forked from sampras343/model-transparency-go
-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy pathContainerfile.cli-stack.rh
More file actions
106 lines (82 loc) · 6.63 KB
/
Copy pathContainerfile.cli-stack.rh
File metadata and controls
106 lines (82 loc) · 6.63 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
FROM registry.redhat.io/ubi9/go-toolset:9.8-1784190466@sha256:f99dd81b20e5971ef9f63a51ac27cf0aa591ff9921d021490548b67fd9b17144 AS build-cross-platform
ENV APP_ROOT=/opt/app-root \
GOPATH=/opt/app-root
USER root
WORKDIR $APP_ROOT/src
ADD go.mod go.sum ./
ADD ./ ./
RUN git config --global --add safe.directory /opt/app-root/src && \
git update-index --assume-unchanged Containerfile.model-transparency-go.rh && \
git update-index --assume-unchanged Containerfile.cli-stack.rh && \
go mod download && \
make cross-platform-binaries
FROM --platform=linux/amd64 quay.io/securesign/model-transparency-go@sha256:f5e33ee623166a55366fc0af116cb8171cbefcddd1df02828a49b00e796c1745 AS build-amd64
FROM --platform=linux/arm64 quay.io/securesign/model-transparency-go@sha256:f5e33ee623166a55366fc0af116cb8171cbefcddd1df02828a49b00e796c1745 AS build-arm64
FROM --platform=linux/ppc64le quay.io/securesign/model-transparency-go@sha256:f5e33ee623166a55366fc0af116cb8171cbefcddd1df02828a49b00e796c1745 AS build-ppc64le
FROM --platform=linux/s390x quay.io/securesign/model-transparency-go@sha256:f5e33ee623166a55366fc0af116cb8171cbefcddd1df02828a49b00e796c1745 AS build-s390x
FROM registry.redhat.io/ubi9/go-toolset:9.8-1784190466@sha256:f99dd81b20e5971ef9f63a51ac27cf0aa591ff9921d021490548b67fd9b17144 AS packager
USER root
RUN mkdir -p /binaries
# Standard CLI: Native Linux binaries from each arch variant
COPY --from=build-amd64 /usr/local/bin/model_transparency_cli_linux /tmp/model_transparency_cli_linux
RUN tar -czf /binaries/model_transparency_cli_linux_amd64.tar.gz -C /tmp model_transparency_cli_linux && \
rm /tmp/model_transparency_cli_linux
COPY --from=build-arm64 /usr/local/bin/model_transparency_cli_linux /tmp/model_transparency_cli_linux
RUN tar -czf /binaries/model_transparency_cli_linux_arm64.tar.gz -C /tmp model_transparency_cli_linux && \
rm /tmp/model_transparency_cli_linux
COPY --from=build-ppc64le /usr/local/bin/model_transparency_cli_linux /tmp/model_transparency_cli_linux
RUN tar -czf /binaries/model_transparency_cli_linux_ppc64le.tar.gz -C /tmp model_transparency_cli_linux && \
rm /tmp/model_transparency_cli_linux
COPY --from=build-s390x /usr/local/bin/model_transparency_cli_linux /tmp/model_transparency_cli_linux
RUN tar -czf /binaries/model_transparency_cli_linux_s390x.tar.gz -C /tmp model_transparency_cli_linux && \
rm /tmp/model_transparency_cli_linux
# PKCS11 CLI: Native Linux binaries from each arch variant
COPY --from=build-amd64 /usr/local/bin/model_transparency_cli_pkcs11_linux /tmp/model_transparency_cli_pkcs11_linux
RUN tar -czf /binaries/model_transparency_cli_pkcs11_linux_amd64.tar.gz -C /tmp model_transparency_cli_pkcs11_linux && \
rm /tmp/model_transparency_cli_pkcs11_linux
COPY --from=build-arm64 /usr/local/bin/model_transparency_cli_pkcs11_linux /tmp/model_transparency_cli_pkcs11_linux
RUN tar -czf /binaries/model_transparency_cli_pkcs11_linux_arm64.tar.gz -C /tmp model_transparency_cli_pkcs11_linux && \
rm /tmp/model_transparency_cli_pkcs11_linux
COPY --from=build-ppc64le /usr/local/bin/model_transparency_cli_pkcs11_linux /tmp/model_transparency_cli_pkcs11_linux
RUN tar -czf /binaries/model_transparency_cli_pkcs11_linux_ppc64le.tar.gz -C /tmp model_transparency_cli_pkcs11_linux && \
rm /tmp/model_transparency_cli_pkcs11_linux
COPY --from=build-s390x /usr/local/bin/model_transparency_cli_pkcs11_linux /tmp/model_transparency_cli_pkcs11_linux
RUN tar -czf /binaries/model_transparency_cli_pkcs11_linux_s390x.tar.gz -C /tmp model_transparency_cli_pkcs11_linux && \
rm /tmp/model_transparency_cli_pkcs11_linux
# OTel CLI: Native Linux binaries from each arch variant
COPY --from=build-amd64 /usr/local/bin/model_transparency_cli_otel_linux /tmp/model_transparency_cli_otel_linux
RUN tar -czf /binaries/model_transparency_cli_otel_linux_amd64.tar.gz -C /tmp model_transparency_cli_otel_linux && \
rm /tmp/model_transparency_cli_otel_linux
COPY --from=build-arm64 /usr/local/bin/model_transparency_cli_otel_linux /tmp/model_transparency_cli_otel_linux
RUN tar -czf /binaries/model_transparency_cli_otel_linux_arm64.tar.gz -C /tmp model_transparency_cli_otel_linux && \
rm /tmp/model_transparency_cli_otel_linux
COPY --from=build-ppc64le /usr/local/bin/model_transparency_cli_otel_linux /tmp/model_transparency_cli_otel_linux
RUN tar -czf /binaries/model_transparency_cli_otel_linux_ppc64le.tar.gz -C /tmp model_transparency_cli_otel_linux && \
rm /tmp/model_transparency_cli_otel_linux
COPY --from=build-s390x /usr/local/bin/model_transparency_cli_otel_linux /tmp/model_transparency_cli_otel_linux
RUN tar -czf /binaries/model_transparency_cli_otel_linux_s390x.tar.gz -C /tmp model_transparency_cli_otel_linux && \
rm /tmp/model_transparency_cli_otel_linux
# Cross-compiled binaries
COPY --from=build-cross-platform /opt/app-root/src/build/model_transparency_cli_darwin_amd64 /tmp/model_transparency_cli_darwin_amd64
RUN tar -czf /binaries/model_transparency_cli_darwin_amd64.tar.gz -C /tmp model_transparency_cli_darwin_amd64 && \
rm /tmp/model_transparency_cli_darwin_amd64
COPY --from=build-cross-platform /opt/app-root/src/build/model_transparency_cli_darwin_arm64 /tmp/model_transparency_cli_darwin_arm64
RUN tar -czf /binaries/model_transparency_cli_darwin_arm64.tar.gz -C /tmp model_transparency_cli_darwin_arm64 && \
rm /tmp/model_transparency_cli_darwin_arm64
COPY --from=build-cross-platform /opt/app-root/src/build/model_transparency_cli_windows_amd64.exe /tmp/model_transparency_cli_windows_amd64.exe
RUN tar -czf /binaries/model_transparency_cli_windows_amd64.exe.gz -C /tmp model_transparency_cli_windows_amd64.exe && \
rm /tmp/model_transparency_cli_windows_amd64.exe
RUN chmod -R a+rX /binaries
# Final minimal image with all binaries
FROM registry.redhat.io/ubi9/ubi-micro:9.8-1782840931@sha256:35de56a9413112f1474e392ebc35e0cf6f0fb484c8e8877bbae59b513694b41f
LABEL description="Flat image containing model-transparency CLI binaries for all platforms and architectures"
LABEL io.k8s.description="Flat image containing model-transparency CLI binaries for all platforms and architectures"
LABEL io.opencontainers.image.description="Flat image containing model-transparency CLI binaries for all platforms and architectures"
LABEL io.k8s.display-name="Model Transparency CLI stack image for Red Hat Trusted Artifact Signer"
LABEL io.openshift.tags="model-transparency trusted-artifact-signer cli-stack"
LABEL summary="Provides model-transparency CLI binaries as tar.gz archives for CDN distribution."
LABEL com.redhat.component="model-transparency-cli-stack"
LABEL name="rhtas/model-transparency-cli-stack"
COPY --from=packager /binaries/ /binaries/
COPY --from=build-amd64 /licenses/ /licenses/
USER 65532:65532