mirror of
https://github.com/k3s-io/k3s.git
synced 2024-06-07 19:41:36 +00:00
6330a5b49c
* Update to v1.28.2 Signed-off-by: Johnatas <johnatasr@hotmail.com> * Bump containerd and stargz versions Signed-off-by: Brad Davidson <brad.davidson@rancher.com> * Print message on upgrade fail Signed-off-by: Brad Davidson <brad.davidson@rancher.com> * Send Bad Gateway instead of Service Unavailable when tunnel dial fails Works around new handling for Service Unavailable by apiserver aggregation added in kubernetes/kubernetes#119870 Signed-off-by: Brad Davidson <brad.davidson@rancher.com> * Add 60 seconds to server upgrade wait to account for delays in apiserver readiness Also change cleanup helper to ensure upgrade test doesn't pollute the images for the rest of the tests. Signed-off-by: Brad Davidson <brad.davidson@rancher.com> --------- Signed-off-by: Johnatas <johnatasr@hotmail.com> Signed-off-by: Brad Davidson <brad.davidson@rancher.com> Co-authored-by: Brad Davidson <brad.davidson@rancher.com>
65 lines
2.9 KiB
Docker
65 lines
2.9 KiB
Docker
ARG GOLANG=golang:1.20.8-alpine3.18
|
|
FROM ${GOLANG}
|
|
|
|
ARG http_proxy=$http_proxy
|
|
ARG https_proxy=$https_proxy
|
|
ARG no_proxy=$no_proxy
|
|
ENV http_proxy=$http_proxy
|
|
ENV https_proxy=$https_proxy
|
|
ENV no_proxy=$no_proxy
|
|
|
|
RUN apk -U --no-cache add bash git gcc musl-dev docker vim less file curl wget ca-certificates jq linux-headers \
|
|
zlib-dev tar zip squashfs-tools npm coreutils python3 py3-pip openssl-dev libffi-dev libseccomp libseccomp-dev \
|
|
libseccomp-static make libuv-static sqlite-dev sqlite-static libselinux libselinux-dev zlib-dev zlib-static \
|
|
zstd pigz alpine-sdk binutils-gold btrfs-progs-dev btrfs-progs-static gawk yq \
|
|
&& \
|
|
if [ "$(go env GOARCH)" = "amd64" ]; then \
|
|
apk -U --no-cache add mingw-w64-gcc; \
|
|
fi
|
|
|
|
RUN python3 -m pip install awscli
|
|
|
|
RUN TRIVY_VERSION="0.44.1" && \
|
|
if [ "$(go env GOARCH)" != "arm" ] && [ "$(go env GOARCH)" != "386" ]; then \
|
|
if [ "$(go env GOARCH)" = "arm64" ]; then \
|
|
# Turn arm64 into uppercase ARM64 for Trivy's download
|
|
TRIVY_ARCH=$(go env GOARCH | tr "[:lower:]" "[:upper:]") && \
|
|
wget --no-verbose "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-${TRIVY_ARCH}.tar.gz" && \
|
|
tar -zxvf "trivy_${TRIVY_VERSION}_Linux-${TRIVY_ARCH}.tar.gz" && \
|
|
mv trivy /usr/local/bin; \
|
|
elif [ "$(go env GOARCH)" = "amd64" ]; then \
|
|
wget --no-verbose "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" && \
|
|
tar -zxvf "trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" && \
|
|
mv trivy /usr/local/bin; \
|
|
elif [ "$(go env GOARCH)" = "s390x" ]; then \
|
|
wget --no-verbose "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-s390x.tar.gz" && \
|
|
tar -zxvf "trivy_${TRIVY_VERSION}_Linux-s390x.tar.gz" && \
|
|
mv trivy /usr/local/bin; \
|
|
fi \
|
|
fi
|
|
|
|
# this works for both go 1.17 and 1.18
|
|
RUN GOPROXY=direct go install golang.org/x/tools/cmd/goimports@gopls/v0.11.0
|
|
RUN rm -rf /go/src /go/pkg
|
|
|
|
RUN if [ "$(go env GOARCH)" = "amd64" ]; then \
|
|
curl -sL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s v1.51.2; \
|
|
fi
|
|
|
|
ARG SELINUX=true
|
|
ENV SELINUX $SELINUX
|
|
|
|
ENV DAPPER_RUN_ARGS --privileged -v k3s-cache:/go/src/github.com/k3s-io/k3s/.cache -v trivy-cache:/root/.cache/trivy
|
|
ENV DAPPER_ENV REPO TAG DRONE_TAG IMAGE_NAME SKIP_VALIDATE SKIP_IMAGE SKIP_AIRGAP AWS_SECRET_ACCESS_KEY AWS_ACCESS_KEY_ID GITHUB_TOKEN GOLANG GOCOVER DEBUG
|
|
ENV DAPPER_SOURCE /go/src/github.com/k3s-io/k3s/
|
|
ENV DAPPER_OUTPUT ./bin ./dist ./build/out ./build/static ./pkg/static ./pkg/deploy
|
|
|
|
ENV DAPPER_DOCKER_SOCKET true
|
|
ENV HOME ${DAPPER_SOURCE}
|
|
ENV CROSS true
|
|
ENV STATIC_BUILD true
|
|
WORKDIR ${DAPPER_SOURCE}
|
|
|
|
ENTRYPOINT ["./scripts/entry.sh"]
|
|
CMD ["ci"]
|