root
/
minio
mirror of https://github.com/minio/minio.git
1
0
Fork 0
Code Issues Actions 1 Packages Projects Releases Wiki Activity
minio/Dockerfile.release

55 lines
2.4 KiB
Docker
Raw Normal View History

upgrade container base image to ubi-9 (#18313) This commit updates the container base image from ubi:8.8 to ubi:9.2. Signed-off-by: Andreas Auernhammer <github@aead.dev>
2023-10-25 23:32:18 +08:00
FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2
Add docker release files. (#4473) We used to release by building directly on the docker hub auto build process, which is sufficient for edge but it is not a good idea to do it for stable releases. Do not build docker release binaries again, but instead use the released binaries themselves which are signed and validated.
2017-06-14 17:08:35 +08:00
fix: docker buildx support for multiplatform build (#10983)
2020-11-27 01:47:30 +08:00
ARG TARGETARCH
add release build-arg to docker multiarch builds (#11752)
2021-03-11 01:41:44 +08:00
ARG RELEASE
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-09 03:14:06 +08:00
LABEL name="MinIO" \
vendor="MinIO Inc <dev@min.io>" \
maintainer="MinIO Inc <dev@min.io>" \
add release build-arg to docker multiarch builds (#11752)
2021-03-11 01:41:44 +08:00
version="${RELEASE}" \
release="${RELEASE}" \
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-09 03:14:06 +08:00
summary="MinIO is a High Performance Object Storage, API compatible with Amazon S3 cloud storage service." \
description="MinIO object storage is fundamentally different. Designed for performance and the S3 API, it is 100% open-source. MinIO is ideal for large, private cloud environments with stringent security requirements and delivers mission-critical availability across a diverse range of workloads."
change MAINTAINER to LABEL (#5843)
2018-04-25 00:57:48 +08:00
Revert "fix: remove deprecated MINIO_ACCESS_KEY, MINIO_SECRET_KEY envs (#12173)" This reverts commit b0baaeaa3ddee9573d3b1ac698e1182d2cc883fe.
2021-04-30 01:55:05 +08:00
ENV MINIO_ACCESS_KEY_FILE=access_key \
MINIO_SECRET_KEY_FILE=secret_key \
MINIO_ROOT_USER_FILE=access_key \
feat: migrate to ROOT_USER/PASSWORD from ACCESS/SECRET_KEY (#11185)
2021-01-06 02:22:57 +08:00
MINIO_ROOT_PASSWORD_FILE=secret_key \
kms: encrypt IAM/config data with the KMS (#12041) This commit changes the config/IAM encryption process. Instead of encrypting config data (users, policies etc.) with the root credentials MinIO now encrypts this data with a KMS - if configured. Therefore, this PR moves the MinIO-KMS configuration (via env. variables) to a "top-level" configuration. The KMS configuration cannot be stored in the config file since it is used to decrypt the config file in the first place. As a consequence, this commit also removes support for Hashicorp Vault - which has been deprecated anyway. Signed-off-by: Andreas Auernhammer <aead@mail.de>
2021-04-22 23:45:30 +08:00
MINIO_KMS_SECRET_KEY_FILE=kms_master_key \
Allow MinIO to load configurations from env file (#12706) docker-entrypoint.sh will load configuration values from 'config.env' file, this is useful when MinIO is deployed in Kubernetes environments and want to avoid reading secrets from environment variables Signed-off-by: Lenin Alevski <alevsk.8772@gmail.com>
2021-07-15 07:55:59 +08:00
MINIO_UPDATE_MINISIGN_PUBKEY="RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav" \
fix: add Dockerfile.release* /opt/bin writable
2021-09-10 13:19:11 +08:00
MINIO_CONFIG_ENV_FILE=config.env \
add MC_CONFIG_DIR to use mc from writable path (#18317) `mc` will currenly fail inside MinIO pod without `--config-dir` option, instead use the ENV to avoid passing flags.
2023-10-27 01:52:10 +08:00
MC_CONFIG_DIR=/tmp/.mc \
update dockerfile with proper PATHs
2021-11-23 08:48:05 +08:00
PATH=/opt/bin:$PATH
Support in-place upgrades of new minio binary and releases. (#4961) This PR allows 'minio update' to not only shows update banner but also allows for in-place upgrades. Updates are done safely by validating the downloaded sha256 of the binary. Fixes #4781
2017-12-16 04:33:42 +08:00
fix: docker buildx support for multiplatform build (#10983)
2020-11-27 01:47:30 +08:00
COPY dockerscripts/verify-minio.sh /usr/bin/verify-minio.sh
COPY dockerscripts/docker-entrypoint.sh /usr/bin/docker-entrypoint.sh
COPY CREDITS /licenses/CREDITS
COPY LICENSE /licenses/LICENSE
Add docker release files. (#4473) We used to release by building directly on the docker hub auto build process, which is sufficient for edge but it is not a good idea to do it for stable releases. Do not build docker release binaries again, but instead use the released binaries themselves which are signed and validated.
2017-06-14 17:08:35 +08:00
RUN \
remove unnecessary RPMs to reduce security reports (#13565)
2021-11-03 05:15:46 +08:00
microdnf clean all && \
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-09 03:14:06 +08:00
microdnf update --nodocs && \
rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm && \
add additional tools that help in debugging (#17325)
2023-06-01 04:06:08 +08:00
microdnf install curl ca-certificates shadow-utils util-linux gzip lsof tar net-tools iproute iputils jq minisign --nodocs && \
fix: add Dockerfile.release* /opt/bin writable
2021-09-10 13:19:11 +08:00
mkdir -p /opt/bin && chmod -R 777 /opt/bin && \
curl -s -q https://dl.min.io/server/minio/release/linux-${TARGETARCH}/archive/minio.${RELEASE} -o /opt/bin/minio && \
curl -s -q https://dl.min.io/server/minio/release/linux-${TARGETARCH}/archive/minio.${RELEASE}.sha256sum -o /opt/bin/minio.sha256sum && \
curl -s -q https://dl.min.io/server/minio/release/linux-${TARGETARCH}/archive/minio.${RELEASE}.minisig -o /opt/bin/minio.minisig && \
ship mc along with MinIO container image (#16156)
2022-12-03 03:19:22 +08:00
curl -s -q https://dl.min.io/client/mc/release/linux-${TARGETARCH}/mc -o /opt/bin/mc && \
Remove alpine based image in favour or RedHat UBI (#11006)
2020-12-09 03:14:06 +08:00
microdnf clean all && \
fix: add Dockerfile.release* /opt/bin writable
2021-09-10 13:19:11 +08:00
chmod +x /opt/bin/minio && \
fix: allow mc executable inside minio containers (#17755)
2023-07-31 15:13:41 +08:00
chmod +x /opt/bin/mc && \
Add support for minioreleaser a fork for goreleaser (#9890) This is to support building containers for multiple platforms, rpms and debs all in a single build process https://github.com/harshavardhana/minioreleaser
2020-06-22 23:26:40 +08:00
chmod +x /usr/bin/docker-entrypoint.sh && \
add minisign verification for container builds (#10115)
2020-07-23 08:09:31 +08:00
chmod +x /usr/bin/verify-minio.sh && \
remove unnecessary RPMs to reduce security reports (#13565)
2021-11-03 05:15:46 +08:00
/usr/bin/verify-minio.sh && \
microdnf clean all
Add docker release files. (#4473) We used to release by building directly on the docker hub auto build process, which is sufficient for edge but it is not a good idea to do it for stable releases. Do not build docker release binaries again, but instead use the released binaries themselves which are signed and validated.
2017-06-14 17:08:35 +08:00
EXPOSE 9000
ENTRYPOINT ["/usr/bin/docker-entrypoint.sh"]
Update volume in Dockerfiles (#5646) All sample commands in Minio docs use the volume path as /data. Updated the dockerfiles to follow the same pattern. Fixes #5635
2018-03-14 09:29:27 +08:00
VOLUME ["/data"]
Add docker release files. (#4473) We used to release by building directly on the docker hub auto build process, which is sufficient for edge but it is not a good idea to do it for stable releases. Do not build docker release binaries again, but instead use the released binaries themselves which are signed and validated.
2017-06-14 17:08:35 +08:00
CMD ["minio"]