mirror of
https://github.com/d9pouces/id_configurator.git
synced 2026-11-09 01:47:21 +01:00
d9pouces
16 lines
976 B
Docker
16 lines
976 B
Docker
FROM debian:trixie-slim AS target
|
|
FROM interdiode/id-configurator:latest AS configuration
|
|
COPY --from=target / /src/
|
|
COPY --from=generated-config Certificate.yaml /config.yaml
|
|
RUN id-configurator apply --config /config.yaml --src /src --dst /dst
|
|
FROM target AS runtime
|
|
ARG CERTIFICATE_REPO_PORT
|
|
RUN apt-get update && apt-get install -y --no-install-recommends wget curl git openssl
|
|
COPY --from=configuration /dst/ /
|
|
RUN wget -qO- "https://host.docker.internal:${CERTIFICATE_REPO_PORT}/marker.txt" | grep -qx trusted-via-root-ca
|
|
RUN curl -fsS "https://host.docker.internal:${CERTIFICATE_REPO_PORT}/marker.txt" | grep -qx trusted-via-root-ca
|
|
RUN git clone -q "https://host.docker.internal:${CERTIFICATE_REPO_PORT}/repo.git" /tmp/clone \
|
|
&& grep -qx trusted-via-root-ca /tmp/clone/marker.txt
|
|
RUN echo | openssl s_client -connect "host.docker.internal:${CERTIFICATE_REPO_PORT}" \
|
|
-servername host.docker.internal -verify_hostname host.docker.internal -verify_return_error
|