLATFORM
ARG ARCHITECTURE=${ARCHITECTURE}
ENV ARCHITECTURE $ARCHITECTURE
RUN apt-get update
RUN apt-get install -y --no-install-recommends apt-utils
RUN apt-get install -y --no-install-recommends curl=7.64.0-4+deb10u2
RUN apt-get install -y --no-install-recommends ca-certificates
RUN update-ca-certificates
RUN apt-get install -y --no-install-recommends unzip=6.0-23+deb10u2
RUN apt-get install -y --no-install-recommends gnupg=2.2.12-1+deb10u1
RUN apt-get install -y --no-install-recommends wget
RUN wget https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_SHA256SUMS
# Conditional magic
RUN if [ "$TARGETPLATFORM" = "linux/amd64" ]; then ARCHITECTURE=amd64; elif [ "$TARGETPLATFORM" = "linux/arm/v7" ]; then ARCHITECTURE=arm64; elif [ "$TARGETPLATFORM" = "linux/arm64" ]; then ARCHITECTURE=arm64; else ARCHITECTURE=amd64; fi \
&& wget https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_${ARCHITECTURE}.zip
RUN wget https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_SHA256SUMS.sig
# Hashicorp PGP public key, see https://www.hashicorp.com/security
RUN wget https://raw.githubusercontent.com/sethvargo/hashicorp-installer/master/hashicorp.asc
RUN gpg --import hashicorp.asc
RUN gpg --verify terraform_${TERRAFORM_VERSION}_SHA256SUMS.sig terraform_${TERRAFORM_VERSION}_SHA256SUMS
SHELL ["/bin/bash", "-o", "pipefail", "-c"]
# Conditional magic
RUN if [ "$TARGETPLATFORM" = "linux/amd64" ]; then ARCHITECTURE=amd64; elif [ "$TARGETPLATFORM" = "linux/arm/v7" ]; then ARCHITECTURE=arm64; elif [ "$TARGETPLATFORM" = "linux/arm64" ]; then ARCHITECTURE=arm64; else ARCHITECTURE=amd64; fi \
&& grep terraform_${TERRAFORM_VERSION}_linux_${ARCHITECTURE}.zip terraform_${TERRAFORM_VERSION}_SHA256SUMS | sha256sum -c - \
&& unzip -j terraform_${TERRAFORM_VERSION}_linux_${ARCHITECTURE}.zip
# Install GO and terratest log parser for testing
FROM debian:${DEBIAN_VERSION} as go
# platform of the build result. Eg linux/amd64, linux/arm/v7, windows/amd64
ARG TARGETPLATFORM
ARG ARCHITECTURE=${ARCHITECTURE}
ENV ARCHITECTURE $ARCHITECTURE
RUN apt-get update
RUN apt-get install -y --no-install-recommends ca-certificates
RUN update-ca-certificates
RUN apt-get install -y --no-install-recommends wget
# Conditional magic
# Install terratest log parser binary
RUN if [ "$TARGETPLATFORM" = "linux/amd64" ]; then ARCHITECTURE=amd64; elif [ "$TARGETPLATFORM" = "linux/arm/v7" ]; then ARCHITECTURE=arm64; elif [ "$TARGETPLATFORM" = "linux/arm64" ]; then ARCHITECTURE=arm64; else ARCHITECTURE=amd64; fi \
&& wget https://golang.org/dl/go1.16.3.linux-${ARCHITECTURE}.tar.gz \
&& rm -rf /usr/local/go && tar -C /usr/local -xzf go1.16.3.linux-${ARCHITECTURE}.tar.gz \
&& wget -O terratest_log_parser https://github.com/gruntwork-io/terratest/releases/download/v0.40.6/terratest_log_parser_linux_${ARCHITECTURE}
RUN chmod +x terratest_log_parser
RUN mv terratest_log_parser /usr/local/bin
# Build final image
FROM debian:${DEBIAN_VERSION}
LABEL maintainer="LIM, CHOOI GUAN"
ARG PYTHON_MAJOR_VERSION
# platform of the build result. Eg linux/amd64, linux/arm/v7, windows/amd64
ARG TARGETPLATFORM
ARG ARCHITECTURE=${ARCHITECTURE}
ENV ARCHITECTURE $ARCHITECTURE
RUN if [ "$TARGETPLATFORM" = "linux/amd64" ]; then ARCHITECTURE=x86_64; elif [ "$TARGETPLATFORM" = "linux/arm/v7" ]; then ARCHITECTURE=aarch64; elif [ "$TARGETPLATFORM" = "linux/arm64" ]; then ARCHITECTURE=aarch64; else ARCHITECTURE=x86_64; fi \
&& echo ${ARCHITECTURE}
RUN apt-get update \
&& apt-get install -y --no-install-recommends \
ca-certificates \
git=1:2.20.1-2+deb10u3 \
python3=${PYTHON_MAJOR_VERSION}.3-1 \
python3-distutils=${PYTHON_MAJOR_VERSION}.3-1 \
unzip curl less groff \
python3-pip python3-setuptools \
nodejs npm \
# Needed for go terraform tests
&& apt-get install -y gcc=4:8.3.0-1 \
&& apt-get clean \
&& rm -rf /var/lib/apt/lists/* \
&& update-alternatives --install /usr/bin/python python /usr/bin/python${PYTHON_MAJOR_VERSION} 1 \
&& update-ca-certificates \
# Install az cli using curl piped to bash (x86 only for now)
&& if [ "$TARGETPLATFORM" = "linux/amd64" ]; then ARCHITECTURE=x86_64; elif [ "$TARGETPLATFORM" = "linux/arm/v7" ]; then ARCHITECTURE=aarch64; elif [ "$TARGETPLATFORM" = "linux/arm64" ]; then ARCHITECTURE=aarch64; else ARCHITECTURE=x86_64; fi \
&& if [ "${ARCHITECTURE}" = "x86_64" ]; then curl -sL https://aka.ms/InstallAzureCLIDeb | bash; else echo "Not installing az cli (ARM) as not available"; fi
COPY --from=terraform-cli /terraform /usr/local/bin/terraform
COPY --from=go /usr/local/go /usr/local/go
COPY --from=go /usr/local/bin/terratest_log_parser /usr/local/bin/terratest_log_parser
ENV PATH="${PATH}:/usr/local/go/bin:/usr/local/gcloud/google-cloud-sdk/bin"
WORKDIR /workspace
RUN groupadd --gid 1001 nonroot \
&& useradd --gid nonroot --create-home --uid 1001 nonroot \
&& chown nonroot:nonroot /workspace
USER nonroot
CMD ["bash"]