nune/pinata
1
0
Fork 0
mirror of https://codeberg.org/gigirassy/pinata synced 2026-08-30 23:37:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix

Browse Source
This commit is contained in:
gigirassy
2026-03-28 02:23:00 +01:00
parent d895499a31
commit cdec622881
1 changed files with 11 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+11 -9
View File
@@ -1,8 +1,8 @@
# syntax=docker/dockerfile:1.4 # syntax=docker/dockerfile:1.4
FROM --platform=$BUILDPLATFORM chimeralinux/chimera:latest AS builder FROM --platform=$BUILDPLATFORM chimeralinux/chimera:latest AS builder
ARG TARGETOS ARG TARGETOS
ARG TARGETARCH ARG TARGETARCH
ARG TARGETVARIANT
WORKDIR /src WORKDIR /src
COPY go.mod ./ COPY go.mod ./
@@ -20,27 +20,27 @@ RUN CGO_ENABLED=0 \
FROM chimeralinux/chimera:latest AS runtime FROM chimeralinux/chimera:latest AS runtime
RUN apk add --no-cache ca-certificates dnsmasq util-linux RUN apk add --no-cache ca-certificates dnsmasq
COPY --from=builder /pinata /pinata COPY --from=builder /pinata /pinata
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
RUN mkdir -p /run RUN mkdir -p /run
# Non-root by default
USER 65532
RUN cat > /entrypoint.sh <<'EOF' RUN cat > /entrypoint.sh <<'EOF'
#!/bin/sh #!/bin/sh
set -eu set -eu
UPSTREAM="/run/dnsmasq.resolv" UPSTREAM="/run/dnsmasq.resolv"
cp /etc/resolv.conf "$UPSTREAM" || true cp /etc/resolv.conf "$UPSTREAM" || true
printf "nameserver 127.0.0.1\noptions timeout:1 attempts:1\n" > /etc/resolv.conf
dnsmasq \ dnsmasq \
--no-daemon \ --no-daemon \
--port=5353 \
--listen-address=127.0.0.1 \ --listen-address=127.0.0.1 \
--bind-interfaces \
--cache-size=10000 \ --cache-size=10000 \
--neg-ttl=60 \ --neg-ttl=60 \
--resolv-file="$UPSTREAM" \ --resolv-file="$UPSTREAM" \
@@ -49,10 +49,12 @@ dnsmasq \
DNSMASQ_PID=$! DNSMASQ_PID=$!
trap 'kill $DNSMASQ_PID 2>/dev/null || true' EXIT INT TERM trap 'kill $DNSMASQ_PID 2>/dev/null || true' EXIT INT TERM
sleep 0.5 sleep 0.3
# Drop privileges (Chimera-compatible) export GODEBUG=netdns=go
exec setpriv --reuid=65532 --regid=65532 --clear-groups /pinata export DNSCACHE="127.0.0.1:5353"
exec /pinata
EOF EOF
RUN chmod +x /entrypoint.sh RUN chmod +x /entrypoint.sh