Skip to content

Support building Iron Bank Docker context #65074

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Nov 16, 2020

Conversation

pugnascotia
Copy link
Contributor

Backport of #64336.

This PR adds support for building a Docker context for Iron Bank.
It doesn't actually build the image - we could add that at a later
stage, but this is an attempt to automate at least some of the
process.

Iron Bank is a lot like our UBI build, except it uses a hardened
version of the full UBI image, not the minimal UBI image. They have
particular requirements around how the Docker context should be
arranged. The Docker build cannot fetch its own artefacts, but
instead the context provides a descriptor that locates what is
needed for the build.

I also added a filter so that after performing expansions on the
Dockerfile, we squash long runs on newlines together. This makes
the output cleaner, while allowing us to break up the unprocessed
Dockerfile for clarity.

This PR adds support for building a Docker context for Iron Bank.
It doesn't actually build the image - we could add that at a later
stage, but this is an attempt to automate at least some of the
process.

Iron Bank is a lot like our UBI build, except it uses a hardened
version of the full UBI image, not the minimal UBI image. They have
particular requirements around how the Docker context should be
arranged. The Docker build cannot fetch its own artefacts, but
instead the context provides a descriptor that locates what is
needed for the build.

I also added a filter so that after performing expansions on the
`Dockerfile`, we squash long runs on newlines together. This makes
the output cleaner, while allowing us to break up the unprocessed
`Dockerfile` for clarity.
@pugnascotia pugnascotia added >feature :Delivery/Packaging RPM and deb packaging, tar and zip archives, shell and batch scripts backport v7.11.0 labels Nov 16, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-delivery (:Delivery/Packaging)

@elasticmachine elasticmachine added the Team:Delivery Meta label for Delivery team label Nov 16, 2020
@pugnascotia pugnascotia merged commit f30d88b into elastic:7.x Nov 16, 2020
@pugnascotia pugnascotia deleted the support-ubi-iron-bank-7x branch November 16, 2020 19:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport :Delivery/Packaging RPM and deb packaging, tar and zip archives, shell and batch scripts >feature Team:Delivery Meta label for Delivery team v7.11.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants