| ADD alpine-minirootfs-3.23.3-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| ARG BIN_NAME=vault |
| ARG NAME=vault |
| ARG PRODUCT_VERSION=1.21.3 |
| ARG PRODUCT_REVISION=f4f0f4eb7f467bbc99ec89121e1d1ad9c3d78558 |
| ARG TARGETOS=linux TARGETARCH=amd64 |
| ARG LICENSE_SOURCE=LICENSE |
| ARG LICENSE_DEST=/usr/share/doc/vault/LICENSE.txt |
| LABEL name=Vault maintainer=Vault Team <vault@hashicorp.com> vendor=HashiCorp version=1.21.3 release=f4f0f4eb7f467bbc99ec89121e1d1ad9c3d78558 revision=f4f0f4eb7f467bbc99ec89121e1d1ad9c3d78558 summary=Vault is a tool for securely accessing secrets. description=Vault is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. Vault provides a unified interface to any secret, while providing tight access control and recording a detailed audit log. |
| COPY LICENSE /usr/share/doc/vault/LICENSE.txt # buildkit |
| ENV NAME=vault |
| RUN |8 BIN_NAME=vault NAME=vault PRODUCT_VERSION=1.21.3 PRODUCT_REVISION=f4f0f4eb7f467bbc99ec89121e1d1ad9c3d78558 TARGETOS=linux TARGETARCH=amd64 LICENSE_SOURCE=LICENSE LICENSE_DEST=/usr/share/doc/vault/LICENSE.txt /bin/sh -c addgroup ${NAME} && adduser -S -G ${NAME} ${NAME} # buildkit |
| RUN |8 BIN_NAME=vault NAME=vault PRODUCT_VERSION=1.21.3 PRODUCT_REVISION=f4f0f4eb7f467bbc99ec89121e1d1ad9c3d78558 TARGETOS=linux TARGETARCH=amd64 LICENSE_SOURCE=LICENSE LICENSE_DEST=/usr/share/doc/vault/LICENSE.txt /bin/sh -c apk add --no-cache libcap su-exec dumb-init tzdata # buildkit |
| COPY dist/linux/amd64/vault /bin/ # buildkit |
| RUN |8 BIN_NAME=vault NAME=vault PRODUCT_VERSION=1.21.3 PRODUCT_REVISION=f4f0f4eb7f467bbc99ec89121e1d1ad9c3d78558 TARGETOS=linux TARGETARCH=amd64 LICENSE_SOURCE=LICENSE LICENSE_DEST=/usr/share/doc/vault/LICENSE.txt /bin/sh -c mkdir -p /vault/logs && mkdir -p /vault/file && mkdir -p /vault/config && chown -R ${NAME}:${NAME} /vault # buildkit |
| VOLUME [/vault/logs] |
| VOLUME [/vault/file] |
| EXPOSE [8200/tcp] |
| COPY .release/docker/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh # buildkit |
| ENTRYPOINT ["docker-entrypoint.sh"] |
| CMD ["server" "-dev"] |
| COPY config /vault/config # buildkit |
| COPY entrypoint.sh /vault/entrypoint.sh # buildkit |
| RUN /bin/sh -c mkdir -p /vault/data && chmod +x /vault/entrypoint.sh # buildkit |
| EXPOSE [8200/tcp 8201/tcp] |
| HEALTHCHECK &{["CMD-SHELL" "VAULT_ADDR=http://127.0.0.1:8200 vault status >/dev/null 2>&1 || exit 1"] "10s" "5s" "2m0s" "0s" '\f'} |
| ENTRYPOINT ["/vault/entrypoint.sh"] |
