mirror of
https://github.com/d9pouces/id_configurator.git
synced 2026-11-09 01:47:21 +01:00
feat: enhance Certificate and certificate-repo Dockerfiles to support git operations and OpenSSL verification
Signed-off-by: d9pouces <github@19pouces.net>
This commit is contained in:
@@ -5,7 +5,11 @@ COPY --from=generated-config Certificate.yaml /config.yaml
|
||||
RUN id-configurator apply --config /config.yaml --src /src --dst /dst
|
||||
FROM target AS runtime
|
||||
ARG CERTIFICATE_REPO_PORT
|
||||
RUN apt-get update && apt-get install -y --no-install-recommends wget curl
|
||||
RUN apt-get update && apt-get install -y --no-install-recommends wget curl git openssl
|
||||
COPY --from=configuration /dst/ /
|
||||
RUN wget -qO- "https://host.docker.internal:${CERTIFICATE_REPO_PORT}/marker.txt" | grep -qx trusted-via-root-ca
|
||||
RUN curl -fsS "https://host.docker.internal:${CERTIFICATE_REPO_PORT}/marker.txt" | grep -qx trusted-via-root-ca
|
||||
RUN git clone -q "https://host.docker.internal:${CERTIFICATE_REPO_PORT}/repo.git" /tmp/clone \
|
||||
&& grep -qx trusted-via-root-ca /tmp/clone/marker.txt
|
||||
RUN echo | openssl s_client -connect "host.docker.internal:${CERTIFICATE_REPO_PORT}" \
|
||||
-servername host.docker.internal -verify_hostname host.docker.internal -verify_return_error
|
||||
|
||||
Reference in New Issue
Block a user