mirror of
https://github.com/ansible/awx-operator.git
synced 2026-03-26 21:33:14 +00:00
3d78e90ab1
Update Dockerfile base image
* Vulnerability scans against this image when deployed shows: CVE-2023-4911
* https://quay.io/repository/operator-framework/ansible-operator/manifest/sha256:f08f675976f42dc3a8ebbb8482acea153a8f57232e2ee48940e3d40ca40d24d9?tab=vulnerabilities
* It appears if 5f3d9ed96f/Dockerfile (L1C14-L1C49) is updated to `v1.34.0` this vulnerability is mitigated.
26 lines
685 B
Docker
26 lines
685 B
Docker
FROM quay.io/operator-framework/ansible-operator:v1.34.0
|
|
|
|
USER root
|
|
RUN dnf update --security --bugfix -y && \
|
|
dnf install -y openssl
|
|
|
|
USER 1001
|
|
|
|
ARG DEFAULT_AWX_VERSION
|
|
ARG OPERATOR_VERSION
|
|
ENV DEFAULT_AWX_VERSION=${DEFAULT_AWX_VERSION}
|
|
ENV OPERATOR_VERSION=${OPERATOR_VERSION}
|
|
|
|
COPY requirements.yml ${HOME}/requirements.yml
|
|
RUN ansible-galaxy collection install -r ${HOME}/requirements.yml \
|
|
&& chmod -R ug+rwx ${HOME}/.ansible
|
|
|
|
COPY watches.yaml ${HOME}/watches.yaml
|
|
COPY roles/ ${HOME}/roles/
|
|
COPY playbooks/ ${HOME}/playbooks/
|
|
|
|
ENTRYPOINT ["/tini", "--", "/usr/local/bin/ansible-operator", "run", \
|
|
"--watches-file=./watches.yaml", \
|
|
"--reconcile-period=0s" \
|
|
]
|