| ADD alpine-minirootfs-3.24.1-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| ARG BIN_NAME=vault |
| ARG NAME=vault |
| ARG PRODUCT_VERSION=2.1.1 |
| ARG PRODUCT_REVISION=d78bbbe2d2f3d289c1ec29d431071beb23668212 |
| ARG TARGETOS=linux TARGETARCH=amd64 |
| ARG LICENSE_SOURCE=LICENSE |
| ARG LICENSE_DEST=/usr/share/doc/vault/LICENSE.txt |
| LABEL name=Vault maintainer=Vault Team <vault@hashicorp.com> vendor=HashiCorp version=2.1.1 release=d78bbbe2d2f3d289c1ec29d431071beb23668212 revision=d78bbbe2d2f3d289c1ec29d431071beb23668212 summary=Vault is a tool for securely accessing secrets. description=Vault is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. Vault provides a unified interface to any secret, while providing tight access control and recording a detailed audit log. |
| COPY LICENSE /usr/share/doc/vault/LICENSE.txt # buildkit |
| ENV NAME=vault |
| RUN |8 BIN_NAME=vault NAME=vault PRODUCT_VERSION=2.1.1 PRODUCT_REVISION=d78bbbe2d2f3d289c1ec29d431071beb23668212 TARGETOS=linux TARGETARCH=amd64 LICENSE_SOURCE=LICENSE LICENSE_DEST=/usr/share/doc/vault/LICENSE.txt /bin/sh -c addgroup ${NAME} && adduser -S -G ${NAME} ${NAME} # buildkit |
| RUN |8 BIN_NAME=vault NAME=vault PRODUCT_VERSION=2.1.1 PRODUCT_REVISION=d78bbbe2d2f3d289c1ec29d431071beb23668212 TARGETOS=linux TARGETARCH=amd64 LICENSE_SOURCE=LICENSE LICENSE_DEST=/usr/share/doc/vault/LICENSE.txt /bin/sh -c apk update && apk add --upgrade --no-cache su-exec dumb-init tzdata # buildkit |
| COPY dist/linux/amd64/vault /bin/vault # buildkit |
| RUN |8 BIN_NAME=vault NAME=vault PRODUCT_VERSION=2.1.1 PRODUCT_REVISION=d78bbbe2d2f3d289c1ec29d431071beb23668212 TARGETOS=linux TARGETARCH=amd64 LICENSE_SOURCE=LICENSE LICENSE_DEST=/usr/share/doc/vault/LICENSE.txt /bin/sh -c mkdir -p /vault/logs && mkdir -p /vault/file && mkdir -p /vault/config && chown -R ${NAME}:${NAME} /vault # buildkit |
| VOLUME [/vault/logs] |
| VOLUME [/vault/file] |
| EXPOSE [8200/tcp] |
| COPY .release/docker/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh # buildkit |
| ENTRYPOINT ["docker-entrypoint.sh"] |
| USER vault |
| CMD ["server" "-dev"] |
| COPY --chown=vault:vault --chmod=0644 config/vault.hcl /vault/config/vault.hcl # buildkit |
| COPY --chown=vault:vault --chmod=0755 entrypoint.sh /vault/entrypoint.sh # buildkit |
| EXPOSE [8200/tcp 8201/tcp] |
| HEALTHCHECK &{["CMD-SHELL" "VAULT_ADDR=http://127.0.0.1:8200 vault status >/dev/null 2>&1 || [ \"$?\" -eq 2 ]"] "10s" "5s" "2m0s" "0s" '\f'} |
| USER root |
| ENTRYPOINT ["/vault/entrypoint.sh"] |
