cc0f072908
* Enable running container as mqm * Fix merge problem * Don't force root usage * RHEL image runs as mqm instead of root * Build on host with SELinux enabled * Enable building on node in an OpenShift cluster * Enable running container as mqm * Fix merge problem * Don't force root usage * Merge lastest changes from master * RHEL image runs as mqm instead of root * Fix merge issues * Test changes for non-root * Make timeout properly, and more non-root test fixes * Run tests with fewer/no capabilities * Correct usage docs for non-root * Add security docs * Add temporary debug output * Remove debug code * Fixes for termination-log * Allow init container to run as root * Fixes for CentOS build * Fixes for RHEL build * Logging improvements * Fix Dockerfile RHEL/CentOS build * Fix bash error * Make all builds specify UID * Use redist client for Go SDK * Inspect image before running tests * New test for init container * Log container runtime in runmqdevserver * Add extra capabilities if using a RHEL image
85 lines
3.1 KiB
Plaintext
85 lines
3.1 KiB
Plaintext
# © Copyright IBM Corporation 2015, 2019
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
ARG BASE_IMAGE=ubuntu:16.04
|
|
ARG BUILDER_IMAGE=mq-golang-sdk:9.1.1.0-x86_64-ubuntu-16.04
|
|
|
|
###############################################################################
|
|
# Build stage to build Go code
|
|
###############################################################################
|
|
FROM $BUILDER_IMAGE as builder
|
|
WORKDIR /go/src/github.com/ibm-messaging/mq-container/
|
|
ARG IMAGE_REVISION="Not specified"
|
|
ARG IMAGE_SOURCE="Not specified"
|
|
ARG IMAGE_TAG="Not specified"
|
|
COPY cmd/ ./cmd
|
|
COPY internal/ ./internal
|
|
COPY vendor/ ./vendor
|
|
RUN go build -ldflags "-X \"main.ImageCreated=$(date --iso-8601=seconds)\" -X \"main.ImageRevision=$IMAGE_REVISION\" -X \"main.ImageSource=$IMAGE_SOURCE\" -X \"main.ImageTag=$IMAGE_TAG\"" ./cmd/runmqserver/
|
|
RUN go build ./cmd/chkmqready/
|
|
RUN go build ./cmd/chkmqhealthy/
|
|
# Run all unit tests
|
|
RUN go test -v ./cmd/runmqserver/
|
|
RUN go test -v ./cmd/chkmqready/
|
|
RUN go test -v ./cmd/chkmqhealthy/
|
|
RUN go test -v ./internal/...
|
|
RUN go vet ./cmd/... ./internal/...
|
|
|
|
###############################################################################
|
|
# Main build stage, to build MQ image
|
|
###############################################################################
|
|
FROM $BASE_IMAGE
|
|
|
|
# The URL to download the MQ installer from in tar.gz format
|
|
# This assumes an archive containing the MQ Debian (.deb) install packages
|
|
ARG MQ_URL
|
|
|
|
# The MQ packages to install - see install-mq.sh for default value
|
|
ARG MQ_PACKAGES
|
|
|
|
# The UID to use for the "mqm" user
|
|
ARG MQM_UID=999
|
|
|
|
COPY install-mq.sh /usr/local/bin/
|
|
|
|
# Install MQ. To avoid a "text file busy" error here, we sleep before installing.
|
|
RUN chmod u+x /usr/local/bin/install-mq.sh \
|
|
&& sleep 1 \
|
|
&& install-mq.sh $MQM_UID
|
|
|
|
# Create a directory for runtime data from runmqserver
|
|
RUN mkdir -p /run/runmqserver \
|
|
&& chown mqm:mqm /run/runmqserver
|
|
|
|
COPY --from=builder /go/src/github.com/ibm-messaging/mq-container/runmqserver /usr/local/bin/
|
|
COPY --from=builder /go/src/github.com/ibm-messaging/mq-container/chkmq* /usr/local/bin/
|
|
COPY NOTICES.txt /opt/mqm/licenses/notices-container.txt
|
|
|
|
RUN chmod ug+x /usr/local/bin/runmqserver \
|
|
&& chown mqm:mqm /usr/local/bin/*mq* \
|
|
&& chmod ug+xs /usr/local/bin/chkmq* \
|
|
&& install --directory --mode 0775 --owner mqm --group root /run/runmqserver \
|
|
&& touch /run/termination-log \
|
|
&& chown mqm:root /run/termination-log \
|
|
&& chmod 0660 /run/termination-log
|
|
|
|
# Always use port 1414 for MQ & 9157 for the metrics
|
|
EXPOSE 1414 9157
|
|
|
|
ENV LANG=en_US.UTF-8 AMQ_DIAGNOSTIC_MSG_SEVERITY=1 AMQ_ADDITIONAL_JSON_LOG=1 LOG_FORMAT=basic
|
|
|
|
USER $MQM_UID
|
|
|
|
ENTRYPOINT ["runmqserver"]
|