get prod dockerfile working properly#10790

Merged

timothy-spencer merged 44 commits intomainfrom

tspencer/update_prod_dockerfile

Aug 1, 2024

Commits on Aug 1, 2024

make sure keys are readable

timothy-spencer
authored and
Mitchell Henke
committed
remove build-essential in a way that will not bloat the image

timothy-spencer
authored and
Mitchell Henke
committed
yarn install needs build-essential too it seems

timothy-spencer
authored and
Mitchell Henke
committed
add make for asset stuff

timothy-spencer
authored and
Mitchell Henke
committed
add some network debugging

timothy-spencer
authored and
Mitchell Henke
committed
tracepath is not apparently a thing

timothy-spencer
authored and
Mitchell Henke
committed
add more debug

timothy-spencer
authored and
Mitchell Henke
committed
use proper netcat

timothy-spencer
authored and
Mitchell Henke
committed
remove network debugging tools

timothy-spencer
authored and
Mitchell Henke
committed
changelog: Internal, Platform Automation, Update production idp image to actually work

timothy-spencer
authored and
Mitchell Henke
committed
fix pwned_passwords.txt

timothy-spencer
authored and
Mitchell Henke
committed
add puma header
Mitchell Henke
committed
trigger another build

timothy-spencer
authored and
Mitchell Henke
committed
move gem build and large files out into a multi-stage build

timothy-spencer
authored and
Mitchell Henke
committed
Update dockerfiles/idp_prod.Dockerfile

timothy-spencer
and
Mitchell Henke
committed
try removing some sqlite stuff

timothy-spencer
authored and
Mitchell Henke
committed
move everything up and just copy rails root over

timothy-spencer
authored and
Mitchell Henke
committed
change where bundle install gets run and make sure it's configured properly

timothy-spencer
authored and
Mitchell Henke
committed
we need curl for healthchecks

timothy-spencer
authored and
Mitchell Henke
committed
remove suid/sgid from binaries

timothy-spencer
authored and
Mitchell Henke
committed
add service_providers.yml and related files

timothy-spencer
authored and
Mitchell Henke
committed
forgot to wire the env vars up to args

timothy-spencer
authored and
Mitchell Henke
committed
trigger build

timothy-spencer
authored and
Mitchell Henke
committed
forgot to copy keys we generated over

timothy-spencer
authored and
Mitchell Henke
committed
try using readonly deploy key

timothy-spencer
authored and
Mitchell Henke
committed
get the host fingerprint, map the key in as an arg

timothy-spencer
authored and
Mitchell Henke
committed
change perms on key so it works

timothy-spencer
authored and
Mitchell Henke
committed
just noticed that the service_provider stuff wasn't in the build dir

timothy-spencer
authored and
Mitchell Henke
committed
move config copy to where workdir works

timothy-spencer
authored and
Mitchell Henke
committed
some debugging

timothy-spencer
authored and
Mitchell Henke
committed
try full path

timothy-spencer
authored and
Mitchell Henke
committed
I was totally missing that COPY was coming from the local filesystem, not the image we were building

timothy-spencer
authored and
Mitchell Henke
committed
don't overwrite the identity-idp-config files with localdev ones

timothy-spencer
authored and
Mitchell Henke
committed
exclude node_modules

timothy-spencer
authored and
Mitchell Henke
committed
be more specific about node_modules

timothy-spencer
authored and
Mitchell Henke
committed
testing
Mitchell Henke
committed
revert
Mitchell Henke
committed
remove package restrictions in builder

timothy-spencer
authored and
Mitchell Henke
committed
try some debugging of the seeder error

timothy-spencer
authored and
Mitchell Henke
committed
forgot to assign error to a variable

timothy-spencer
authored and
Mitchell Henke
committed
logger needs more log-ness to actually log I think

timothy-spencer
authored and
Mitchell Henke
committed
get all exceptions

timothy-spencer
authored and
Mitchell Henke
committed
did Agency.destroy_all and it doesn't have this issue

timothy-spencer
authored and
Mitchell Henke
committed
fix --no-install-recommends
Mitchell Henke
committed