mirror of https://github.com/jumpserver/jumpserver
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
66 lines
2.0 KiB
66 lines
2.0 KiB
FROM jumpserver/core-base:20240919_024156 AS stage-build |
|
|
|
ARG VERSION |
|
|
|
WORKDIR /opt/jumpserver |
|
|
|
ADD . . |
|
|
|
RUN echo > /opt/jumpserver/config.yml \ |
|
&& \ |
|
if [ -n "${VERSION}" ]; then \ |
|
sed -i "s@VERSION = .*@VERSION = '${VERSION}'@g" apps/jumpserver/const.py; \ |
|
fi |
|
|
|
RUN set -ex \ |
|
&& export SECRET_KEY=$(head -c100 < /dev/urandom | base64 | tr -dc A-Za-z0-9 | head -c 48) \ |
|
&& . /opt/py3/bin/activate \ |
|
&& cd apps \ |
|
&& python manage.py compilemessages |
|
|
|
|
|
FROM python:3.11-slim-bullseye |
|
ENV LANG=en_US.UTF-8 \ |
|
PATH=/opt/py3/bin:$PATH |
|
|
|
ARG DEPENDENCIES=" \ |
|
libldap2-dev \ |
|
libx11-dev" |
|
|
|
ARG TOOLS=" \ |
|
ca-certificates \ |
|
default-libmysqlclient-dev \ |
|
openssh-client \ |
|
sshpass \ |
|
bubblewrap" |
|
|
|
ARG APT_MIRROR=http://deb.debian.org |
|
RUN set -ex \ |
|
&& rm -f /etc/apt/apt.conf.d/docker-clean \ |
|
&& sed -i "s@http://.*.debian.org@${APT_MIRROR}@g" /etc/apt/sources.list \ |
|
&& ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \ |
|
&& apt-get update > /dev/null \ |
|
&& apt-get -y install --no-install-recommends ${DEPENDENCIES} \ |
|
&& apt-get -y install --no-install-recommends ${TOOLS} \ |
|
&& apt-get clean \ |
|
&& mkdir -p /root/.ssh/ \ |
|
&& echo "Host *\n\tStrictHostKeyChecking no\n\tUserKnownHostsFile /dev/null\n\tCiphers +aes128-cbc\n\tKexAlgorithms +diffie-hellman-group1-sha1\n\tHostKeyAlgorithms +ssh-rsa" > /root/.ssh/config \ |
|
&& echo "no" | dpkg-reconfigure dash \ |
|
&& sed -i "s@# export @export @g" ~/.bashrc \ |
|
&& sed -i "s@# alias @alias @g" ~/.bashrc |
|
|
|
COPY --from=stage-build /opt /opt |
|
COPY --from=stage-build /usr/local/bin /usr/local/bin |
|
COPY --from=stage-build /opt/jumpserver/apps/libs/ansible/ansible.cfg /etc/ansible/ |
|
|
|
WORKDIR /opt/jumpserver |
|
|
|
VOLUME /opt/jumpserver/data |
|
|
|
ENTRYPOINT ["./entrypoint.sh"] |
|
|
|
EXPOSE 8080 |
|
|
|
STOPSIGNAL SIGQUIT |
|
|
|
CMD ["start", "all"]
|
|
|