alpine-vault/Dockerfile at master · woahbase/alpine-vault · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
# syntax=docker/dockerfile:1
#
ARG IMAGEBASE=frommakefile
#
FROM ${IMAGEBASE}
#
ARG RELURL=https://releases.hashicorp.com
ARG SRCARCH
ARG VERSION
#
ENV \
    VAULT_HOME=/vault \
    VAULT_ROLE=server
#
RUN set -ex \
    && apk add -Uu --no-cache \
        ca-certificates \
        curl \
        libcap \
        tzdata \
    && (if [ ! -e /etc/nsswitch.conf ]; then echo 'hosts: files dns' > /etc/nsswitch.conf; fi) \
    && mkdir -p /tmp/vault \
    && cd /tmp/vault \
#
    && echo "Using vault: $SRCARCH $VERSION" \
    && curl \
        -o vault_${VERSION}_${SRCARCH}.zip \
        -SL ${RELURL}/vault/${VERSION}/vault_${VERSION}_${SRCARCH}.zip \
    && curl \
        -o vault_${VERSION}_SHA256SUMS \
        -SL ${RELURL}/vault/${VERSION}/vault_${VERSION}_SHA256SUMS \
#
    # fix old sha256sum single vs double spacing issue for alpine, newer version does not care about space
    # && sed -ie 's/ /  /' vault_${VERSION}_SHA256SUMS \
    && grep vault_${VERSION}_${SRCARCH}.zip vault_${VERSION}_SHA256SUMS \
        | sha256sum -c \
#
    && unzip -d /tmp/vault vault_${VERSION}_${SRCARCH}.zip \
    && mv vault /usr/local/bin/vault \
    && chmod +x /usr/local/bin/vault \
#
    && apk del --purge \
        curl \
    && rm -rf /var/cache/apk/* /tmp/*
#
COPY root/ /
#
VOLUME ${VAULT_HOME}
#
EXPOSE 8200 8201
#
HEALTHCHECK \
    --interval=2m \
    --retries=5 \
    --start-period=5m \
    --timeout=10s \
    CMD \
    wget --quiet --tries=1 --no-check-certificate --spider ${HEALTHCHECK_URL:-"http://localhost:8200/"} || exit 1
#
ENTRYPOINT ["/init"]