Public-System-Design/Public-Dockerfiles
2
Fork 0
Code Issues Pull requests 4 Projects Releases Packages Wiki Activity Actions

Remove the creation of the keys in the livekit middleware image #6

Merged
holzi1005 merged 1 commit from holzi1005-patch-3 into main 2024-11-26 16:26:11 +01:00
Conversation 0 Commits 1 Files changed 1 +8 -18
1 changed files with 8 additions and 18 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
livekit_middleware_dockerfile
View file

@ -18,14 +18,7 @@ LABEL version="${VERSION}" \
USER root
RUN apk --no-cache add \
unzip \
openssl
RUN echo "#!/bin/sh" > /docker-entrypoint-init.d/02-openssl.sh \
&& echo "openssl genrsa -out ${WEBDIR}/private.pem" >> /docker-entrypoint-init.d/02-openssl.sh \
&& echo "openssl rsa -in ${WEBDIR}/private.pem -pubout -out ${WEBDIR}/public/public.pem" >> /docker-entrypoint-init.d/02-openssl.sh \
&& echo "chown nobody ${WEBDIR}/private.pem" >> /docker-entrypoint-init.d/02-openssl.sh \
&& chmod +x /docker-entrypoint-init.d/*
unzip
RUN --mount=type=secret,id=ARTIFACT_USER \
--mount=type=secret,id=ARTIFACT_SECRET \
@ -34,17 +27,14 @@ RUN --mount=type=secret,id=ARTIFACT_USER \
ARTIFACT_SECRET=$(cat /run/secrets/ARTIFACT_SECRET) \
ARTIFACT_URL=$(cat /run/secrets/ARTIFACT_URL) \
&& wget https://${ARTIFACT_USER}:${ARTIFACT_SECRET}@${ARTIFACT_URL}-${VERSION}.zip -O artifact.zip \
&& unzip artifact.zip -d ${WEBDIR} \
&& chown -R nobody ${WEBDIR}/public \
&& chown -R nobody ${WEBDIR}/var \
&& chmod -R 700 ${WEBDIR}/public \
&& chmod -R 700 ${WEBDIR}/var
&& unzip artifact.zip \
&& chown -R nobody public \
&& chown -R nobody var \
&& chmod -R 700 public \
&& chmod -R 700 var \
&& rm artifact.zip
RUN apk del unzip \
&& rm artifact.zip \
&& rm ${WEBDIR}/private.pem \
&& rm ${WEBDIR}/public/public.pem \
&& rm -r ${WEBDIR}/var/cache \
RUN rm -r var/cache \
&& rm -rf /var/cache/apk/*
USER nobody