mirror of
https://github.com/bitnami/containers.git
synced 2026-03-08 10:47:20 +08:00
2.319.3-debian-10-r14 release
This commit is contained in:
@@ -11,10 +11,10 @@ ARG JAVA_EXTRA_SECURITY_DIR="/bitnami/java/extra-security"
|
||||
COPY prebuildfs /
|
||||
# Install required system packages and dependencies
|
||||
RUN install_packages acl ca-certificates curl fontconfig gzip libc6 libcom-err2 libcurl4 libffi6 libfontconfig1 libgcrypt20 libgmp10 libgnutls30 libgpg-error0 libgssapi-krb5-2 libhogweed4 libidn2-0 libk5crypto3 libkeyutils1 libkrb5-3 libkrb5support0 libldap-2.4-2 libnettle6 libnghttp2-14 libp11-kit0 libpsl5 librtmp1 libsasl2-2 libssh2-1 libssl1.1 libtasn1-6 libunistring2 openssh-client procps tar unzip zlib1g
|
||||
RUN . /opt/bitnami/scripts/libcomponent.sh && component_unpack "render-template" "1.0.1-9" --checksum 4694f01476c5a457a71f280562df45ea542bdf3f9b298ff87643a89ea365f5fb
|
||||
RUN . /opt/bitnami/scripts/libcomponent.sh && component_unpack "java" "11.0.14-6" --checksum 8e9d15dc54b3cf57e7f3b92efbb1e01ed07f002889034ec7703b62efb8265243
|
||||
RUN . /opt/bitnami/scripts/libcomponent.sh && component_unpack "gosu" "1.14.0-6" --checksum 6f8fd2267481ffbe899a7f93b7b3076cd78dd70b7b9835bed79414932a749664
|
||||
RUN . /opt/bitnami/scripts/libcomponent.sh && component_unpack "git" "2.35.1-4" --checksum e5feed054f6c6e0497502e5c0551070241f543966491e962ce1f51780f6b170e
|
||||
RUN . /opt/bitnami/scripts/libcomponent.sh && component_unpack "render-template" "1.0.1-10" --checksum 97c2ae4b001c5937e888b920bee7b1a40a076680caac53ded6d10f6207d54565
|
||||
RUN . /opt/bitnami/scripts/libcomponent.sh && component_unpack "java" "11.0.14-7" --checksum 900545c4f346a0ece8abf2caf64fd9d4ab7514967d4614d716bf7362b24f828b
|
||||
RUN . /opt/bitnami/scripts/libcomponent.sh && component_unpack "gosu" "1.14.0-7" --checksum d6280b6f647a62bf6edc74dc8e526bfff63ddd8067dcb8540843f47203d9ccf1
|
||||
RUN . /opt/bitnami/scripts/libcomponent.sh && component_unpack "git" "2.35.1-5" --checksum da12ba7cebb03c4eb983ba2248daf0ed5399be1bd8fa9d2d3931614ce6079ff6
|
||||
RUN . /opt/bitnami/scripts/libcomponent.sh && component_unpack "jenkins" "2.319.3-4" --checksum 3a6cbfd3c72b68863f0663cb43d23aca588e356a125c74d8374201ee5ab512ff
|
||||
RUN apt-get update && apt-get upgrade -y && \
|
||||
rm -r /var/lib/apt/lists /var/cache/apt/archives
|
||||
@@ -24,7 +24,7 @@ COPY rootfs /
|
||||
RUN /opt/bitnami/scripts/java/postunpack.sh
|
||||
RUN /opt/bitnami/scripts/jenkins/postunpack.sh
|
||||
ENV BITNAMI_APP_NAME="jenkins" \
|
||||
BITNAMI_IMAGE_VERSION="2.319.3-debian-10-r13" \
|
||||
BITNAMI_IMAGE_VERSION="2.319.3-debian-10-r14" \
|
||||
JAVA_HOME="/opt/bitnami/java" \
|
||||
PATH="/opt/bitnami/common/bin:/opt/bitnami/java/bin:/opt/bitnami/git/bin:$PATH"
|
||||
|
||||
|
||||
@@ -1,24 +1,24 @@
|
||||
{
|
||||
"git": {
|
||||
"arch": "amd64",
|
||||
"digest": "e5feed054f6c6e0497502e5c0551070241f543966491e962ce1f51780f6b170e",
|
||||
"digest": "da12ba7cebb03c4eb983ba2248daf0ed5399be1bd8fa9d2d3931614ce6079ff6",
|
||||
"distro": "debian-10",
|
||||
"type": "NAMI",
|
||||
"version": "2.35.1-4"
|
||||
"version": "2.35.1-5"
|
||||
},
|
||||
"gosu": {
|
||||
"arch": "amd64",
|
||||
"digest": "6f8fd2267481ffbe899a7f93b7b3076cd78dd70b7b9835bed79414932a749664",
|
||||
"digest": "d6280b6f647a62bf6edc74dc8e526bfff63ddd8067dcb8540843f47203d9ccf1",
|
||||
"distro": "debian-10",
|
||||
"type": "NAMI",
|
||||
"version": "1.14.0-6"
|
||||
"version": "1.14.0-7"
|
||||
},
|
||||
"java": {
|
||||
"arch": "amd64",
|
||||
"digest": "8e9d15dc54b3cf57e7f3b92efbb1e01ed07f002889034ec7703b62efb8265243",
|
||||
"digest": "900545c4f346a0ece8abf2caf64fd9d4ab7514967d4614d716bf7362b24f828b",
|
||||
"distro": "debian-10",
|
||||
"type": "NAMI",
|
||||
"version": "11.0.14-6"
|
||||
"version": "11.0.14-7"
|
||||
},
|
||||
"jenkins": {
|
||||
"arch": "amd64",
|
||||
@@ -29,9 +29,9 @@
|
||||
},
|
||||
"render-template": {
|
||||
"arch": "amd64",
|
||||
"digest": "4694f01476c5a457a71f280562df45ea542bdf3f9b298ff87643a89ea365f5fb",
|
||||
"digest": "97c2ae4b001c5937e888b920bee7b1a40a076680caac53ded6d10f6207d54565",
|
||||
"distro": "debian-10",
|
||||
"type": "NAMI",
|
||||
"version": "1.0.1-9"
|
||||
"version": "1.0.1-10"
|
||||
}
|
||||
}
|
||||
@@ -5,6 +5,7 @@ import hudson.security.csrf.DefaultCrumbIssuer;
|
||||
import jenkins.security.QueueItemAuthenticatorConfiguration;
|
||||
import org.jenkinsci.plugins.authorizeproject.*;
|
||||
import org.jenkinsci.plugins.authorizeproject.strategy.*;
|
||||
import org.jenkinsci.plugins.matrixauth.*;
|
||||
import jenkins.model.*;
|
||||
import jenkins.install.*;
|
||||
import hudson.security.*;
|
||||
@@ -43,61 +44,61 @@ println " [bitnami/groovy-init-jenkins-with-slaves] Setting Authorization Strate
|
||||
def strategy = new GlobalMatrixAuthorizationStrategy()
|
||||
// Setting Slave Permissions
|
||||
// Slave Permissions
|
||||
strategy.add(hudson.model.Computer.BUILD, slaveUsername)
|
||||
strategy.add(hudson.model.Computer.CONFIGURE, slaveUsername)
|
||||
strategy.add(hudson.model.Computer.CONNECT, slaveUsername)
|
||||
strategy.add(hudson.model.Computer.CREATE, slaveUsername)
|
||||
strategy.add(hudson.model.Computer.DELETE, slaveUsername)
|
||||
strategy.add(hudson.model.Computer.DISCONNECT, slaveUsername)
|
||||
strategy.add(hudson.model.Computer.BUILD, new PermissionEntry(AuthorizationType.USER, slaveUsername))
|
||||
strategy.add(hudson.model.Computer.CONFIGURE, new PermissionEntry(AuthorizationType.USER, slaveUsername))
|
||||
strategy.add(hudson.model.Computer.CONNECT, new PermissionEntry(AuthorizationType.USER, slaveUsername))
|
||||
strategy.add(hudson.model.Computer.CREATE, new PermissionEntry(AuthorizationType.USER, slaveUsername))
|
||||
strategy.add(hudson.model.Computer.DELETE, new PermissionEntry(AuthorizationType.USER, slaveUsername))
|
||||
strategy.add(hudson.model.Computer.DISCONNECT, new PermissionEntry(AuthorizationType.USER, slaveUsername))
|
||||
// Overall Permissions
|
||||
strategy.add(hudson.model.Hudson.READ, slaveUsername)
|
||||
strategy.add(hudson.model.Hudson.READ, new PermissionEntry(AuthorizationType.USER, slaveUsername))
|
||||
// Setting System Permissions
|
||||
// System Permissions
|
||||
strategy.add(hudson.model.Computer.BUILD, systemUsername)
|
||||
strategy.add(hudson.model.Computer.CONFIGURE, systemUsername)
|
||||
strategy.add(hudson.model.Computer.CONNECT, systemUsername)
|
||||
strategy.add(hudson.model.Computer.CREATE, systemUsername)
|
||||
strategy.add(hudson.model.Computer.DELETE, systemUsername)
|
||||
strategy.add(hudson.model.Computer.DISCONNECT, systemUsername)
|
||||
strategy.add(hudson.model.Computer.BUILD, new PermissionEntry(AuthorizationType.USER, systemUsername))
|
||||
strategy.add(hudson.model.Computer.CONFIGURE, new PermissionEntry(AuthorizationType.USER, systemUsername))
|
||||
strategy.add(hudson.model.Computer.CONNECT, new PermissionEntry(AuthorizationType.USER, systemUsername))
|
||||
strategy.add(hudson.model.Computer.CREATE, new PermissionEntry(AuthorizationType.USER, systemUsername))
|
||||
strategy.add(hudson.model.Computer.DELETE, new PermissionEntry(AuthorizationType.USER, systemUsername))
|
||||
strategy.add(hudson.model.Computer.DISCONNECT, new PermissionEntry(AuthorizationType.USER, systemUsername))
|
||||
// Overall Permissions
|
||||
strategy.add(hudson.model.Hudson.READ, systemUsername)
|
||||
strategy.add(hudson.model.Hudson.READ, new PermissionEntry(AuthorizationType.USER, systemUsername))
|
||||
// Setting Admin Permissions
|
||||
// Admin Permissions
|
||||
strategy.add(hudson.model.Computer.BUILD, adminUsername)
|
||||
strategy.add(hudson.model.Computer.CONFIGURE, adminUsername)
|
||||
strategy.add(hudson.model.Computer.CONNECT, adminUsername)
|
||||
strategy.add(hudson.model.Computer.CREATE, adminUsername)
|
||||
strategy.add(hudson.model.Computer.DELETE, adminUsername)
|
||||
strategy.add(hudson.model.Computer.DISCONNECT, adminUsername)
|
||||
strategy.add(hudson.model.Computer.BUILD, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Computer.CONFIGURE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Computer.CONNECT, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Computer.CREATE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Computer.DELETE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Computer.DISCONNECT, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
// Credential Permissions
|
||||
strategy.add(com.cloudbees.plugins.credentials.CredentialsProvider.CREATE, adminUsername)
|
||||
strategy.add(com.cloudbees.plugins.credentials.CredentialsProvider.DELETE, adminUsername)
|
||||
strategy.add(com.cloudbees.plugins.credentials.CredentialsProvider.MANAGE_DOMAINS, adminUsername)
|
||||
strategy.add(com.cloudbees.plugins.credentials.CredentialsProvider.UPDATE, adminUsername)
|
||||
strategy.add(com.cloudbees.plugins.credentials.CredentialsProvider.VIEW, adminUsername)
|
||||
strategy.add(com.cloudbees.plugins.credentials.CredentialsProvider.CREATE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(com.cloudbees.plugins.credentials.CredentialsProvider.DELETE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(com.cloudbees.plugins.credentials.CredentialsProvider.MANAGE_DOMAINS, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(com.cloudbees.plugins.credentials.CredentialsProvider.UPDATE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(com.cloudbees.plugins.credentials.CredentialsProvider.VIEW, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
// Overall Permissions
|
||||
strategy.add(hudson.model.Hudson.ADMINISTER, adminUsername)
|
||||
strategy.add(hudson.PluginManager.CONFIGURE_UPDATECENTER, adminUsername)
|
||||
strategy.add(hudson.model.Hudson.READ, adminUsername)
|
||||
strategy.add(hudson.model.Hudson.RUN_SCRIPTS, adminUsername)
|
||||
strategy.add(hudson.PluginManager.UPLOAD_PLUGINS, adminUsername)
|
||||
strategy.add(hudson.model.Hudson.ADMINISTER, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.PluginManager.CONFIGURE_UPDATECENTER, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Hudson.READ, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Hudson.RUN_SCRIPTS, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.PluginManager.UPLOAD_PLUGINS, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
// Job Permissions
|
||||
strategy.add(hudson.model.Item.BUILD, adminUsername)
|
||||
strategy.add(hudson.model.Item.CANCEL, adminUsername)
|
||||
strategy.add(hudson.model.Item.CONFIGURE, adminUsername)
|
||||
strategy.add(hudson.model.Item.CREATE, adminUsername)
|
||||
strategy.add(hudson.model.Item.DELETE, adminUsername)
|
||||
strategy.add(hudson.model.Item.DISCOVER, adminUsername)
|
||||
strategy.add(hudson.model.Item.READ, adminUsername)
|
||||
strategy.add(hudson.model.Item.WORKSPACE, adminUsername)
|
||||
strategy.add(hudson.model.Item.BUILD, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Item.CANCEL, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Item.CONFIGURE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Item.CREATE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Item.DELETE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Item.DISCOVER, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Item.READ, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Item.WORKSPACE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
// Run Permissions
|
||||
strategy.add(hudson.model.Run.DELETE, adminUsername)
|
||||
strategy.add(hudson.model.Run.UPDATE, adminUsername)
|
||||
strategy.add(hudson.model.Run.DELETE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.Run.UPDATE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
// View Permissions
|
||||
strategy.add(hudson.model.View.CONFIGURE, adminUsername)
|
||||
strategy.add(hudson.model.View.CREATE, adminUsername)
|
||||
strategy.add(hudson.model.View.DELETE, adminUsername)
|
||||
strategy.add(hudson.model.View.READ, adminUsername)
|
||||
strategy.add(hudson.model.View.CONFIGURE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.View.CREATE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.View.DELETE, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
strategy.add(hudson.model.View.READ, new PermissionEntry(AuthorizationType.USER, adminUsername))
|
||||
jenkins.setAuthorizationStrategy(strategy);
|
||||
println " [bitnami/groovy-init-jenkins-with-slaves] Authorization Strategy set"
|
||||
|
||||
|
||||
@@ -43,7 +43,7 @@ Non-root container images add an extra layer of security and are generally recom
|
||||
Learn more about the Bitnami tagging policy and the difference between rolling tags and immutable tags [in our documentation page](https://docs.bitnami.com/tutorials/understand-rolling-tags-containers/).
|
||||
|
||||
|
||||
* [`2`, `2-debian-10`, `2.319.3`, `2.319.3-debian-10-r13`, `latest` (2/debian-10/Dockerfile)](https://github.com/bitnami/bitnami-docker-jenkins/blob/2.319.3-debian-10-r13/2/debian-10/Dockerfile)
|
||||
* [`2`, `2-debian-10`, `2.319.3`, `2.319.3-debian-10-r14`, `latest` (2/debian-10/Dockerfile)](https://github.com/bitnami/bitnami-docker-jenkins/blob/2.319.3-debian-10-r14/2/debian-10/Dockerfile)
|
||||
|
||||
Subscribe to project updates by watching the [bitnami/jenkins GitHub repo](https://github.com/bitnami/bitnami-docker-jenkins).
|
||||
|
||||
|
||||
Reference in New Issue
Block a user