Bitnami/containers
2
0
Fork 0
mirror of https://github.com/bitnami/containers.git synced 2026-03-21 23:38:32 +08:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/mariadb-galera] Release 10.3.36-debian-11-r16 (#9052)

Browse Source 
Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>
This commit is contained in:
Bitnami Bot
2022-10-05 22:19:17 +02:00
committed by GitHub
parent 92029ca867
commit 89bbb24276
3 changed files with 32 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

41
bitnami/mariadb-galera/10.3/debian-11/Dockerfile
View File

@@ -4,7 +4,7 @@ ARG TARGETARCH
LABEL org.opencontainers.image.authors="https://bitnami.com/contact" \ LABEL org.opencontainers.image.authors="https://bitnami.com/contact" \
org.opencontainers.image.description="Application packaged by Bitnami" \ org.opencontainers.image.description="Application packaged by Bitnami" \
org.opencontainers.image.ref.name="10.3.36-debian-11-r15" \ org.opencontainers.image.ref.name="10.3.36-debian-11-r16" \
org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/mariadb-galera" \ org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/mariadb-galera" \
org.opencontainers.image.title="mariadb-galera" \ org.opencontainers.image.title="mariadb-galera" \
org.opencontainers.image.vendor="VMware, Inc." \ org.opencontainers.image.vendor="VMware, Inc." \
@@ -20,30 +20,21 @@ SHELL ["/bin/bash", "-o", "pipefail", "-c"]
# Install required system packages and dependencies # Install required system packages and dependencies
RUN install_packages ca-certificates curl iproute2 ldap-utils libaio1 libaudit1 libc6 libcap-ng0 libcrypt1 libgcc-s1 libicu67 libjemalloc2 libldap-common liblzma5 libncurses6 libpam-ldapd libpam0g libssl1.1 libstdc++6 libtinfo6 libxml2 nslcd procps psmisc rsync socat zlib1g RUN install_packages ca-certificates curl iproute2 ldap-utils libaio1 libaudit1 libc6 libcap-ng0 libcrypt1 libgcc-s1 libicu67 libjemalloc2 libldap-common liblzma5 libncurses6 libpam-ldapd libpam0g libssl1.1 libstdc++6 libtinfo6 libxml2 nslcd procps psmisc rsync socat zlib1g
RUN mkdir -p /tmp/bitnami/pkg/cache/ && cd /tmp/bitnami/pkg/cache/ && \ RUN mkdir -p /tmp/bitnami/pkg/cache/ && cd /tmp/bitnami/pkg/cache/ && \
if [ ! -f ini-file-1.4.3-153-linux-${OS_ARCH}-debian-11.tar.gz ]; then \ for COMPONENT in \
curl -SsLf https://downloads.bitnami.com/files/stacksmith/ini-file-1.4.3-153-linux-${OS_ARCH}-debian-11.tar.gz -O ; \ "ini-file-1.4.3-153-linux-${OS_ARCH}-debian-11" \
curl -SsLf https://downloads.bitnami.com/files/stacksmith/ini-file-1.4.3-153-linux-${OS_ARCH}-debian-11.tar.gz.sha256 -O ; \ "mariadb-galera-10.3.36-2-linux-${OS_ARCH}-debian-11" \
fi && \ "gosu-1.14.0-154-linux-${OS_ARCH}-debian-11" ; \
sha256sum -c ini-file-1.4.3-153-linux-${OS_ARCH}-debian-11.tar.gz.sha256 && \ do \
tar -zxf ini-file-1.4.3-153-linux-${OS_ARCH}-debian-11.tar.gz -C /opt/bitnami --strip-components=2 --no-same-owner --wildcards '*/files' && \ if [ ! -f "${COMPONENT}.tar.gz" ]; then \
rm -rf ini-file-1.4.3-153-linux-${OS_ARCH}-debian-11.tar.gz ini-file-1.4.3-153-linux-${OS_ARCH}-debian-11.tar.gz.sha256 curl -SsLf https://downloads.bitnami.com/files/stacksmith/${COMPONENT}.tar.gz -O ; \
RUN mkdir -p /tmp/bitnami/pkg/cache/ && cd /tmp/bitnami/pkg/cache/ && \ curl -SsLf https://downloads.bitnami.com/files/stacksmith/${COMPONENT}.tar.gz.sha256 -O ; \
if [ ! -f mariadb-galera-10.3.36-2-linux-${OS_ARCH}-debian-11.tar.gz ]; then \ fi && \
curl -SsLf https://downloads.bitnami.com/files/stacksmith/mariadb-galera-10.3.36-2-linux-${OS_ARCH}-debian-11.tar.gz -O ; \ sha256sum -c "${COMPONENT}.tar.gz.sha256" && \
curl -SsLf https://downloads.bitnami.com/files/stacksmith/mariadb-galera-10.3.36-2-linux-${OS_ARCH}-debian-11.tar.gz.sha256 -O ; \ tar -zxf "${COMPONENT}.tar.gz" -C /opt/bitnami --strip-components=2 --no-same-owner --wildcards '*/files' && \
fi && \ rm -rf "${COMPONENT}.tar.gz{,sha256}" ; \
sha256sum -c mariadb-galera-10.3.36-2-linux-${OS_ARCH}-debian-11.tar.gz.sha256 && \ done
tar -zxf mariadb-galera-10.3.36-2-linux-${OS_ARCH}-debian-11.tar.gz -C /opt/bitnami --strip-components=2 --no-same-owner --wildcards '*/files' && \ RUN apt-get autoremove --purge -y curl && \
rm -rf mariadb-galera-10.3.36-2-linux-${OS_ARCH}-debian-11.tar.gz mariadb-galera-10.3.36-2-linux-${OS_ARCH}-debian-11.tar.gz.sha256 apt-get update && apt-get upgrade -y && \
RUN mkdir -p /tmp/bitnami/pkg/cache/ && cd /tmp/bitnami/pkg/cache/ && \
if [ ! -f gosu-1.14.0-154-linux-${OS_ARCH}-debian-11.tar.gz ]; then \
curl -SsLf https://downloads.bitnami.com/files/stacksmith/gosu-1.14.0-154-linux-${OS_ARCH}-debian-11.tar.gz -O ; \
curl -SsLf https://downloads.bitnami.com/files/stacksmith/gosu-1.14.0-154-linux-${OS_ARCH}-debian-11.tar.gz.sha256 -O ; \
fi && \
sha256sum -c gosu-1.14.0-154-linux-${OS_ARCH}-debian-11.tar.gz.sha256 && \
tar -zxf gosu-1.14.0-154-linux-${OS_ARCH}-debian-11.tar.gz -C /opt/bitnami --strip-components=2 --no-same-owner --wildcards '*/files' && \
rm -rf gosu-1.14.0-154-linux-${OS_ARCH}-debian-11.tar.gz gosu-1.14.0-154-linux-${OS_ARCH}-debian-11.tar.gz.sha256
RUN apt-get update && apt-get upgrade -y && \
apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives
RUN chmod g+rwX /opt/bitnami RUN chmod g+rwX /opt/bitnami
RUN mkdir /docker-entrypoint-initdb.d RUN mkdir /docker-entrypoint-initdb.d

28
bitnami/mariadb-galera/10.3/debian-11/rootfs/opt/bitnami/scripts/libldapclient.sh
View File

@@ -56,9 +56,9 @@ EOF
ldap_openldap_config_path() { ldap_openldap_config_path() {
local openldap_config local openldap_config
case "$OS_FLAVOUR" in case "$OS_FLAVOUR" in
debian-*|ubuntu-*) openldap_config=/etc/ldap/ldap.conf ;; debian-* | ubuntu-*) openldap_config=/etc/ldap/ldap.conf ;;
centos-*|photon-*) openldap_config=/etc/openldap/ldap.conf ;; centos-* | photon-* | redhatubi-*) openldap_config=/etc/openldap/ldap.conf ;;
*) error "Unsupported OS flavor ${OS_FLAVOUR}" && exit 1 ;; *) error "Unsupported OS flavor ${OS_FLAVOUR}" && exit 1 ;;
esac esac
echo "$openldap_config" echo "$openldap_config"
} }
@@ -74,6 +74,8 @@ ldap_openldap_config_path() {
######################### #########################
ldap_configure_permissions() { ldap_configure_permissions() {
ensure_dir_exists "/var/run/nslcd" && configure_permissions_ownership "/var/run/nslcd" -u "root" -g "root" -d "775" ensure_dir_exists "/var/run/nslcd" && configure_permissions_ownership "/var/run/nslcd" -u "root" -g "root" -d "775"
# The nslcd.conf file may not exist in distros like UBI, so we need to create it first
touch "/etc/nslcd.conf"
configure_permissions_ownership "/etc/nslcd.conf" -u "root" -g "root" -f "660" configure_permissions_ownership "/etc/nslcd.conf" -u "root" -g "root" -f "660"
configure_permissions_ownership "$(ldap_openldap_config_path)" -u "root" -g "root" -f "660" configure_permissions_ownership "$(ldap_openldap_config_path)" -u "root" -g "root" -f "660"
} }
@@ -91,19 +93,19 @@ ldap_create_nslcd_config() {
if am_i_root; then if am_i_root; then
chown "root:${LDAP_NSLCD_GROUP}" "/etc/nslcd.conf" chown "root:${LDAP_NSLCD_GROUP}" "/etc/nslcd.conf"
chown -R "${LDAP_NSLCD_USER}:${LDAP_NSLCD_GROUP}" "/var/run/nslcd" chown -R "${LDAP_NSLCD_USER}:${LDAP_NSLCD_GROUP}" "/var/run/nslcd"
cat > "/etc/nslcd.conf" <<EOF cat >"/etc/nslcd.conf" <<EOF
# The user and group nslcd should run as # The user and group nslcd should run as
uid $LDAP_NSLCD_USER uid $LDAP_NSLCD_USER
gid $LDAP_NSLCD_GROUP gid $LDAP_NSLCD_GROUP
EOF EOF
else else
cat > "/etc/nslcd.conf" <<EOF cat >"/etc/nslcd.conf" <<EOF
# Comment out uid,gid to avoid attempting change user/group to run as # Comment out uid,gid to avoid attempting change user/group to run as
# uid # uid
# gid # gid
EOF EOF
fi fi
cat >> "/etc/nslcd.conf" <<EOF cat >>"/etc/nslcd.conf" <<EOF
nss_initgroups_ignoreusers $LDAP_NSS_INITGROUPS_IGNOREUSERS nss_initgroups_ignoreusers $LDAP_NSS_INITGROUPS_IGNOREUSERS
# The location at which the LDAP server(s) should be reachable. # The location at which the LDAP server(s) should be reachable.
@@ -115,30 +117,30 @@ binddn $LDAP_BIND_DN
bindpw $LDAP_BIND_PASSWORD bindpw $LDAP_BIND_PASSWORD
EOF EOF
if [[ -n "${LDAP_BASE_LOOKUP}" ]]; then if [[ -n "${LDAP_BASE_LOOKUP}" ]]; then
cat >>"/etc/nslcd.conf"<<EOF cat >>"/etc/nslcd.conf" <<EOF
base passwd $LDAP_BASE_LOOKUP base passwd $LDAP_BASE_LOOKUP
EOF EOF
fi fi
if [[ -n "${LDAP_SCOPE}" ]]; then if [[ -n "${LDAP_SCOPE}" ]]; then
cat >>"/etc/nslcd.conf"<<EOF cat >>"/etc/nslcd.conf" <<EOF
# The search scope # The search scope
scope $LDAP_SCOPE scope $LDAP_SCOPE
EOF EOF
fi fi
if [[ -n "${LDAP_SEARCH_FILTER}" ]]; then if [[ -n "${LDAP_SEARCH_FILTER}" ]]; then
cat >>"/etc/nslcd.conf"<<EOF cat >>"/etc/nslcd.conf" <<EOF
# LDAP search filter to use for posix users # LDAP search filter to use for posix users
filter passwd (objectClass=$LDAP_SEARCH_FILTER) filter passwd (objectClass=$LDAP_SEARCH_FILTER)
EOF EOF
fi fi
if [[ -n "${LDAP_SEARCH_MAP}" ]]; then if [[ -n "${LDAP_SEARCH_MAP}" ]]; then
cat >>"/etc/nslcd.conf"<<EOF cat >>"/etc/nslcd.conf" <<EOF
# Used for lookup of custom attributes # Used for lookup of custom attributes
map passwd uid $LDAP_SEARCH_MAP map passwd uid $LDAP_SEARCH_MAP
EOF EOF
fi fi
if [[ -n "${LDAP_TLS_REQCERT}" ]]; then if [[ -n "${LDAP_TLS_REQCERT}" ]]; then
cat >>"/etc/nslcd.conf"<<EOF cat >>"/etc/nslcd.conf" <<EOF
# TLS options # TLS options
tls_reqcert $LDAP_TLS_REQCERT tls_reqcert $LDAP_TLS_REQCERT
EOF EOF
@@ -158,7 +160,7 @@ EOF
# None # None
######################### #########################
ldap_create_openldap_config() { ldap_create_openldap_config() {
cat >>"$(ldap_openldap_config_path)"<<EOF cat >>"$(ldap_openldap_config_path)" <<EOF
BASE $LDAP_BASE BASE $LDAP_BASE
URI $LDAP_URI URI $LDAP_URI
@@ -180,7 +182,7 @@ EOF
######################### #########################
ldap_create_pam_config() { ldap_create_pam_config() {
local filename="${1:?ip is missing}" local filename="${1:?ip is missing}"
cat > "/etc/pam.d/${filename}" << EOF cat >"/etc/pam.d/${filename}" <<EOF
auth required pam_ldap.so try_first_pass debug auth required pam_ldap.so try_first_pass debug
account required pam_ldap.so debug account required pam_ldap.so debug
EOF EOF

2
bitnami/mariadb-galera/README.md
View File

@@ -57,7 +57,7 @@ Learn more about the Bitnami tagging policy and the difference between rolling t
* [`10.6`, `10.6-debian-11`, `10.6.10`, `10.6.10-debian-11-r5` (10.6/debian-11/Dockerfile)](https://github.com/bitnami/containers/blob/main/bitnami/mariadb-galera/10.6/debian-11/Dockerfile) * [`10.6`, `10.6-debian-11`, `10.6.10`, `10.6.10-debian-11-r5` (10.6/debian-11/Dockerfile)](https://github.com/bitnami/containers/blob/main/bitnami/mariadb-galera/10.6/debian-11/Dockerfile)
* [`10.5`, `10.5-debian-11`, `10.5.17`, `10.5.17-debian-11-r16` (10.5/debian-11/Dockerfile)](https://github.com/bitnami/containers/blob/main/bitnami/mariadb-galera/10.5/debian-11/Dockerfile) * [`10.5`, `10.5-debian-11`, `10.5.17`, `10.5.17-debian-11-r16` (10.5/debian-11/Dockerfile)](https://github.com/bitnami/containers/blob/main/bitnami/mariadb-galera/10.5/debian-11/Dockerfile)
* [`10.4`, `10.4-debian-11`, `10.4.26`, `10.4.26-debian-11-r15` (10.4/debian-11/Dockerfile)](https://github.com/bitnami/containers/blob/main/bitnami/mariadb-galera/10.4/debian-11/Dockerfile) * [`10.4`, `10.4-debian-11`, `10.4.26`, `10.4.26-debian-11-r15` (10.4/debian-11/Dockerfile)](https://github.com/bitnami/containers/blob/main/bitnami/mariadb-galera/10.4/debian-11/Dockerfile)
* [`10.3`, `10.3-debian-11`, `10.3.36`, `10.3.36-debian-11-r15` (10.3/debian-11/Dockerfile)](https://github.com/bitnami/containers/blob/main/bitnami/mariadb-galera/10.3/debian-11/Dockerfile) * [`10.3`, `10.3-debian-11`, `10.3.36`, `10.3.36-debian-11-r16` (10.3/debian-11/Dockerfile)](https://github.com/bitnami/containers/blob/main/bitnami/mariadb-galera/10.3/debian-11/Dockerfile)
Subscribe to project updates by watching the [bitnami/containers GitHub repo](https://github.com/bitnami/containers). Subscribe to project updates by watching the [bitnami/containers GitHub repo](https://github.com/bitnami/containers).