tools/knightcrawler
1
0
Fork 0
mirror of https://github.com/knightcrawler-stremio/knightcrawler.git synced 2024-12-20 03:29:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Build multi-platform images

Browse Source 
Refactor GitHub Actions workflow for build
Run Dockle and Trivy, upload sarif reports to GitHub
Refactor Dockerfiles based on best practices
This commit is contained in:
David Howell
2024-02-06 05:01:22 +00:00
parent d2faddc505
commit 2cae5296a2
8 changed files with 152 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/node/addon-jackett/.dockerignore
View File

@@ -1,3 +1,6 @@
**/node_modules
**/npm-debug.log
**/.env
**/.env
.eslint*
README.md
Dockerfile

8
src/node/addon-jackett/Dockerfile
View File

@@ -24,6 +24,12 @@ ENV NODE_ENV production
COPY --from=builder /app ./
RUN npm prune --omit=dev
# CIS-DI-0001
RUN addgroup -S addon-jackett && adduser -S -G addon-jackett addon-jackett
USER addon-jackett
EXPOSE 7001
ENTRYPOINT [ "pm2-runtime", "start", "ecosystem.config.cjs"]
ENTRYPOINT [ "pm2-runtime", "start", "ecosystem.config.cjs"]
HEALTHCHECK --interval=30s --timeout=30s --start-period=5s --retries=3 \
CMD pm2 ping || exit 1

4
src/node/addon/.dockerignore
View File

@@ -1,3 +1,5 @@
**/node_modules
**/npm-debug.log
**/.env
**/.env
.eslint*
Dockerfile

8
src/node/addon/Dockerfile
View File

@@ -24,6 +24,12 @@ ENV NODE_ENV production
COPY --from=builder /app ./
RUN npm prune --omit=dev
# CIS-DI-0001
RUN addgroup -S addon && adduser -S -G addon addon
USER addon
EXPOSE 7000
ENTRYPOINT [ "pm2-runtime", "start", "ecosystem.config.cjs"]
ENTRYPOINT [ "pm2-runtime", "start", "ecosystem.config.cjs"]
HEALTHCHECK --interval=30s --timeout=30s --start-period=5s --retries=3 \
CMD pm2 ping || exit 1

3
src/node/consumer/.dockerignore
View File

@@ -12,4 +12,5 @@ helm-charts
.env
.editorconfig
.idea
coverage*
coverage*
.eslint*

11
src/node/consumer/Dockerfile
View File

@@ -21,6 +21,13 @@ ENV NODE_ENV production
COPY --from=builder /app ./
RUN npm prune --omit=dev
EXPOSE 7001
# CIS-DI-0001
RUN useradd -d /home/consumer -m -s /bin/bash consumer
# CIS-DI-0008
RUN chmod u-s /usr/bin/wall /usr/bin/expiry /usr/bin/chage /usr/bin/passwd /usr/bin/gpasswd /usr/bin/chsh /usr/bin/newgrp /usr/bin/chfn /sbin/unix_chkpwd /bin/su /bin/mount /bin/umount /usr/bin/chage /usr/bin/expiry /usr/bin/wall
USER consumer
ENTRYPOINT [ "node", "dist/index.cjs" ]
EXPOSE 7001
ENTRYPOINT [ "node", "dist/index.cjs" ]
HEALTHCHECK --interval=30s --timeout=30s --start-period=5s --retries=3 \
CMD pgrep -x node > /dev/null || exit 1