80cdac417a
Pin ubuntu:24.04 to a specific SHA256 digest to ensure reproducible builds and protect against supply chain attacks via floating tags. The tag is kept alongside the digest for readability and to help with future updates.
26 lines
851 B
Docker
26 lines
851 B
Docker
# ubuntu:24.04 - pinned to digest for reproducibility (2026-02-05)
|
|
FROM ubuntu:24.04@sha256:cd1dba651b3080c3686ecf4e3c4220f026b521fb76978881737d24f200828b2b
|
|
|
|
LABEL org.opencontainers.image.source="https://github.com/getprobo/probo"
|
|
LABEL org.opencontainers.image.licenses="MIT"
|
|
LABEL org.opencontainers.image.vendor="Probo Inc"
|
|
|
|
RUN useradd -m probo && \
|
|
apt-get update && \
|
|
apt-get upgrade -y && \
|
|
apt-get install -y ca-certificates libcap2-bin && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY probod /usr/local/bin/probod
|
|
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
|
|
|
|
RUN chmod +x /usr/local/bin/probod && \
|
|
chmod +x /usr/local/bin/entrypoint.sh && \
|
|
setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/probod && \
|
|
mkdir -p /etc/probod && \
|
|
chown probo:probo /etc/probod
|
|
|
|
USER probo
|
|
|
|
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
|