mirror of
https://github.com/yrutschle/sslh.git
synced 2025-04-12 15:17:14 +03:00
00beb9595d
Commit 5635dc5142aa ("Enable --transparent mode for docker") made a
little bit of a mess of the Dockerfile and container-entrypoint.sh.
A few issues are, but not limited to; trailing whitespaces, incorrect
indentation, removed final newline, component sortability just to name a
few.
This MR fixes that and cleans up those files again.
One thing not touched was the enable/disablement of `set +e` to exit the
script on error. It is nicer/cleaner to solve this in a different way,
but that adds to much complexity.
While here, make the container architecture and alpine version
configurable, allowing us to build multi-arch images from the CI in the
future.
Signed-off-by: Olliver Schinagl <oliver@schinagl.nl>
39 lines
821 B
Docker
39 lines
821 B
Docker
ARG ALPINE_VERSION="latest"
|
|
ARG TARGET_ARCH="library"
|
|
|
|
FROM docker.io/${TARGET_ARCH}/alpine:${ALPINE_VERSION} AS build
|
|
|
|
WORKDIR /sslh
|
|
|
|
RUN apk add --no-cache \
|
|
'gcc' \
|
|
'libconfig-dev' \
|
|
'make' \
|
|
'musl-dev' \
|
|
'pcre2-dev' \
|
|
'perl' \
|
|
;
|
|
|
|
COPY . /sslh
|
|
|
|
RUN make sslh-select && strip sslh-select
|
|
|
|
FROM docker.io/${TARGET_ARCH}/alpine:${ALPINE_VERSION}
|
|
|
|
COPY --from=build "/sslh/sslh-select" "/usr/local/bin/sslh"
|
|
RUN apk add --no-cache \
|
|
'libconfig' \
|
|
'pcre2' \
|
|
'iptables' \
|
|
'ip6tables' \
|
|
'libcap' \
|
|
&& \
|
|
adduser -s '/bin/sh' -S -D sslh && \
|
|
setcap cap_net_bind_service,cap_net_raw+ep /usr/local/bin/sslh
|
|
|
|
COPY "./container-entrypoint.sh" "/init"
|
|
ENTRYPOINT [ "/init" ]
|
|
|
|
# required for updating iptables
|
|
USER root:root
|