GuillaumeHemmen/docker-bench-security
1
0
Fork 0
mirror of https://github.com/docker/docker-bench-security.git synced 2025-06-28 07:36:43 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge c873f24e56 into 3633545c35

Browse source
This commit is contained in:
Julien Del-Piccolo 2017-11-25 00:58:59 +00:00 • committed by GitHub
commit 1030db1124
2 changed files with 28 additions and 4 deletions

11
Dockerfile
View file

@ -1,5 +1,7 @@
FROM alpine:3.6 FROM alpine:3.6
ENV DBS_VERSION=
LABEL org.label-schema.name="docker-bench-security" \ LABEL org.label-schema.name="docker-bench-security" \
org.label-schema.url="https://dockerbench.com" \ org.label-schema.url="https://dockerbench.com" \
org.label-schema.vcs-url="https://github.com/docker/docker-bench-security.git" org.label-schema.vcs-url="https://github.com/docker/docker-bench-security.git"
@ -8,9 +10,11 @@ RUN \
apk upgrade --no-cache && \ apk upgrade --no-cache && \
apk add --no-cache \ apk add --no-cache \
docker \ docker \
dumb-init && \ dumb-init \
openssl && \
rm -rf /usr/bin/docker-* /usr/bin/dockerd && \ rm -rf /usr/bin/docker-* /usr/bin/dockerd && \
mkdir /usr/local/bin/tests mkdir /usr/local/bin/tests && \
mkdir /usr/share/docker-bench-security
COPY ./*.sh /usr/local/bin/ COPY ./*.sh /usr/local/bin/
@ -20,5 +24,4 @@ WORKDIR /usr/local/bin
HEALTHCHECK CMD exit 0 HEALTHCHECK CMD exit 0
ENTRYPOINT [ "/usr/bin/dumb-init", "docker-bench-security.sh" ] ENTRYPOINT [ "/usr/bin/dumb-init", "get-specific-version.sh", "docker-bench-security.sh" ]

21
get-specific-version.sh Executable file
View file

@ -0,0 +1,21 @@
#!/bin/sh
if [ -n "${DBS_VERSION}" ]; then
if [ ! -f /usr/share/docker-bench-security/${DBS_VERSION}.tar.gz ]; then
echo "Getting docker-bench-security ${DBS_VERSION}..."
wget -q -P /usr/share/docker-bench-security/ https://github.com/docker/docker-bench-security/archive/${DBS_VERSION}.tar.gz
rm -rf /usr/share/docker-bench-security/${DBS_VERSION}/
mkdir -p /usr/share/docker-bench-security/${DBS_VERSION}/
tar xfzv /usr/share/docker-bench-security/${DBS_VERSION}.tar.gz -C /usr/share/docker-bench-security/${DBS_VERSION} --strip 1 --overwrite
rm -rfv /usr/share/docker-bench-security/${DBS_VERSION}.tar.gz
fi
if [ $(find /usr/share/docker-bench-security/${DBS_VERSION}/ | wc -l) -gt 1 ]; then
rm -rfv /usr/local/bin/docker-bench-security.sh /usr/local/bin/helper_lib.sh /usr/local/bin/output_lib.sh
rm -rfv /usr/local/bin/tests/*
cp -rv /usr/share/docker-bench-security/${DBS_VERSION}/*.sh /usr/local/bin/
cp -rv /usr/share/docker-bench-security/${DBS_VERSION}/tests/*.sh /usr/local/bin/tests/
fi
fi
exec "$@"