forked from sigstore/cosign
-
Notifications
You must be signed in to change notification settings - Fork 9
/
Dockerfile.client-server-cg.rh
40 lines (33 loc) · 2.8 KB
/
Dockerfile.client-server-cg.rh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
# Provides the Trusted Artifact Signer CLI binaries, cosign and gitsign
FROM quay.io/securesign/cli-cosign@sha256:4ec69652b96c3cfddc813c42a763d81dc82f894c745a33e99deaa92814f4e918 AS cosign
FROM quay.io/securesign/gitsign@sha256:26288a765783d5c0ee93c5150523eca7610a021d9725494d4373f0529a2fee29 AS gitsign
FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:f5d2c6a1e0c86e4234ea601552dbabb4ced0e013a1efcbfb439f1f6a7a9275b0
ENV APP_ROOT=/opt/app-root
WORKDIR $APP_ROOT/src/
RUN mkdir -p $APP_ROOT/src/clients/darwin && \
mkdir -p $APP_ROOT/src/clients/linux && \
mkdir -p $APP_ROOT/src/clients/windows
COPY --from=cosign /usr/local/bin/cosign-darwin-amd64.gz $APP_ROOT/src/clients/darwin/cosign-amd64.gz
COPY --from=cosign /usr/local/bin/cosign-darwin-arm64.gz $APP_ROOT/src/clients/darwin/cosign-arm64.gz
COPY --from=cosign /usr/local/bin/cosign-linux-amd64.gz $APP_ROOT/src/clients/linux/cosign-amd64.gz
COPY --from=cosign /usr/local/bin/cosign-linux-arm64.gz $APP_ROOT/src/clients/linux/cosign-arm64.gz
COPY --from=cosign /usr/local/bin/cosign-linux-ppc64le.gz $APP_ROOT/src/clients/linux/cosign-ppc64le.gz
COPY --from=cosign /usr/local/bin/cosign-linux-s390x.gz $APP_ROOT/src/clients/linux/cosign-s390x.gz
COPY --from=cosign /usr/local/bin/cosign-windows-amd64.exe.gz $APP_ROOT/src/clients/windows/cosign-amd64.gz
COPY --from=gitsign /usr/local/bin/gitsign_cli_darwin_amd64.gz $APP_ROOT/src/clients/darwin/gitsign-amd64.gz
COPY --from=gitsign /usr/local/bin/gitsign_cli_darwin_arm64.gz $APP_ROOT/src/clients/darwin/gitsign-arm64.gz
COPY --from=gitsign /usr/local/bin/gitsign_cli_linux_amd64.gz $APP_ROOT/src/clients/linux/gitsign-amd64.gz
COPY --from=gitsign /usr/local/bin/gitsign_cli_linux_arm64.gz $APP_ROOT/src/clients/linux/gitsign-arm64.gz
COPY --from=gitsign /usr/local/bin/gitsign_cli_linux_ppc64le.gz $APP_ROOT/src/clients/linux/gitsign-ppc64le.gz
COPY --from=gitsign /usr/local/bin/gitsign_cli_linux_s390x.gz $APP_ROOT/src/clients/linux/gitsign-s390x.gz
COPY --from=gitsign /usr/local/bin/gitsign_cli_windows_amd64.exe.gz $APP_ROOT/src/clients/windows/gitsign-amd64.gz
LABEL \
com.redhat.component="trusted-artifact-signer-serve-cli-container-cg" \
name="trusted-artifact-signer-serve-cli-container-cg" \
version="1.1.0" \
summary="Red Hat serves Trusted Artifact Signer CLI binaries, cosign and gitsign" \
description="Serves Trusted Artifact Signer CLI binaries, cosign and gitsign, from an HTTP server" \
io.k8s.description="Serves Trusted Artifact Signer CLI binaries, cosign and gitsign, from an HTTP server" \
io.k8s.display-name="Red Hat serves Trusted Artifact Signer CLI binaries, cosign and gitsign" \
io.openshift.tags="cosign, gitsign, rhtas, trusted, artifact, signer, sigstore" \
maintainer="[email protected]"