Block a user
pwpush-sso (latest)
Published 2026-05-22 00:18:24 -04:00 by mgetadmin
Installation
docker pull git.mget.ca/mgetadmin/pwpush-sso:latestsha256:414a26faa1e63af2599843d5fb411d34735b33ffdf4bb6b59606922020493468Image Layers
| ADD alpine-minirootfs-3.23.4-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| RUN /bin/sh -c set -eux; mkdir -p /usr/local/etc; echo 'gem: --no-document' >> /usr/local/etc/gemrc # buildkit |
| ENV LANG=C.UTF-8 |
| ENV RUBY_VERSION=4.0.2 |
| ENV RUBY_DOWNLOAD_URL=https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.2.tar.xz |
| ENV RUBY_DOWNLOAD_SHA256=4618db85bb9ec04d8152d0099db488694a3d3c4f52106625e4ad547f1318db87 |
| RUN /bin/sh -c set -eux; apk add --no-cache --virtual .ruby-builddeps autoconf bzip2 bzip2-dev ca-certificates coreutils dpkg-dev dpkg g++ gcc gdbm-dev glib-dev gmp-dev libc-dev libffi-dev libxml2-dev libxslt-dev linux-headers make ncurses-dev openssl openssl-dev patch procps yaml-dev zlib-dev ruby tar xz yaml-dev zlib-dev ; rustArch=; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') rustArch='x86_64-unknown-linux-musl'; rustupUrl='https://static.rust-lang.org/rustup/archive/1.28.2/x86_64-unknown-linux-musl/rustup-init'; rustupSha256='e6599a1c7be58a2d8eaca66a80e0dc006d87bbcf780a58b7343d6e14c1605cb2' ;; 'aarch64') rustArch='aarch64-unknown-linux-musl'; rustupUrl='https://static.rust-lang.org/rustup/archive/1.28.2/aarch64-unknown-linux-musl/rustup-init'; rustupSha256='a97c8f56d7462908695348dd8c71ea6740c138ce303715793a690503a94fc9a9' ;; esac; if [ -n "$rustArch" ]; then mkdir -p /tmp/rust; wget -O /tmp/rust/rustup-init "$rustupUrl"; echo "$rustupSha256 */tmp/rust/rustup-init" | sha256sum --check --strict; chmod +x /tmp/rust/rustup-init; export RUSTUP_HOME='/tmp/rust/rustup' CARGO_HOME='/tmp/rust/cargo'; export PATH="$CARGO_HOME/bin:$PATH"; /tmp/rust/rustup-init -y --no-modify-path --profile minimal --default-toolchain '1.91.1' --default-host "$rustArch"; rustc --version; cargo --version; fi; wget -O ruby.tar.xz "$RUBY_DOWNLOAD_URL"; echo "$RUBY_DOWNLOAD_SHA256 *ruby.tar.xz" | sha256sum --check --strict; mkdir -p /usr/src/ruby; tar -xJf ruby.tar.xz -C /usr/src/ruby --strip-components=1; rm ruby.tar.xz; cd /usr/src/ruby; wget -O 'thread-stack-fix.patch' 'https://bugs.ruby-lang.org/attachments/download/7081/0001-thread_pthread.c-make-get_main_stack-portable-on-lin.patch'; echo '3ab628a51d92fdf0d2b5835e93564857aea73e0c1de00313864a94a6255cb645 *thread-stack-fix.patch' | sha256sum --check --strict; patch -p1 -i thread-stack-fix.patch; rm thread-stack-fix.patch; autoconf; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; ./configure --build="$gnuArch" --disable-install-doc --enable-shared ${rustArch:+--enable-yjit} ${rustArch:+--enable-zjit} ; make -j "$(nproc)"; make install; rm -rf /tmp/rust; runDeps="$( scanelf --needed --nobanner --format '%n#p' --recursive /usr/local | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' )"; apk add --no-network --virtual .ruby-rundeps $runDeps; apk del --no-network .ruby-builddeps; cd /; rm -r /usr/src/ruby; if apk --no-network list --installed | grep -v '^[.]ruby-' | grep -i ruby ; then exit 1; fi; [ "$(command -v ruby)" = '/usr/local/bin/ruby' ]; ruby --version; gem --version; bundle --version # buildkit |
| ENV GEM_HOME=/usr/local/bundle |
| ENV BUNDLE_SILENCE_ROOT_WARNING=1 BUNDLE_APP_CONFIG=/usr/local/bundle |
| ENV PATH=/usr/local/bundle/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| RUN /bin/sh -c set -eux; mkdir "$GEM_HOME"; chmod 1777 "$GEM_HOME" # buildkit |
| CMD ["irb"] |
| ARG BUNDLE_WITHOUT=development:test |
| ARG BUNDLE_DEPLOYMENT=true |
| LABEL maintainer=pglombardo@hey.com |
| RUN |2 BUNDLE_WITHOUT=development:test BUNDLE_DEPLOYMENT=true /bin/sh -c apk update && apk add --no-cache bash curl libc6-compat libpq mariadb-connector-c nodejs tzdata yarn jemalloc # buildkit |
| ARG UID=1000 |
| ARG GID=1000 |
| ENV LC_CTYPE=UTF-8 LC_ALL=en_US.UTF-8 |
| ENV APP_ROOT=/opt/PasswordPusher |
| ENV RACK_ENV=production RAILS_ENV=production |
| ENV LD_PRELOAD=/usr/lib/libjemalloc.so.2 |
| ENV BUNDLE_PATH=/opt/PasswordPusher/vendor/bundle |
| ENV BUNDLE_APP_CONFIG=/opt/PasswordPusher/.bundle |
| WORKDIR /opt/PasswordPusher |
| RUN |4 BUNDLE_WITHOUT=development:test BUNDLE_DEPLOYMENT=true UID=1000 GID=1000 /bin/sh -c addgroup -g "${GID}" pwpusher && adduser -D -u "${UID}" -G pwpusher pwpusher # buildkit |
| COPY --chown=pwpusher:pwpusher /opt/PasswordPusher /opt/PasswordPusher # buildkit |
| RUN |4 BUNDLE_WITHOUT=development:test BUNDLE_DEPLOYMENT=true UID=1000 GID=1000 /bin/sh -c bundle config set without "${BUNDLE_WITHOUT}" && bundle config set path "${BUNDLE_PATH}" && bundle config set deployment "${BUNDLE_DEPLOYMENT}" && test -d "${BUNDLE_PATH}/ruby" && find "${BUNDLE_PATH}/ruby" -maxdepth 6 -path "*bundler/gems/apipie-rails-*" -type d | grep -q . # buildkit |
| RUN |4 BUNDLE_WITHOUT=development:test BUNDLE_DEPLOYMENT=true UID=1000 GID=1000 /bin/sh -c mkdir -p ${APP_ROOT}/storage/db && chown -R pwpusher:pwpusher ${APP_ROOT}/storage # buildkit |
| RUN |4 BUNDLE_WITHOUT=development:test BUNDLE_DEPLOYMENT=true UID=1000 GID=1000 /bin/sh -c chmod 755 /opt ${APP_ROOT} ${APP_ROOT}/vendor ${APP_ROOT}/vendor/bundle ${APP_ROOT}/vendor/bundle/ruby && find ${APP_ROOT}/app ${APP_ROOT}/bin ${APP_ROOT}/config ${APP_ROOT}/db ${APP_ROOT}/lib -type d -exec chmod 755 {} + && find ${APP_ROOT}/app ${APP_ROOT}/bin ${APP_ROOT}/config ${APP_ROOT}/db ${APP_ROOT}/lib -type f -exec chmod 644 {} + && chmod +x ${APP_ROOT}/bin/* && su pwpusher -s /bin/sh -c 'test -r /opt/PasswordPusher/lib/tasks && find /opt/PasswordPusher/vendor/bundle/ruby -maxdepth 6 -path "*bundler/gems/apipie-rails-*" -type d | grep -q . && bundle check' # buildkit |
| COPY containers/docker/entrypoint.sh /usr/local/bin/docker-entrypoint # buildkit |
| COPY containers/docker/worker-entrypoint.sh /usr/local/bin/docker-worker-entrypoint # buildkit |
| RUN |4 BUNDLE_WITHOUT=development:test BUNDLE_DEPLOYMENT=true UID=1000 GID=1000 /bin/sh -c chmod +x /usr/local/bin/docker-entrypoint /usr/local/bin/docker-worker-entrypoint # buildkit |
| RUN |4 BUNDLE_WITHOUT=development:test BUNDLE_DEPLOYMENT=true UID=1000 GID=1000 /bin/sh -c rm -rf ${APP_ROOT}/.do ${APP_ROOT}/.github ${APP_ROOT}/app.json ${APP_ROOT}/bin/move_up_stable_tag.sh ${APP_ROOT}/containers ${APP_ROOT}/test ${APP_ROOT}/ct.yaml # buildkit |
| RUN |4 BUNDLE_WITHOUT=development:test BUNDLE_DEPLOYMENT=true UID=1000 GID=1000 /bin/sh -c touch /opt/PasswordPusher/.env.production && chown pwpusher:pwpusher /opt/PasswordPusher/.env.production # buildkit |
| USER pwpusher |
| EXPOSE map[443/tcp:{} 5100/tcp:{} 80/tcp:{}] |
| ENTRYPOINT ["/usr/local/bin/docker-entrypoint"] |
Labels
| Key | Value |
|---|---|
| maintainer | pglombardo@hey.com |