oauth2-proxy/Dockerfile at main · Polarix-Containers/oauth2-proxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
ARG VERSION=7.15.1
ARG UID=200000
ARG GID=200000

FROM golang:alpine AS builder
ARG VERSION

RUN apk -U upgrade \
    && apk add build-base \
    && rm -rf /var/cache/apk/*

ADD https://github.com/oauth2-proxy/oauth2-proxy.git#v${VERSION} .

RUN go mod download

RUN --network=none \
    sed -i 's/CGO_ENABLED=0/CGO_ENABLED=1/g' Makefile \
    && make build

# ======================================= #

FROM alpine
ARG UID
ARG GID

LABEL maintainer="Thien Tran contact@tommytran.io"

RUN apk -U upgrade \
    && apk add ca-certificates libstdc++ \
    && rm -rf /var/cache/apk/*

RUN --network=none \
    addgroup -g ${GID} oauth2-proxy \
    && adduser -u ${UID} --ingroup oauth2-proxy --disabled-password --system oauth2-proxy

COPY --from=builder /go/oauth2-proxy /bin/oauth2-proxy

COPY --from=ghcr.io/polarix-containers/hardened_malloc:latest /install /usr/local/lib/
ENV LD_PRELOAD="/usr/local/lib/libhardened_malloc.so"

USER oauth2-proxy

ENTRYPOINT ["/bin/oauth2-proxy"]