mirror of
https://github.com/cloudflare/cloudflared.git
synced 2025-06-17 21:16:35 +00:00
45f67c23fd
## Summary To have support for new curves and to achieve FIPS compliance Cloudflared must be released with [Go-Boring-1.22.10](https://bitbucket.cfdata.org/projects/PLAT/repos/goboring/browse?at=refs/heads/go-boring/1.22.10 "Follow link") along with the quic-go patches. Closes TUN-8858
38 lines
1.0 KiB
Docker
38 lines
1.0 KiB
Docker
# use a builder image for building cloudflare
|
|
ARG TARGET_GOOS
|
|
ARG TARGET_GOARCH
|
|
FROM golang:1.22.10 as builder
|
|
ENV GO111MODULE=on \
|
|
CGO_ENABLED=0 \
|
|
TARGET_GOOS=${TARGET_GOOS} \
|
|
TARGET_GOARCH=${TARGET_GOARCH} \
|
|
# the CONTAINER_BUILD envvar is used set github.com/cloudflare/cloudflared/metrics.Runtime=virtual
|
|
# which changes how cloudflared binds the metrics server
|
|
CONTAINER_BUILD=1
|
|
|
|
|
|
WORKDIR /go/src/github.com/cloudflare/cloudflared/
|
|
|
|
# copy our sources into the builder image
|
|
COPY . .
|
|
|
|
RUN .teamcity/install-cloudflare-go.sh
|
|
|
|
# compile cloudflared
|
|
RUN PATH="/tmp/go/bin:$PATH" make cloudflared
|
|
|
|
# use a distroless base image with glibc
|
|
FROM gcr.io/distroless/base-debian11:nonroot
|
|
|
|
LABEL org.opencontainers.image.source="https://github.com/cloudflare/cloudflared"
|
|
|
|
# copy our compiled binary
|
|
COPY --from=builder --chown=nonroot /go/src/github.com/cloudflare/cloudflared/cloudflared /usr/local/bin/
|
|
|
|
# run as non-privileged user
|
|
USER nonroot
|
|
|
|
# command / entrypoint of container
|
|
ENTRYPOINT ["cloudflared", "--no-autoupdate"]
|
|
CMD ["version"]
|