/
Dockerfile
215 lines (167 loc) · 7.24 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
######################################################################
# Establish a common builder image for all golang-based images
FROM golang:1.21 as golang-builder
USER root
WORKDIR /workspace
# We don't vendor modules. Enforce that behavior
ENV GOFLAGS=-mod=readonly
ENV GO111MODULE=on
ENV CGO_ENABLED=1
ARG TARGETOS
ARG TARGETARCH
ENV GOOS=${TARGETOS:-linux}
ENV GOARCH=${TARGETARCH}
######################################################################
# Build the manager binary
FROM golang-builder as manager-builder
# Copy the Go Modules manifests & download dependencies
COPY go.mod go.mod
COPY go.sum go.sum
RUN go mod download
# Copy the go source
COPY main.go main.go
COPY api/ api/
COPY controllers/ controllers/
COPY config/openshift config/openshift
# Build
ARG version_arg="(unknown)"
RUN go build -a -o manager -ldflags "-X=main.volsyncVersion=${version_arg}" main.go
######################################################################
# Build rclone
FROM golang-builder as rclone-builder
ARG RCLONE_VERSION=v1.63.1
ARG RCLONE_GIT_HASH=bd1fbcae12f795f498c7ace6af9d9cc218102094
RUN git clone --depth 1 -b ${RCLONE_VERSION} https://github.com/rclone/rclone.git
WORKDIR /workspace/rclone
# Make sure the Rclone version tag matches the git hash we're expecting
RUN /bin/bash -c "[[ $(git rev-list -n 1 HEAD) == ${RCLONE_GIT_HASH} ]]"
RUN make rclone
######################################################################
# Build restic
FROM golang-builder as restic-builder
COPY /mover-restic/restic ./restic
COPY /mover-restic/minio-go ./minio-go
WORKDIR /workspace/restic
RUN go run build.go --enable-cgo
######################################################################
# Build syncthing
FROM golang-builder as syncthing-builder
ARG SYNCTHING_VERSION="v1.27.7"
ARG SYNCTHING_GIT_HASH="9562cfd5c24c44dd654afc7ca124d6c6e1d50aa8"
RUN git clone --depth 1 -b ${SYNCTHING_VERSION} https://github.com/syncthing/syncthing.git
WORKDIR /workspace/syncthing
# Make sure we have the correct Syncthing release
RUN /bin/bash -c "[[ $(git rev-list -n 1 HEAD) == ${SYNCTHING_GIT_HASH} ]]"
RUN go run build.go -no-upgrade
######################################################################
# Build diskrsync binary
FROM golang-builder AS diskrsync-builder
ARG DISKRSYNC_VERSION="v1.3.0"
ARG DISKRSYNC_GIT_HASH="507805c4378495fc2267b77f6eab3d6bb318c86c"
RUN git clone --depth 1 -b ${DISKRSYNC_VERSION} https://github.com/dop251/diskrsync.git
WORKDIR /workspace/diskrsync
# Make sure we have the correct diskrsync release
RUN /bin/bash -c "[[ $(git rev-list -n 1 HEAD) == ${DISKRSYNC_GIT_HASH} ]]"
RUN go build -a -o bin/diskrsync ./diskrsync
######################################################################
# Build diskrsync-tcp binary
FROM golang-builder AS diskrsync-tcp-builder
# Copy the Go Modules manifests & download dependencies
COPY go.mod go.mod
COPY go.sum go.sum
RUN go mod download
# Copy the go source
COPY diskrsync-tcp/ diskrsync-tcp/
# Build
ARG version_arg="(unknown)"
RUN go build -a -o diskrsync-tcp/diskrsync-tcp -ldflags "-X=main.volsyncVersion=${version_arg}" diskrsync-tcp/main.go
######################################################################
# Final container
FROM registry.access.redhat.com/ubi9-minimal
WORKDIR /
RUN microdnf --refresh update -y && \
microdnf --nodocs --setopt=install_weak_deps=0 install -y \
acl `# rclone - getfacl/setfacl` \
openssh `# rsync/ssh - ssh key generation in operator` \
openssh-clients `# rsync/ssh - ssh client` \
openssh-server `# rsync/ssh - ssh server` \
perl `# rsync/ssh - rrsync script` \
stunnel `# rsync-tls` \
openssl `# syncthing - server certs` \
vim-minimal `# for mover debug` \
tar `# for mover debug` \
&& microdnf --setopt=install_weak_deps=0 install -y \
`# docs are needed so rrsync gets installed for ssh variant` \
rsync `# rsync/ssh, rsync-tls - rsync, rrsync` \
&& microdnf clean all && \
rm -rf /var/cache/yum
##### VolSync operator
COPY --from=manager-builder /workspace/manager /manager
##### rclone
COPY --from=rclone-builder /workspace/rclone/rclone /usr/local/bin/rclone
COPY /mover-rclone/active.sh \
/mover-rclone/
RUN chmod a+rx /mover-rclone/*.sh
##### restic
COPY --from=restic-builder /workspace/restic/restic /usr/local/bin/restic
COPY /mover-restic/entry.sh \
/mover-restic/
RUN chmod a+rx /mover-restic/*.sh
##### rsync (ssh)
COPY /mover-rsync/source.sh \
/mover-rsync/destination.sh \
/mover-rsync/destination-command.sh \
/mover-rsync/
RUN chmod a+rx /mover-rsync/*.sh
RUN ln -s /keys/destination /etc/ssh/ssh_host_rsa_key && \
ln -s /keys/destination.pub /etc/ssh/ssh_host_rsa_key.pub && \
install /usr/share/doc/rsync/support/rrsync /usr/local/bin && \
\
SSHD_CONFIG="/etc/ssh/sshd_config" && \
sed -ir 's|^[#\s]*\(.*/etc/ssh/ssh_host_ecdsa_key\)$|#\1|' "$SSHD_CONFIG" && \
sed -ir 's|^[#\s]*\(.*/etc/ssh/ssh_host_ed25519_key\)$|#\1|' "$SSHD_CONFIG" && \
sed -ir 's|^[#\s]*\(PasswordAuthentication\)\s.*$|\1 no|' "$SSHD_CONFIG" && \
sed -ir 's|^[#\s]*\(GSSAPIAuthentication\)\s.*$|\1 no|' "$SSHD_CONFIG" && \
sed -ir 's|^[#\s]*\(AllowTcpForwarding\)\s.*$|\1 no|' "$SSHD_CONFIG" && \
sed -ir 's|^[#\s]*\(X11Forwarding\)\s.*$|\1 no|' "$SSHD_CONFIG" && \
sed -ir 's|^[#\s]*\(PermitTunnel\)\s.*$|\1 no|' "$SSHD_CONFIG" && \
sed -ir 's|^[#\s]*\(PidFile\)\s.*$|\1 /tmp/sshd.pid|' "$SSHD_CONFIG"
##### rsync-tls
COPY /mover-rsync-tls/client.sh \
/mover-rsync-tls/server.sh \
/mover-rsync-tls/
RUN chmod a+rx /mover-rsync-tls/*.sh
##### syncthing
COPY --from=syncthing-builder /workspace/syncthing/bin/syncthing /usr/local/bin/syncthing
ENV SYNCTHING_DATA_TRANSFERMODE="sendreceive"
COPY /mover-syncthing/config-template.xml \
/mover-syncthing/
RUN chmod a+r /mover-syncthing/config-template.xml
COPY /mover-syncthing/config-template.xml \
/mover-syncthing/stignore-template \
/mover-syncthing/entry.sh \
/mover-syncthing/
RUN chmod a+r /mover-syncthing/config-template.xml && \
chmod a+r /mover-syncthing/stignore-template && \
chmod a+rx /mover-syncthing/*.sh
##### diskrsync
COPY --from=diskrsync-builder /workspace/diskrsync/bin/diskrsync /usr/local/bin/diskrsync
##### diskrsync-tcp
COPY --from=diskrsync-tcp-builder /workspace/diskrsync-tcp/diskrsync-tcp /diskrsync-tcp
##### Set build metadata
ARG builddate_arg="(unknown)"
ARG version_arg="(unknown)"
ENV builddate="${builddate_arg}"
ENV version="${version_arg}"
# https://github.com/opencontainers/image-spec/blob/main/annotations.md
LABEL org.opencontainers.image.base.name="registry.access.redhat.com/ubi9-minimal"
LABEL org.opencontainers.image.created="${builddate}"
LABEL org.opencontainers.image.description="VolSync data replication operator"
LABEL org.opencontainers.image.documentation="https://volsync.readthedocs.io/"
LABEL org.opencontainers.image.licenses="AGPL-3.0-or-later"
LABEL org.opencontainers.image.revision="${version}"
LABEL org.opencontainers.image.source="https://github.com/backube/volsync"
LABEL org.opencontainers.image.title="VolSync"
LABEL org.opencontainers.image.vendor="Backube"
LABEL org.opencontainers.image.version="${version}"
ENTRYPOINT [ "/bin/bash" ]