forked from freudenreichan/EinfuehrungInDocker_Pipeline2
Compare commits
1 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 1a0fcbbd12 |
@ -26,7 +26,7 @@ steps:
|
||||
fi
|
||||
|
||||
- name: security-scan
|
||||
image: aquasec/trivy:latest
|
||||
image: ghcr.io/aquasecurity/trivy:0.69.3
|
||||
commands:
|
||||
- trivy image --input image.tar --severity HIGH,CRITICAL --exit-code 1
|
||||
|
||||
@ -47,7 +47,7 @@ steps:
|
||||
|
||||
# Repo clonen
|
||||
- git clone https://git.efi.th-nuernberg.de/gitea/freudenreichan/EinfuehrungInDocker_Pipeline2.git
|
||||
- cd EinfuehrungInDocker_Pipeline2
|
||||
- cd EinfuehrungInDocker_Pipeline
|
||||
|
||||
# Branch wechseln oder erstellen
|
||||
- git checkout drone-artifacts || git checkout -b drone-artifacts
|
||||
@ -64,4 +64,4 @@ steps:
|
||||
- git pull || true
|
||||
|
||||
# Push
|
||||
- git push
|
||||
- git push
|
||||
37
Dockerfile
37
Dockerfile
@ -1,29 +1,22 @@
|
||||
FROM alpine:3.20 AS builder
|
||||
# Base-Image
|
||||
FROM ubuntu:latest
|
||||
|
||||
RUN apk add --no-cache build-base
|
||||
|
||||
WORKDIR /app
|
||||
COPY deployment.c .
|
||||
|
||||
RUN gcc -O2 -o deployment deployment.c
|
||||
|
||||
|
||||
FROM alpine:3.20
|
||||
|
||||
RUN addgroup -S appgroup && adduser -S appuser -G appgroup
|
||||
# Pakete installieren
|
||||
RUN apt-get update
|
||||
RUN apt-get install -y build-essential gcc curl vim net-tools
|
||||
|
||||
# Arbeitsverzeichnis setzen
|
||||
WORKDIR /app
|
||||
|
||||
COPY --from=builder /app/deployment /app/deployment
|
||||
# alles kopieren
|
||||
COPY . .
|
||||
|
||||
RUN mkdir -p /output && chown -R appuser:appgroup /app /output
|
||||
# Code kompilieren
|
||||
RUN gcc -o deployment deployment.c
|
||||
|
||||
USER appuser
|
||||
# Verzeichnis für Ausgabe anlegen
|
||||
RUN mkdir /output
|
||||
|
||||
VOLUME ["/output"]
|
||||
|
||||
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
|
||||
CMD test -f /output/output.txt || exit 1
|
||||
|
||||
ENTRYPOINT ["/bin/sh", "-c"]
|
||||
CMD ["./deployment 10 >> /output/output.txt && tail -f /output/output.txt"]
|
||||
# Ausgabe wird ins Container-Dateisystem geschrieben
|
||||
ENTRYPOINT ["/bin/bash", "-c"]
|
||||
CMD ["./deployment 10 > /output/output.txt && tail -f /output/output.txt"]
|
||||
Loading…
x
Reference in New Issue
Block a user