Renovate
710c6f520c
All checks were successful
ci/woodpecker/pr/lint Pipeline was successful
ci/woodpecker/pr/build Pipeline was successful
ci/woodpecker/pr/test/1 Pipeline was successful
ci/woodpecker/pr/test/2 Pipeline was successful
ci/woodpecker/push/lint Pipeline was successful
ci/woodpecker/push/build Pipeline was successful
ci/woodpecker/push/test/1 Pipeline was successful
ci/woodpecker/push/test/2 Pipeline was successful
59 lines
2.8 KiB
Docker
59 lines
2.8 KiB
Docker
##
|
|
## Download node and markdownlint
|
|
##
|
|
|
|
FROM docker.io/library/debian:12.11-slim@sha256:e5865e6858dacc255bead044a7f2d0ad8c362433cfaa5acefb670c1edf54dfef AS build
|
|
SHELL ["/bin/bash", "-u", "-e", "-o", "pipefail", "-c"]
|
|
WORKDIR /build
|
|
# hadolint ignore=DL3008
|
|
RUN --mount=type=cache,target=/var/lib/apt/lists,sharing=locked \
|
|
apt-get -qq update && \
|
|
apt-get -qq install --yes --no-install-recommends ca-certificates wget gpg gpg-agent dirmngr xz-utils && \
|
|
rm -rf /etc/*- /var/lib/dpkg/*-old /var/lib/dpkg/status /var/cache/* /var/log/*
|
|
|
|
# fetch gpg keys for verification
|
|
# https://github.com/nodejs/node?tab=readme-ov-file#release-keys
|
|
RUN gpg --keyserver=hkps://keys.openpgp.org --recv-keys \
|
|
C0D6248439F1D5604AAFFB4021D900FFDB233756 \
|
|
DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 \
|
|
CC68F5A3106FF448322E48ED27F5E38D5B0A215F \
|
|
8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 \
|
|
890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 \
|
|
C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C \
|
|
108F52B48DB57BB0CC439B2997B01419BD92F80A \
|
|
A363A499291CBBC940DD62E41F10027AF002F8B0
|
|
|
|
# https://github.com/nodejs/node/tags
|
|
# https://github.com/nodejs/node#verifying-binaries
|
|
# https://nodejs.org/en/download/releases/
|
|
# https://endoflife.date/nodejs
|
|
|
|
RUN --mount=type=cache,target=/build \
|
|
ARCH=$(dpkg --print-architecture); \
|
|
[[ $ARCH == amd64 ]] && export SUFFIX=x64; \
|
|
[[ $ARCH == arm64 ]] && export SUFFIX=arm64; \
|
|
[[ -z ${SUFFIX:-} ]] && echo "Unknown arch: $ARCH" && exit 1; \
|
|
wget --no-hsts --quiet \
|
|
"https://nodejs.org/download/release/v22.17.0/node-v22.17.0-linux-$SUFFIX.tar.xz" \
|
|
"https://nodejs.org/download/release/v22.17.0/SHASUMS256.txt" \
|
|
"https://nodejs.org/download/release/v22.17.0/SHASUMS256.txt.sig" && \
|
|
sha256sum --quiet --check --strict --ignore-missing SHASUMS256.txt && \
|
|
gpg --verify SHASUMS256.txt.sig SHASUMS256.txt 2>/dev/null && \
|
|
tar --xz --extract --file="node-v22.17.0-linux-$SUFFIX.tar.xz" --exclude=bin/npx --exclude=bin/corepack --exclude=lib/node_modules/corepack --exclude=include --exclude=share --no-same-owner && \
|
|
mv "node-v22.17.0-linux-$SUFFIX" /opt/node
|
|
|
|
ARG NPM_CONFIG_REGISTRY
|
|
RUN --mount=type=tmpfs,target=/tmp PATH="$PATH:/opt/node/bin" npm install "@roadiehq/backstage-entity-validator@0.5.1" --global --no-fund --cache=/tmp
|
|
|
|
##
|
|
## Final stage
|
|
##
|
|
|
|
FROM docker.io/library/debian:12.11-slim@sha256:e5865e6858dacc255bead044a7f2d0ad8c362433cfaa5acefb670c1edf54dfef
|
|
COPY --chmod=555 --from=build /opt/node/bin/node /opt/node/bin/
|
|
COPY --from=build /opt/node/lib/node_modules/@roadiehq /opt/node/lib/node_modules/@roadiehq
|
|
COPY --chmod=555 entrypoint.sh /usr/local/bin/entrypoint.sh
|
|
ENV PATH="$PATH:/opt/node/bin"
|
|
RUN ln -s /opt/node/lib/node_modules/@roadiehq/backstage-entity-validator/bin/bev /opt/node/bin/validate-entity && validate-entity -h
|
|
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
|
|
USER 1000:1000
|