Skip to content

Commit

Permalink
Merge pull request #623 from rhmdnd/add-dockerfiles-for-konflux-builds
Browse files Browse the repository at this point in the history
Add container files for konflux builds
  • Loading branch information
rhmdnd authored Nov 27, 2024
2 parents e9a1bbe + 0eef507 commit 19406f5
Show file tree
Hide file tree
Showing 2 changed files with 45 additions and 0 deletions.
26 changes: 26 additions & 0 deletions images/must-gather/Containerfile
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
FROM registry.redhat.io/ubi9/ubi-minimal:latest

LABEL \
io.k8s.display-name="must-gather cli for compliance-operator" \
io.k8s.description="An must-gather cli for the compliance-operator." \
io.openshift.tags="openshift,compliance,security" \
com.redhat.delivery.appregistry="false" \
maintainer="Red Hat ISC <[email protected]>" \
License="GPLv2+" \
name="openshift-compliance-must-gather" \
com.redhat.component="openshift-compliance-must-gather-container" \
io.openshift.maintainer.product="OpenShift Container Platform" \
io.openshift.maintainer.component="Compliance Operator" \
version=1.6.1-dev

# Install openshift-clients, jq, tar, and rsync, which are required for
# must-gather.
RUN microdnf -y install openshift-clients jq tar rsync

WORKDIR /

/go/src/github.com/ComplianceAsCode/compliance-operator
COPY /go/src/github.com/ComplianceAsCode/compliance-operator/utils/must-gather/gather* /usr/bin/
COPY /go/src/github.com/ComplianceAsCode/compliance-operator/utils/must-gather/fetch-raw-results-pod-template.yaml /usr/share/

ENTRYPOINT /usr/bin/gather
19 changes: 19 additions & 0 deletions images/openscap/Containerfile
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
FROM registry.redhat.io/ubi9/ubi-minimal:latest

LABEL \
io.k8s.display-name="OpenSCAP scanner for compliance-operator" \
io.k8s.description="An OpenSCAP operand for the compliance-operator." \
io.openshift.tags="openshift,compliance,security" \
com.redhat.delivery.appregistry="false" \
maintainer="Red Hat ISC <[email protected]>" \
License="GPLv2+" \
name="openshift-compliance-openscap" \
com.redhat.component="openshift-compliance-openscap-container" \
io.openshift.maintainer.product="OpenShift Container Platform" \
io.openshift.maintainer.component="Compliance Operator" \
run="podman run --privileged -v /:/host -eHOSTROOT=/host -ePROFILE=xccdf_org.ssgproject.content_profile_coreos-fedramp -eCONTENT=ssg-rhcos4-ds.xml -eREPORT_DIR=/reports -eRULE=xccdf_org.ssgproject.content_rule_selinux_state" \
version=1.6.1-dev

RUN microdnf -y update glibc
RUN microdnf -y install openscap openscap-scanner
RUN microdnf clean all

0 comments on commit 19406f5

Please sign in to comment.