mirror of
https://github.com/coder/coder.git
synced 2026-06-03 04:58:23 +00:00
a10ca93c42
Bumps alpine from 3.22.1 to 3.22.2. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
38 lines
1.5 KiB
Docker
38 lines
1.5 KiB
Docker
# This is the base image used for Coder images. It's a multi-arch image that is
|
|
# built in depot.dev for all supported architectures. Since it's built on real
|
|
# hardware and not cross-compiled, it can have "RUN" commands.
|
|
FROM alpine:3.22.2@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
|
|
|
|
# We use a single RUN command to reduce the number of layers in the image.
|
|
# NOTE: Keep the Terraform version in sync with minTerraformVersion and
|
|
# maxTerraformVersion in provisioner/terraform/install.go.
|
|
RUN apk add --no-cache \
|
|
curl \
|
|
wget \
|
|
bash \
|
|
git \
|
|
openssl \
|
|
openssh-client && \
|
|
addgroup \
|
|
-g 1000 \
|
|
coder && \
|
|
adduser \
|
|
-D \
|
|
-s /bin/bash \
|
|
-h /home/coder \
|
|
-u 1000 \
|
|
-G coder \
|
|
coder
|
|
# Terraform was disabled in the edge repo due to a build issue.
|
|
# https://gitlab.alpinelinux.org/alpine/aports/-/commit/f3e263d94cfac02d594bef83790c280e045eba35
|
|
# Using wget for now. Note that busybox unzip doesn't support streaming.
|
|
RUN ARCH="$(arch)"; if [ "${ARCH}" == "x86_64" ]; then ARCH="amd64"; elif [ "${ARCH}" == "aarch64" ]; then ARCH="arm64"; elif [ "${ARCH}" == "armv7l" ]; then ARCH="arm"; fi; wget -O /tmp/terraform.zip "https://releases.hashicorp.com/terraform/1.13.0/terraform_1.13.0_linux_${ARCH}.zip" && \
|
|
busybox unzip /tmp/terraform.zip -d /usr/local/bin && \
|
|
rm -f /tmp/terraform.zip && \
|
|
chmod +x /usr/local/bin/terraform && \
|
|
terraform --version
|
|
USER 1000:1000
|
|
ENV HOME=/home/coder
|
|
ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt
|
|
WORKDIR /home/coder
|