From ae5fdebcbb352087585ec05b57a6a4edeec7a693 Mon Sep 17 00:00:00 2001 From: "william.lin" Date: Tue, 31 Mar 2026 16:40:28 -0700 Subject: [PATCH] issue-1471: remove unused dockerfiles --- build/amd64/Dockerfile.build_fleet | 21 -------- build/amd64/Dockerfile.build_fleet_v1 | 21 -------- build/amd64/Dockerfile.build_fleet_v2 | 21 -------- build/amd64/Dockerfile.build_fleet_v3 | 29 ----------- build/amd64/Dockerfile.build_manager | 30 ----------- build/amd64/Dockerfile.build_manager_v3 | 29 ----------- build/amd64/alpine/Dockerfile.adapter_base | 8 --- build/amd64/alpine/Dockerfile.all_base | 14 ----- build/amd64/alpine/Dockerfile.controller_base | 9 ---- build/amd64/alpine/Dockerfile.enforcer_base | 15 ------ build/amd64/alpine/Dockerfile.manager_base | 20 ------- build/amd64/alpine/Dockerfile.scanner_base | 8 --- build/amd64/alpine/Dockerfile.updater | 11 ---- build/amd64/bci/Dockerfile.adapter_base | 17 ------ build/amd64/bci/Dockerfile.all_base | 40 -------------- build/amd64/bci/Dockerfile.controller_base | 17 ------ build/amd64/bci/Dockerfile.enforcer_base | 22 -------- build/amd64/bci/Dockerfile.manager_base | 30 ----------- build/amd64/bci/Dockerfile.scanner_base | 17 ------ build/amd64/bci/Dockerfile.updater | 20 ------- build/amd64/bci_v3/Dockerfile.adapter_base | 17 ------ build/amd64/bci_v3/Dockerfile.all_base | 50 ------------------ build/amd64/bci_v3/Dockerfile.controller_base | 28 ---------- build/amd64/bci_v3/Dockerfile.enforcer_base | 26 ---------- build/amd64/bci_v3/Dockerfile.manager_base | 30 ----------- build/amd64/bci_v3/Dockerfile.scanner_base | 17 ------ build/amd64/bci_v3/Dockerfile.updater | 21 -------- build/arm64/Dockerfile.build_fleet | 21 -------- build/arm64/Dockerfile.build_fleet_v1 | 21 -------- build/arm64/Dockerfile.build_fleet_v2 | 21 -------- build/arm64/Dockerfile.build_fleet_v3 | 29 ----------- build/arm64/Dockerfile.build_manager | 30 ----------- build/arm64/Dockerfile.build_manager_v3 | 24 --------- build/arm64/v2/Dockerfile.adapter_base | 17 ------ build/arm64/v2/Dockerfile.all_base | 52 ------------------- build/arm64/v2/Dockerfile.controller_base | 26 ---------- build/arm64/v2/Dockerfile.enforcer_base | 31 ----------- build/arm64/v2/Dockerfile.manager_base | 30 ----------- build/arm64/v2/Dockerfile.scanner_base | 17 ------ build/arm64/v2/Dockerfile.updater | 21 -------- build/arm64/v3/Dockerfile.adapter_base | 17 ------ build/arm64/v3/Dockerfile.all_base | 49 ----------------- build/arm64/v3/Dockerfile.controller_base | 28 ---------- build/arm64/v3/Dockerfile.enforcer_base | 26 ---------- build/arm64/v3/Dockerfile.manager_base | 30 ----------- build/arm64/v3/Dockerfile.scanner_base | 17 ------ build/arm64/v3/Dockerfile.updater | 21 -------- 47 files changed, 1116 deletions(-) delete mode 100644 build/amd64/Dockerfile.build_fleet delete mode 100644 build/amd64/Dockerfile.build_fleet_v1 delete mode 100644 build/amd64/Dockerfile.build_fleet_v2 delete mode 100644 build/amd64/Dockerfile.build_fleet_v3 delete mode 100644 build/amd64/Dockerfile.build_manager delete mode 100644 build/amd64/Dockerfile.build_manager_v3 delete mode 100644 build/amd64/alpine/Dockerfile.adapter_base delete mode 100644 build/amd64/alpine/Dockerfile.all_base delete mode 100644 build/amd64/alpine/Dockerfile.controller_base delete mode 100644 build/amd64/alpine/Dockerfile.enforcer_base delete mode 100644 build/amd64/alpine/Dockerfile.manager_base delete mode 100644 build/amd64/alpine/Dockerfile.scanner_base delete mode 100644 build/amd64/alpine/Dockerfile.updater delete mode 100755 build/amd64/bci/Dockerfile.adapter_base delete mode 100755 build/amd64/bci/Dockerfile.all_base delete mode 100755 build/amd64/bci/Dockerfile.controller_base delete mode 100755 build/amd64/bci/Dockerfile.enforcer_base delete mode 100755 build/amd64/bci/Dockerfile.manager_base delete mode 100755 build/amd64/bci/Dockerfile.scanner_base delete mode 100755 build/amd64/bci/Dockerfile.updater delete mode 100755 build/amd64/bci_v3/Dockerfile.adapter_base delete mode 100755 build/amd64/bci_v3/Dockerfile.all_base delete mode 100755 build/amd64/bci_v3/Dockerfile.controller_base delete mode 100755 build/amd64/bci_v3/Dockerfile.enforcer_base delete mode 100755 build/amd64/bci_v3/Dockerfile.manager_base delete mode 100755 build/amd64/bci_v3/Dockerfile.scanner_base delete mode 100755 build/amd64/bci_v3/Dockerfile.updater delete mode 100644 build/arm64/Dockerfile.build_fleet delete mode 100644 build/arm64/Dockerfile.build_fleet_v1 delete mode 100644 build/arm64/Dockerfile.build_fleet_v2 delete mode 100644 build/arm64/Dockerfile.build_fleet_v3 delete mode 100644 build/arm64/Dockerfile.build_manager delete mode 100644 build/arm64/Dockerfile.build_manager_v3 delete mode 100644 build/arm64/v2/Dockerfile.adapter_base delete mode 100644 build/arm64/v2/Dockerfile.all_base delete mode 100644 build/arm64/v2/Dockerfile.controller_base delete mode 100644 build/arm64/v2/Dockerfile.enforcer_base delete mode 100644 build/arm64/v2/Dockerfile.manager_base delete mode 100644 build/arm64/v2/Dockerfile.scanner_base delete mode 100644 build/arm64/v2/Dockerfile.updater delete mode 100644 build/arm64/v3/Dockerfile.adapter_base delete mode 100644 build/arm64/v3/Dockerfile.all_base delete mode 100644 build/arm64/v3/Dockerfile.controller_base delete mode 100644 build/arm64/v3/Dockerfile.enforcer_base delete mode 100644 build/arm64/v3/Dockerfile.manager_base delete mode 100644 build/arm64/v3/Dockerfile.scanner_base delete mode 100644 build/arm64/v3/Dockerfile.updater diff --git a/build/amd64/Dockerfile.build_fleet b/build/amd64/Dockerfile.build_fleet deleted file mode 100644 index e46cf08..0000000 --- a/build/amd64/Dockerfile.build_fleet +++ /dev/null @@ -1,21 +0,0 @@ -FROM ubuntu:18.04 -MAINTAINER gduan@neuvector.com - -# Dockerfile to create container to build binaries - -ENV DEBIAN_FRONTEND noninteractive - -RUN apt-get update && apt-get install -y build-essential autoconf libtool libpcap-dev libpcre++-dev bzr curl upx wget zip git - -RUN apt-get install -y debconf-utils software-properties-common && \ - apt-get install -y libnfnetlink-dev libnetfilter-queue-dev libmnl-dev - -# Fleet -ENV GOPATH /go -ENV PATH $PATH:/usr/local/go/bin:$GOPATH/bin - -RUN curl -o /tmp/golang.tar.gz -fL https://go.dev/dl/go1.14.15.linux-amd64.tar.gz -RUN tar -C /usr/local -xzf /tmp/golang.tar.gz && rm /tmp/golang.tar.gz && \ - mkdir -p $GOPATH/src/neuvector.com && mkdir -p $GOPATH/bin - -COPY build.sh / diff --git a/build/amd64/Dockerfile.build_fleet_v1 b/build/amd64/Dockerfile.build_fleet_v1 deleted file mode 100644 index 508ca77..0000000 --- a/build/amd64/Dockerfile.build_fleet_v1 +++ /dev/null @@ -1,21 +0,0 @@ -FROM ubuntu:18.04 -MAINTAINER gduan@neuvector.com - -# Dockerfile to create container to build binaries - -ENV DEBIAN_FRONTEND noninteractive - -RUN apt-get update && apt-get install -y build-essential autoconf libtool libpcap-dev libpcre++-dev bzr curl upx wget zip git - -RUN apt-get install -y debconf-utils software-properties-common && \ - apt-get install -y libnfnetlink-dev libnetfilter-queue-dev libmnl-dev - -# Fleet -ENV GOPATH /go -ENV PATH $PATH:/usr/local/go/bin:$GOPATH/bin - -RUN curl -o /tmp/golang.tar.gz -fL https://go.dev/dl/go1.20.3.linux-amd64.tar.gz -RUN tar -C /usr/local -xzf /tmp/golang.tar.gz && rm /tmp/golang.tar.gz && \ - mkdir -p $GOPATH/src/neuvector.com && mkdir -p $GOPATH/bin - -COPY build.sh / diff --git a/build/amd64/Dockerfile.build_fleet_v2 b/build/amd64/Dockerfile.build_fleet_v2 deleted file mode 100644 index 92cfe99..0000000 --- a/build/amd64/Dockerfile.build_fleet_v2 +++ /dev/null @@ -1,21 +0,0 @@ -FROM ubuntu:18.04 -MAINTAINER gduan@neuvector.com - -# Dockerfile to create container to build binaries - -ENV DEBIAN_FRONTEND noninteractive - -RUN apt-get update && apt-get install -y build-essential autoconf libtool libpcap-dev libpcre++-dev bzr curl upx wget zip git - -RUN apt-get install -y debconf-utils software-properties-common && \ - apt-get install -y libnfnetlink-dev libnetfilter-queue-dev libmnl-dev - -# Fleet -ENV GOPATH /go -ENV PATH $PATH:/usr/local/go/bin:$GOPATH/bin - -RUN curl -o /tmp/golang.tar.gz -fL https://go.dev/dl/go1.22.7.linux-amd64.tar.gz -RUN tar -C /usr/local -xzf /tmp/golang.tar.gz && rm /tmp/golang.tar.gz && \ - mkdir -p $GOPATH/src/neuvector.com && mkdir -p $GOPATH/bin - -COPY build.sh / diff --git a/build/amd64/Dockerfile.build_fleet_v3 b/build/amd64/Dockerfile.build_fleet_v3 deleted file mode 100644 index db897bd..0000000 --- a/build/amd64/Dockerfile.build_fleet_v3 +++ /dev/null @@ -1,29 +0,0 @@ -ARG GO_VERSION=1.24 -FROM registry.suse.com/bci/golang:${GO_VERSION} - -# Dockerfile to create container to build binaries - -RUN zypper ref && \ - zypper install -y --no-recommends gcc13 gcc13-c++ make glibc-devel glibc-devel-static \ - python312 automake autoconf libtool libpcap-devel pcre-devel pcre2-devel curl wget zip git \ - libnfnetlink-devel libnetfilter_queue-devel libmnl-devel liburcu-devel libjansson-devel jemalloc-devel && \ - update-alternatives --install /usr/bin/gcc gcc /usr/bin/gcc-13 10 && \ - update-alternatives --install /usr/bin/g++ g++ /usr/bin/g++-13 10 - -RUN zypper addrepo https://download.opensuse.org/repositories/devel:tools:compiler/15.6/devel:tools:compiler.repo && \ - zypper --non-interactive --gpg-auto-import-keys refresh && \ - zypper install -y clang17 llvm17 - -RUN zypper addrepo https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/isv:SUSE:neuvector.repo && \ - zypper --non-interactive --gpg-auto-import-keys refresh && \ - zypper install -y vectorscan-devel - -RUN ln -sf /usr/bin/python3.12 /usr/bin/python && \ - ln -sf /usr/bin/python3.12 /usr/bin/python3 - -# Fleet -ENV GOPATH=/go -ENV PATH=$PATH:/usr/local/go/bin:$GOPATH/bin -RUN mkdir -p $GOPATH/src/neuvector.com && mkdir -p $GOPATH/bin - -COPY build.sh / diff --git a/build/amd64/Dockerfile.build_manager b/build/amd64/Dockerfile.build_manager deleted file mode 100644 index 8e9667c..0000000 --- a/build/amd64/Dockerfile.build_manager +++ /dev/null @@ -1,30 +0,0 @@ -FROM ubuntu:22.04 - -# Dockerfile to create container to build binaries - -RUN apt-get update || true - -# Manager -RUN apt-get install -y wget curl zip git openjdk-17-jdk && \ - apt-get install apt-transport-https - -RUN curl -fL https://github.com/coursier/launchers/raw/master/cs-x86_64-pc-linux.gz | gzip -d > cs && \ - chmod +x cs && \ - export PATH="$PATH:/root/.local/share/coursier/bin" && \ - ./cs install scala:3.3.4 sbt:1.10.2 --install-dir /usr/local/bin - -RUN curl -fsSL https://deb.nodesource.com/setup_16.x | bash - && \ - apt-get install -uy nodejs && \ - npm install -g @angular/cli@14 && \ - npm install -g npm-force-resolutions - -# Manager unitest -RUN wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb && \ - dpkg -i google-chrome-stable_current_amd64.deb; apt-get -fy install - -# Fix for sbt failure, an ubuntu issue -RUN sed -i 's/pkcs12/jks/g' /etc/java-17-openjdk/security/java.security && \ - dpkg --purge --force-depends ca-certificates-java && \ - apt-get install ca-certificates-java - -COPY build.sh / diff --git a/build/amd64/Dockerfile.build_manager_v3 b/build/amd64/Dockerfile.build_manager_v3 deleted file mode 100644 index 8c026b1..0000000 --- a/build/amd64/Dockerfile.build_manager_v3 +++ /dev/null @@ -1,29 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} - -# Dockerfile to create container to build binaries - -# Manager -RUN zypper refresh && \ - zypper install -y ca-certificates wget curl zip git awk java-17-openjdk-devel nodejs20 npm20 - -ARG CS_VERSION=v2.1.18 -RUN curl -fL https://github.com/coursier/coursier/releases/download/${CS_VERSION}/cs-x86_64-pc-linux.gz | gzip -d > cs && \ - chmod +x cs && \ - export PATH="$PATH:/root/.local/share/coursier/bin" && \ - ./cs install scala:3.3.4 sbt:1.10.2 --install-dir /usr/local/bin - -RUN npm install -g @angular/cli@20 && \ - npm install -g npm-force-resolutions - -# Manager unitest -RUN zypper addrepo https://download.opensuse.org/repositories/M17N:fonts/15.6/M17N:fonts.repo && \ - zypper --non-interactive --gpg-auto-import-keys refresh && \ - zypper install -y liberation-fonts - -RUN wget https://dl.google.com/linux/direct/google-chrome-stable_current_x86_64.rpm && \ - wget https://dl.google.com/linux/linux_signing_key.pub && \ - rpm --import linux_signing_key.pub && \ - zypper install -y google-chrome-stable_current_x86_64.rpm - -COPY build.sh / diff --git a/build/amd64/alpine/Dockerfile.adapter_base b/build/amd64/alpine/Dockerfile.adapter_base deleted file mode 100644 index 6e040cc..0000000 --- a/build/amd64/alpine/Dockerfile.adapter_base +++ /dev/null @@ -1,8 +0,0 @@ -FROM alpine:3.20.0 -MAINTAINER support@neuvector.com - -COPY stage / - -RUN apk --update add ca-certificates && apk del iptables && \ - apk add --allow-untrusted --force-overwrite /glibc-2.33-r0.apk && apk update && apk upgrade && \ - rm -rf /tmp/* && rm -rf /var/cache/apk/* /glibc-2.33-r0.apk diff --git a/build/amd64/alpine/Dockerfile.all_base b/build/amd64/alpine/Dockerfile.all_base deleted file mode 100644 index 91c0518..0000000 --- a/build/amd64/alpine/Dockerfile.all_base +++ /dev/null @@ -1,14 +0,0 @@ -FROM neuvector/manager_base:latest -MAINTAINER support@neuvector.com - -COPY stage / - -RUN apk --update add ca-certificates ethtool lsof procps curl jq supervisor && \ - apk add --allow-untrusted --force-overwrite /glibc-2.33-r0.apk && apk update && apk upgrade && \ - rm -rf /tmp/* && rm -rf /var/cache/apk/* /glibc-2.33-r0.apk && \ - rm -rf /usr/lib/python3.12/site-packages/setuptools* && \ - ln -s /usr/local/bin/libpcre.so.3.13.1 /usr/glibc-compat/lib/libpcre.so.3 && \ - ln -s /usr/local/bin/libstdc++.so.6.0.19 /usr/local/bin/libstdc++.so.6 && \ - ln -s /usr/local/bin/libnfnetlink.so.0.2.0 /usr/local/bin/libnfnetlink.so.0 && \ - ln -s /usr/local/bin/libnetfilter_queue.so.1.5.0 /usr/local/bin/libnetfilter_queue.so.1 && \ - ln -s /usr/local/bin/libmnl.so.0.1.0 /usr/local/bin/libmnl.so.0 diff --git a/build/amd64/alpine/Dockerfile.controller_base b/build/amd64/alpine/Dockerfile.controller_base deleted file mode 100644 index 25eac29..0000000 --- a/build/amd64/alpine/Dockerfile.controller_base +++ /dev/null @@ -1,9 +0,0 @@ -FROM alpine:3.20.0 -MAINTAINER support@neuvector.com - -COPY stage / - -RUN apk --update add ca-certificates iproute2 ethtool lsof procps && apk del iptables && \ - apk add --allow-untrusted --force-overwrite /glibc-2.33-r0.apk && apk update && apk upgrade && \ - rm -rf /tmp/* && rm -rf /var/cache/apk/* /glibc-2.33-r0.apk && \ - ln -s /usr/local/bin/libpcre.so.3.13.1 /usr/glibc-compat/lib/libpcre.so.3 diff --git a/build/amd64/alpine/Dockerfile.enforcer_base b/build/amd64/alpine/Dockerfile.enforcer_base deleted file mode 100644 index cf4ca21..0000000 --- a/build/amd64/alpine/Dockerfile.enforcer_base +++ /dev/null @@ -1,15 +0,0 @@ -FROM alpine:3.20.0 -MAINTAINER support@neuvector.com - -COPY stage / - -RUN apk --update add ca-certificates iproute2 ethtool lsof procps curl jq build-base libmnl-dev libnftnl-dev && \ - apk add --allow-untrusted --force-overwrite /glibc-2.33-r0.apk && apk update && apk upgrade && \ - cd iptables-1.8.9 && ./configure && make && make install && \ - apk del build-base libmnl-dev libnftnl-dev && \ - rm -rf /tmp/* && rm -rf /var/cache/apk/* /glibc-2.33-r0.apk && rm -rf /iptables-1.8.9 && \ - ln -s /usr/local/bin/libpcre.so.3.13.1 /usr/glibc-compat/lib/libpcre.so.3 && \ - ln -s /usr/local/bin/libstdc++.so.6.0.19 /usr/local/bin/libstdc++.so.6 && \ - ln -s /usr/local/bin/libnfnetlink.so.0.2.0 /usr/local/bin/libnfnetlink.so.0 && \ - ln -s /usr/local/bin/libnetfilter_queue.so.1.5.0 /usr/local/bin/libnetfilter_queue.so.1 && \ - ln -s /usr/local/bin/libmnl.so.0.1.0 /usr/local/bin/libmnl.so.0 diff --git a/build/amd64/alpine/Dockerfile.manager_base b/build/amd64/alpine/Dockerfile.manager_base deleted file mode 100644 index 85f4fc7..0000000 --- a/build/amd64/alpine/Dockerfile.manager_base +++ /dev/null @@ -1,20 +0,0 @@ -FROM alpine:3.20.0 -MAINTAINER support@neuvector.com - -COPY stage / - -ENV JAVA_VERSION=17.0.12_p8-r0 \ - JAVA_ALPINE_VERSION=17.0.12_p8-r0 \ - JAVA_HOME=/usr/lib/jvm/java-1.17-openjdk/jre \ - PATH=$PATH:/usr/lib/jvm/java-1.17-openjdk/jre/bin:/usr/lib/jvm/java-1.17-openjdk/bin \ - LANG=C.UTF-8 \ - PYTHONUNBUFFERED=1 - -RUN apk add --no-cache python3 && ln -sf python3 /usr/bin/python && \ - python3 -m venv .venv && \ - source .venv/bin/activate && \ - pip3 install --upgrade pip setuptools && \ - pip3 install --no-cache-dir -r /requirements.txt && \ - rm -r /root/.cache -RUN set -x && apk add --update ca-certificates iproute2 lsof procps openjdk17-jre="$JAVA_ALPINE_VERSION" && apk update && apk upgrade && \ - rm -rf /tmp/* /var/cache/apk/* /requirements.txt diff --git a/build/amd64/alpine/Dockerfile.scanner_base b/build/amd64/alpine/Dockerfile.scanner_base deleted file mode 100644 index 0423f58..0000000 --- a/build/amd64/alpine/Dockerfile.scanner_base +++ /dev/null @@ -1,8 +0,0 @@ -FROM alpine:3.20.0 -MAINTAINER support@neuvector.com - -COPY stage / - -RUN apk --update add ca-certificates && \ - apk add --allow-untrusted --force-overwrite /glibc-2.33-r0.apk && apk update && apk upgrade && \ - rm -rf /tmp/* && rm -rf /var/cache/apk/* /glibc-2.33-r0.apk diff --git a/build/amd64/alpine/Dockerfile.updater b/build/amd64/alpine/Dockerfile.updater deleted file mode 100644 index 3466376..0000000 --- a/build/amd64/alpine/Dockerfile.updater +++ /dev/null @@ -1,11 +0,0 @@ -FROM alpine:3.20.0 -MAINTAINER support@neuvector.com - -LABEL neuvector.image="neuvector/updater" \ - neuvector.role="updater" - -RUN apk --update add ca-certificates curl && \ - apk update && apk upgrade && \ - rm -rf /tmp/* && rm -rf /var/cache/apk/* - -ENTRYPOINT ["sleep", "30"] diff --git a/build/amd64/bci/Dockerfile.adapter_base b/build/amd64/bci/Dockerfile.adapter_base deleted file mode 100755 index 3f659bd..0000000 --- a/build/amd64/bci/Dockerfile.adapter_base +++ /dev/null @@ -1,17 +0,0 @@ -FROM registry.suse.com/bci/bci-micro:15.6 AS micro -FROM registry.suse.com/bci/bci-base:15.6 AS builder -MAINTAINER support@neuvector.com - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / - -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/amd64/bci/Dockerfile.all_base b/build/amd64/bci/Dockerfile.all_base deleted file mode 100755 index 30398a8..0000000 --- a/build/amd64/bci/Dockerfile.all_base +++ /dev/null @@ -1,40 +0,0 @@ -FROM registry.suse.com/bci/bci-micro:15.6 AS micro -FROM registry.suse.com/bci/bci-base:15.6 AS builder -MAINTAINER support@neuvector.com - -ENV JAVA_VERSION=17.0.12_p8-r0 \ - JAVA_HOME=/usr/lib64/jvm/jre-17-openjdk/bin \ - PATH=$PATH:/usr/lib64/jvm/jre-17-openjdk/bin \ - LANG=C.UTF-8 \ - PYTHONUNBUFFERED=1 - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - java-17-openjdk python312 python312-pip \ - ca-certificates iproute2 ethtool lsof procps curl jq iptables grep tar awk tcpdump sed kmod && \ - cp /etc/resolv.conf /chroot/etc/resolv.conf && \ - chroot /chroot /usr/bin/python3.12 -m pip install --upgrade pip setuptools && \ - rm /chroot/usr/lib/python3.12/site-packages/distutils-precedence.pth && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY --from=builder /usr/sbin/useradd /usr/sbin -COPY stage / - -RUN ln -s /usr/bin/python3.12 /usr/bin/python && \ - ln -s /usr/bin/python3.12 /usr/bin/python3 && \ - pip3 install --no-cache-dir "supervisor==4.2.5" && \ - ln -s /usr/local/bin/supervisord /usr/bin/supervisord && \ - pip3 install --no-cache-dir -r /requirements.txt - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload truncate unlink watch -RUN rm -rf /usr/share/X11 /usr/share/doc /usr/share/man /usr/local/man /root/.cache /requirements.txt -RUN ln -s /usr/local/bin/libpcre.so.3.13.1 /usr/lib64/libpcre.so.3 && \ - ln -s /usr/local/bin/libstdc++.so.6.0.19 /usr/local/bin/libstdc++.so.6 && \ - ln -s /usr/local/bin/libnfnetlink.so.0.2.0 /usr/local/bin/libnfnetlink.so.0 && \ - ln -s /usr/local/bin/libnetfilter_queue.so.1.5.0 /usr/local/bin/libnetfilter_queue.so.1 && \ - ln -s /usr/local/bin/libmnl.so.0.1.0 /usr/local/bin/libmnl.so.0 && \ - ln -s /usr/lib64/libcrypto.so.3 /usr/lib/libcrypto.so.3 diff --git a/build/amd64/bci/Dockerfile.controller_base b/build/amd64/bci/Dockerfile.controller_base deleted file mode 100755 index e4122f0..0000000 --- a/build/amd64/bci/Dockerfile.controller_base +++ /dev/null @@ -1,17 +0,0 @@ -FROM registry.suse.com/bci/bci-micro:15.6 AS micro -FROM registry.suse.com/bci/bci-base:15.6 AS builder -MAINTAINER support@neuvector.com - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates iproute2 ethtool lsof procps curl jq iptables grep tar awk && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload truncate unlink watch -RUN ln -s /usr/local/bin/libpcre.so.3.13.1 /usr/lib64/libpcre.so.3 diff --git a/build/amd64/bci/Dockerfile.enforcer_base b/build/amd64/bci/Dockerfile.enforcer_base deleted file mode 100755 index 55231e5..0000000 --- a/build/amd64/bci/Dockerfile.enforcer_base +++ /dev/null @@ -1,22 +0,0 @@ -FROM registry.suse.com/bci/bci-micro:15.6 AS micro -FROM registry.suse.com/bci/bci-base:15.6 AS builder -MAINTAINER support@neuvector.com - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates iproute2 ethtool lsof procps curl jq iptables grep tar awk tcpdump sed kmod && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload truncate unlink watch -RUN ln -s /usr/local/bin/libpcre.so.3.13.1 /usr/lib64/libpcre.so.3 && \ - ln -s /usr/local/bin/libstdc++.so.6.0.19 /usr/local/bin/libstdc++.so.6 && \ - ln -s /usr/local/bin/libnfnetlink.so.0.2.0 /usr/local/bin/libnfnetlink.so.0 && \ - ln -s /usr/local/bin/libnetfilter_queue.so.1.5.0 /usr/local/bin/libnetfilter_queue.so.1 && \ - ln -s /usr/local/bin/libmnl.so.0.1.0 /usr/local/bin/libmnl.so.0 && \ - ln -s /usr/lib64/libcrypto.so.3 /usr/lib/libcrypto.so.3 diff --git a/build/amd64/bci/Dockerfile.manager_base b/build/amd64/bci/Dockerfile.manager_base deleted file mode 100755 index 5719f64..0000000 --- a/build/amd64/bci/Dockerfile.manager_base +++ /dev/null @@ -1,30 +0,0 @@ -FROM registry.suse.com/bci/bci-micro:15.6 AS micro -FROM registry.suse.com/bci/bci-base:15.6 AS builder -MAINTAINER support@neuvector.com - -ENV JAVA_VERSION=17.0.12_p8-r0\ - JAVA_HOME=/usr/lib/jvm/java-1.17-openjdk/jre \ - PATH=$PATH:/usr/lib/jvm/java-1.17-openjdk/jre/bin:/usr/lib/jvm/java-1.17-openjdk/bin \ - LANG=C.UTF-8 \ - PYTHONUNBUFFERED=1 - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - python312 python312-pip java-17-openjdk iproute2 lsof procps grep awk && \ - cp /etc/resolv.conf /chroot/etc/resolv.conf && \ - chroot /chroot /usr/bin/python3.12 -m pip install --upgrade pip setuptools && \ - rm /chroot/usr/lib/python3.12/site-packages/distutils-precedence.pth && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY --from=builder /usr/sbin/useradd /usr/sbin -COPY stage / - -RUN ln -s /usr/bin/python3.12 /usr/bin/python && \ - ln -s /usr/bin/python3.12 /usr/bin/python3 && \ - pip3 install --no-cache-dir -r /requirements.txt && \ - rm -r /root/.cache /requirements.txt -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/amd64/bci/Dockerfile.scanner_base b/build/amd64/bci/Dockerfile.scanner_base deleted file mode 100755 index 0dafc7c..0000000 --- a/build/amd64/bci/Dockerfile.scanner_base +++ /dev/null @@ -1,17 +0,0 @@ -FROM registry.suse.com/bci/bci-micro:15.6 AS micro -FROM registry.suse.com/bci/bci-base:15.6 AS builder -MAINTAINER support@neuvector.com - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates procps grep && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / - -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/amd64/bci/Dockerfile.updater b/build/amd64/bci/Dockerfile.updater deleted file mode 100755 index 048728d..0000000 --- a/build/amd64/bci/Dockerfile.updater +++ /dev/null @@ -1,20 +0,0 @@ -FROM registry.suse.com/bci/bci-micro:15.6 AS micro -FROM registry.suse.com/bci/bci-base:15.6 AS builder -MAINTAINER support@neuvector.com -LABEL neuvector.image="neuvector/updater" \ - neuvector.role="updater" - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates curl grep && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch - -ENTRYPOINT ["sleep", "30"] diff --git a/build/amd64/bci_v3/Dockerfile.adapter_base b/build/amd64/bci_v3/Dockerfile.adapter_base deleted file mode 100755 index 67a20a4..0000000 --- a/build/amd64/bci_v3/Dockerfile.adapter_base +++ /dev/null @@ -1,17 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / - -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/amd64/bci_v3/Dockerfile.all_base b/build/amd64/bci_v3/Dockerfile.all_base deleted file mode 100755 index 977adb0..0000000 --- a/build/amd64/bci_v3/Dockerfile.all_base +++ /dev/null @@ -1,50 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -ENV JAVA_VERSION=17.0.12_p8-r0 \ - JAVA_HOME=/usr/lib64/jvm/jre-17-openjdk/bin \ - PATH=$PATH:/usr/lib64/jvm/jre-17-openjdk/bin \ - LANG=C.UTF-8 \ - PYTHONUNBUFFERED=1 - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - java-17-openjdk python312 python312-pip \ - ca-certificates iproute2 ethtool lsof procps curl jq iptables grep tar awk tcpdump sed kmod wget unzip \ - libnetfilter_queue-devel liburcu-devel libpcap-devel pcre2-devel libjansson-devel libmnl-devel jemalloc-devel - -RUN zypper addrepo https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/isv:SUSE:neuvector.repo && \ - rpm --import https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/repodata/repomd.xml.key && \ - zypper -n refresh && \ - zypper --installroot /chroot install -y yq libhs5-vectorscan5 vectorscan-devel consul -RUN mv /chroot/usr/bin/consul /chroot/usr/local/bin/consul - -RUN cp /etc/resolv.conf /chroot/etc/resolv.conf && \ - chroot /chroot /usr/bin/python3.12 -m pip install --upgrade pip setuptools && \ - rm /chroot/usr/lib/python3.12/site-packages/distutils-precedence.pth && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY --from=builder /usr/sbin/useradd /usr/sbin -COPY stage / - -ARG OPA_VERSION=v1.4.2 - -RUN ln -s /usr/bin/python3.12 /usr/bin/python && \ - ln -s /usr/bin/python3.12 /usr/bin/python3 && \ - pip3 install --no-cache-dir "supervisor==4.2.5" && \ - pip3 install --no-cache-dir -r /requirements.txt && \ - ln -s /usr/local/bin/supervisord /usr/bin/supervisord && \ - rm -r /root/.cache /requirements.txt - -RUN curl -fL -o /usr/local/bin/opa https://github.com/open-policy-agent/opa/releases/download/${OPA_VERSION}/opa_linux_amd64_static && \ - chmod +x /usr/local/bin/opa - -RUN ln -s /usr/lib64/libpcap.so /usr/lib64/libpcap.so.0.8 && \ - ln -s /usr/lib64/libpcre.so.1 /usr/lib64/libpcre.so.3 - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/amd64/bci_v3/Dockerfile.controller_base b/build/amd64/bci_v3/Dockerfile.controller_base deleted file mode 100755 index 72e5e22..0000000 --- a/build/amd64/bci_v3/Dockerfile.controller_base +++ /dev/null @@ -1,28 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates pcre2-devel iproute2 ethtool lsof procps curl jq iptables grep tar awk wget unzip && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -RUN zypper addrepo https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/isv:SUSE:neuvector.repo && \ - rpm --import https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/repodata/repomd.xml.key && \ - zypper -n refresh && \ - zypper --installroot /chroot install -y consul -RUN mv /chroot/usr/bin/consul /chroot/usr/local/bin/consul - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY stage / - -ARG OPA_VERSION=v1.4.2 - -RUN curl -fL -o /usr/local/bin/opa https://github.com/open-policy-agent/opa/releases/download/${OPA_VERSION}/opa_linux_amd64_static && \ - chmod +x /usr/local/bin/opa -RUN ln -s /usr/lib64/libpcre.so.1 /usr/lib64/libpcre.so.3 - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/amd64/bci_v3/Dockerfile.enforcer_base b/build/amd64/bci_v3/Dockerfile.enforcer_base deleted file mode 100755 index 1945276..0000000 --- a/build/amd64/bci_v3/Dockerfile.enforcer_base +++ /dev/null @@ -1,26 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates iproute2 ethtool lsof procps curl jq iptables grep tar awk tcpdump sed kmod wget unzip \ - libnetfilter_queue-devel liburcu-devel libpcap-devel pcre2-devel libjansson-devel libmnl-devel jemalloc-devel - -RUN zypper addrepo https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/isv:SUSE:neuvector.repo && \ - rpm --import https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/repodata/repomd.xml.key && \ - zypper -n refresh && \ - zypper --installroot /chroot install -y yq libhs5-vectorscan5 vectorscan-devel consul -RUN mv /chroot/usr/bin/consul /chroot/usr/local/bin/consul - -RUN zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY stage / - -RUN ln -s /usr/lib64/libpcap.so /usr/lib64/libpcap.so.0.8 - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/amd64/bci_v3/Dockerfile.manager_base b/build/amd64/bci_v3/Dockerfile.manager_base deleted file mode 100755 index 338ccc4..0000000 --- a/build/amd64/bci_v3/Dockerfile.manager_base +++ /dev/null @@ -1,30 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -ENV JAVA_VERSION=17.0.12_p8-r0\ - JAVA_HOME=/usr/lib/jvm/java-1.17-openjdk/jre \ - PATH=$PATH:/usr/lib/jvm/java-1.17-openjdk/jre/bin:/usr/lib/jvm/java-1.17-openjdk/bin \ - LANG=C.UTF-8 \ - PYTHONUNBUFFERED=1 - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - python312 python312-pip java-17-openjdk iproute2 lsof procps grep awk && \ - cp /etc/resolv.conf /chroot/etc/resolv.conf && \ - chroot /chroot /usr/bin/python3.12 -m pip install --upgrade pip setuptools && \ - rm /chroot/usr/lib/python3.12/site-packages/distutils-precedence.pth && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY --from=builder /usr/sbin/useradd /usr/sbin -COPY stage / - -RUN ln -s /usr/bin/python3.12 /usr/bin/python && \ - ln -s /usr/bin/python3.12 /usr/bin/python3 && \ - pip3 install --no-cache-dir -r /requirements.txt && \ - rm -r /root/.cache /requirements.txt -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/amd64/bci_v3/Dockerfile.scanner_base b/build/amd64/bci_v3/Dockerfile.scanner_base deleted file mode 100755 index 923b018..0000000 --- a/build/amd64/bci_v3/Dockerfile.scanner_base +++ /dev/null @@ -1,17 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates procps grep && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / - -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/amd64/bci_v3/Dockerfile.updater b/build/amd64/bci_v3/Dockerfile.updater deleted file mode 100755 index 05d4c1c..0000000 --- a/build/amd64/bci_v3/Dockerfile.updater +++ /dev/null @@ -1,21 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -LABEL neuvector.image="neuvector/updater" \ - neuvector.role="updater" - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates curl grep && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch - -ENTRYPOINT ["sleep", "30"] diff --git a/build/arm64/Dockerfile.build_fleet b/build/arm64/Dockerfile.build_fleet deleted file mode 100644 index 67a49b7..0000000 --- a/build/arm64/Dockerfile.build_fleet +++ /dev/null @@ -1,21 +0,0 @@ -FROM ubuntu:20.04 - -# Dockerfile to create container to build binaries - -ENV DEBIAN_FRONTEND=noninteractive - -RUN apt-get update && apt-get install -y build-essential autoconf libtool libpcap-dev libpcre++-dev bzr curl upx wget zip git - -RUN apt-get install -y debconf-utils software-properties-common && \ - apt-get install -y libnfnetlink-dev libnetfilter-queue-dev libmnl-dev && \ - apt-get install -y liburcu-dev libjansson-dev libjemalloc-dev libpcre2-dev - -# Fleet -ENV GOPATH=/go -ENV PATH=$PATH:/usr/local/go/bin:$GOPATH/bin - -RUN curl -o /tmp/golang.tar.gz -fL https://go.dev/dl/go1.14.15.linux-arm64.tar.gz -RUN tar -C /usr/local -xzf /tmp/golang.tar.gz && rm /tmp/golang.tar.gz && \ - mkdir -p $GOPATH/src/neuvector.com && mkdir -p $GOPATH/bin - -COPY build.sh / diff --git a/build/arm64/Dockerfile.build_fleet_v1 b/build/arm64/Dockerfile.build_fleet_v1 deleted file mode 100644 index 09ff0e4..0000000 --- a/build/arm64/Dockerfile.build_fleet_v1 +++ /dev/null @@ -1,21 +0,0 @@ -FROM ubuntu:20.04 - -# Dockerfile to create container to build binaries - -ENV DEBIAN_FRONTEND=noninteractive - -RUN apt-get update && apt-get install -y build-essential autoconf libtool libpcap-dev libpcre++-dev bzr curl upx wget zip git - -RUN apt-get install -y debconf-utils software-properties-common && \ - apt-get install -y libnfnetlink-dev libnetfilter-queue-dev libmnl-dev && \ - apt-get install -y liburcu-dev libjansson-dev libjemalloc-dev libpcre2-dev - -# Fleet -ENV GOPATH=/go -ENV PATH=$PATH:/usr/local/go/bin:$GOPATH/bin - -RUN curl -o /tmp/golang.tar.gz -fL https://go.dev/dl/go1.20.3.linux-arm64.tar.gz -RUN tar -C /usr/local -xzf /tmp/golang.tar.gz && rm /tmp/golang.tar.gz && \ - mkdir -p $GOPATH/src/neuvector.com && mkdir -p $GOPATH/bin - -COPY build.sh / diff --git a/build/arm64/Dockerfile.build_fleet_v2 b/build/arm64/Dockerfile.build_fleet_v2 deleted file mode 100644 index 8c2e75d..0000000 --- a/build/arm64/Dockerfile.build_fleet_v2 +++ /dev/null @@ -1,21 +0,0 @@ -FROM ubuntu:20.04 - -# Dockerfile to create container to build binaries - -ENV DEBIAN_FRONTEND=noninteractive - -RUN apt-get update && apt-get install -y build-essential autoconf libtool libpcap-dev libpcre++-dev bzr curl upx wget zip git - -RUN apt-get install -y debconf-utils software-properties-common && \ - apt-get install -y libnfnetlink-dev libnetfilter-queue-dev libmnl-dev && \ - apt-get install -y liburcu-dev libjansson-dev libjemalloc-dev libpcre2-dev - -# Fleet -ENV GOPATH=/go -ENV PATH=$PATH:/usr/local/go/bin:$GOPATH/bin - -RUN curl -o /tmp/golang.tar.gz -fL https://go.dev/dl/go1.22.7.linux-arm64.tar.gz -RUN tar -C /usr/local -xzf /tmp/golang.tar.gz && rm /tmp/golang.tar.gz && \ - mkdir -p $GOPATH/src/neuvector.com && mkdir -p $GOPATH/bin - -COPY build.sh / diff --git a/build/arm64/Dockerfile.build_fleet_v3 b/build/arm64/Dockerfile.build_fleet_v3 deleted file mode 100644 index f326717..0000000 --- a/build/arm64/Dockerfile.build_fleet_v3 +++ /dev/null @@ -1,29 +0,0 @@ -ARG GO_VERSION=1.24 -FROM registry.suse.com/bci/golang:${GO_VERSION} - -# Dockerfile to create container to build binaries - -RUN zypper ref && \ - zypper install -y --no-recommends gcc13 gcc13-c++ binutils-gold make glibc-devel glibc-devel-static \ - python312 automake autoconf libtool libpcap-devel pcre-devel pcre2-devel curl wget zip git \ - libnfnetlink-devel libnetfilter_queue-devel libmnl-devel liburcu-devel libjansson-devel jemalloc-devel && \ - update-alternatives --install /usr/bin/gcc gcc /usr/bin/gcc-13 10 && \ - update-alternatives --install /usr/bin/g++ g++ /usr/bin/g++-13 10 - -RUN zypper addrepo https://download.opensuse.org/repositories/devel:tools:compiler/15.6/devel:tools:compiler.repo && \ - zypper --non-interactive --gpg-auto-import-keys refresh && \ - zypper install -y clang17 llvm17 - -RUN zypper addrepo https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/isv:SUSE:neuvector.repo && \ - zypper --non-interactive --gpg-auto-import-keys refresh && \ - zypper install -y libhs5-vectorscan5 vectorscan-devel - -RUN ln -sf /usr/bin/python3.12 /usr/bin/python && \ - ln -sf /usr/bin/python3.12 /usr/bin/python3 - -# Fleet -ENV GOPATH=/go -ENV PATH=$PATH:/usr/local/go/bin:$GOPATH/bin -RUN mkdir -p $GOPATH/src/neuvector.com && mkdir -p $GOPATH/bin - -COPY build.sh / diff --git a/build/arm64/Dockerfile.build_manager b/build/arm64/Dockerfile.build_manager deleted file mode 100644 index d2cfdfa..0000000 --- a/build/arm64/Dockerfile.build_manager +++ /dev/null @@ -1,30 +0,0 @@ -FROM ubuntu:22.04 - -# Dockerfile to create container to build binaries - -RUN apt-get update || true - -# Manager -RUN apt-get install -y build-essential autoconf libtool wget curl zip git openjdk-17-jdk && \ - apt-get install apt-transport-https - -RUN curl -fL https://github.com/VirtusLab/coursier-m1/releases/latest/download/cs-aarch64-pc-linux.gz | gzip -d > cs && \ - chmod +x cs && \ - export PATH="$PATH:/root/.local/share/coursier/bin" && \ - ./cs install scala:3.3.4 sbt:1.10.2 --install-dir /usr/local/bin - -RUN curl -fsSL https://deb.nodesource.com/setup_16.x | bash - && \ - apt-get install -uy nodejs && \ - npm install -g @angular/cli@14 && \ - npm install -g npm-force-resolutions - -# Manager unitest -# RUN wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb && \ -# dpkg -i google-chrome-stable_current_amd64.deb; apt-get -fy install - -# Fix for sbt failure, an ubuntu issue -RUN sed -i 's/pkcs12/jks/g' /etc/java-17-openjdk/security/java.security && \ - dpkg --purge --force-depends ca-certificates-java && \ - apt-get install ca-certificates-java - -COPY build.sh / diff --git a/build/arm64/Dockerfile.build_manager_v3 b/build/arm64/Dockerfile.build_manager_v3 deleted file mode 100644 index 6c35f02..0000000 --- a/build/arm64/Dockerfile.build_manager_v3 +++ /dev/null @@ -1,24 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} - -# Dockerfile to create container to build binaries - -# Manager -RUN zypper refresh && \ - zypper install -y ca-certificates wget curl zip git awk java-17-openjdk-devel nodejs20 npm20 - -ARG CS_VERSION=v2.1.18 -RUN curl -fL https://github.com/VirtusLab/coursier-m1/releases/download/${CS_VERSION}/cs-aarch64-pc-linux.gz | gzip -d > cs && \ - chmod +x cs && \ - export PATH="$PATH:/root/.local/share/coursier/bin" && \ - ./cs install scala:3.3.4 sbt:1.10.2 --install-dir /usr/local/bin - -RUN npm install -g @angular/cli@20 && \ - npm install -g npm-force-resolutions - -# Manager unitest -RUN zypper addrepo http://download.opensuse.org/repositories/openSUSE:Leap:15.6/standard/ chromium-repo && \ - zypper --non-interactive --gpg-auto-import-keys refresh && \ - zypper install -y chromium - -COPY build.sh / diff --git a/build/arm64/v2/Dockerfile.adapter_base b/build/arm64/v2/Dockerfile.adapter_base deleted file mode 100644 index 67a20a4..0000000 --- a/build/arm64/v2/Dockerfile.adapter_base +++ /dev/null @@ -1,17 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / - -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/arm64/v2/Dockerfile.all_base b/build/arm64/v2/Dockerfile.all_base deleted file mode 100644 index bc497cb..0000000 --- a/build/arm64/v2/Dockerfile.all_base +++ /dev/null @@ -1,52 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -ENV JAVA_VERSION=17.0.12_p8-r0 \ - JAVA_HOME=/usr/lib/jvm/java-1.17-openjdk/jre \ - PATH=$PATH:/usr/lib/jvm/java-1.17-openjdk/jre/bin:/usr/lib/jvm/java-1.17-openjdk/bin \ - LANG=C.UTF-8 \ - PYTHONUNBUFFERED=1 - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - java-17-openjdk python312 python312-pip \ - ca-certificates iproute2 ethtool lsof procps curl jq iptables grep tar awk tcpdump sed kmod wget unzip \ - libnetfilter_queue-devel liburcu-devel libpcap-devel pcre2-devel libjansson-devel libmnl-devel jemalloc-devel - -# Install yq -RUN zypper addrepo https://download.opensuse.org/repositories/utilities/openSUSE_Factory_ARM/utilities.repo && \ - zypper --installroot /chroot -n --gpg-auto-import-keys refresh && \ - zypper --installroot /chroot install -y yq - -RUN cp /etc/resolv.conf /chroot/etc/resolv.conf && \ - chroot /chroot /usr/bin/python3.12 -m pip install --upgrade pip setuptools && \ - rm /chroot/usr/lib/python3.12/site-packages/distutils-precedence.pth && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY --from=builder /usr/sbin/useradd /usr/sbin -COPY stage / - -ARG CONSUL_VERSION=1.11.11 -ARG OPA_VERSION=v0.68.0 - -RUN ln -s /usr/bin/python3.12 /usr/bin/python && \ - ln -s /usr/bin/python3.12 /usr/bin/python3 && \ - pip3 install --no-cache-dir -r /requirements.txt && \ - ln -s /usr/local/bin/supervisord /usr/bin/supervisord && \ - rm -r /root/.cache /requirements.txt - -RUN wget https://releases.hashicorp.com/consul/${CONSUL_VERSION}/consul_${CONSUL_VERSION}_linux_arm64.zip && \ - unzip consul_${CONSUL_VERSION}_linux_arm64.zip -d /usr/local/bin/ && \ - chmod +x /usr/local/bin/consul && \ - curl -L -o /usr/local/bin/opa https://openpolicyagent.org/downloads/${OPA_VERSION}/opa_linux_arm64_static && \ - chmod +x /usr/local/bin/opa - -RUN ln -s /usr/lib64/libpcap.so /usr/lib64/libpcap.so.0.8 && \ - ln -s /usr/lib64/libpcre.so.1 /usr/lib64/libpcre.so.3 - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/arm64/v2/Dockerfile.controller_base b/build/arm64/v2/Dockerfile.controller_base deleted file mode 100644 index 033eb08..0000000 --- a/build/arm64/v2/Dockerfile.controller_base +++ /dev/null @@ -1,26 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates pcre2-devel iproute2 ethtool lsof procps curl jq iptables grep tar awk wget unzip && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY stage / - -ARG CONSUL_VERSION=1.11.11 -ARG OPA_VERSION=v0.68.0 - -RUN wget https://releases.hashicorp.com/consul/${CONSUL_VERSION}/consul_${CONSUL_VERSION}_linux_arm64.zip && \ - unzip consul_${CONSUL_VERSION}_linux_arm64.zip -d /usr/local/bin/ && \ - chmod +x /usr/local/bin/consul && \ - curl -L -o /usr/local/bin/opa https://openpolicyagent.org/downloads/${OPA_VERSION}/opa_linux_arm64_static && \ - chmod +x /usr/local/bin/opa -RUN ln -s /usr/lib64/libpcre.so.1 /usr/lib64/libpcre.so.3 - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/arm64/v2/Dockerfile.enforcer_base b/build/arm64/v2/Dockerfile.enforcer_base deleted file mode 100644 index 1b3fe3d..0000000 --- a/build/arm64/v2/Dockerfile.enforcer_base +++ /dev/null @@ -1,31 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates iproute2 ethtool lsof procps curl jq iptables grep tar awk tcpdump sed kmod wget unzip \ - libnetfilter_queue-devel liburcu-devel libpcap-devel pcre2-devel libjansson-devel libmnl-devel jemalloc-devel - -# Install yq -RUN zypper addrepo https://download.opensuse.org/repositories/utilities/openSUSE_Factory_ARM/utilities.repo && \ - zypper --installroot /chroot -n --gpg-auto-import-keys refresh && \ - zypper --installroot /chroot install -y yq - -RUN zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY stage / - -ARG CONSUL_VERSION=1.11.11 - -RUN wget https://releases.hashicorp.com/consul/${CONSUL_VERSION}/consul_${CONSUL_VERSION}_linux_arm64.zip && \ - unzip consul_${CONSUL_VERSION}_linux_arm64.zip -d /usr/local/bin/ && \ - chmod +x /usr/local/bin/consul - -RUN ln -s /usr/lib64/libpcap.so /usr/lib64/libpcap.so.0.8 - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/arm64/v2/Dockerfile.manager_base b/build/arm64/v2/Dockerfile.manager_base deleted file mode 100644 index 383f7a7..0000000 --- a/build/arm64/v2/Dockerfile.manager_base +++ /dev/null @@ -1,30 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -ENV JAVA_VERSION=17.0.12_p8-r0 \ - JAVA_HOME=/usr/lib/jvm/java-1.17-openjdk/jre \ - PATH=$PATH:/usr/lib/jvm/java-1.17-openjdk/jre/bin:/usr/lib/jvm/java-1.17-openjdk/bin \ - LANG=C.UTF-8 \ - PYTHONUNBUFFERED=1 - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - python312 python312-pip java-17-openjdk iproute2 lsof procps grep awk && \ - cp /etc/resolv.conf /chroot/etc/resolv.conf && \ - chroot /chroot /usr/bin/python3.12 -m pip install --upgrade pip setuptools && \ - rm /chroot/usr/lib/python3.12/site-packages/distutils-precedence.pth && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY --from=builder /usr/sbin/useradd /usr/sbin -COPY stage / - -RUN ln -s /usr/bin/python3.12 /usr/bin/python && \ - ln -s /usr/bin/python3.12 /usr/bin/python3 && \ - pip3 install --no-cache-dir -r /requirements.txt && \ - rm -r /root/.cache /requirements.txt -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/arm64/v2/Dockerfile.scanner_base b/build/arm64/v2/Dockerfile.scanner_base deleted file mode 100644 index 923b018..0000000 --- a/build/arm64/v2/Dockerfile.scanner_base +++ /dev/null @@ -1,17 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates procps grep && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / - -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/arm64/v2/Dockerfile.updater b/build/arm64/v2/Dockerfile.updater deleted file mode 100644 index 05d4c1c..0000000 --- a/build/arm64/v2/Dockerfile.updater +++ /dev/null @@ -1,21 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -LABEL neuvector.image="neuvector/updater" \ - neuvector.role="updater" - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates curl grep && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch - -ENTRYPOINT ["sleep", "30"] diff --git a/build/arm64/v3/Dockerfile.adapter_base b/build/arm64/v3/Dockerfile.adapter_base deleted file mode 100644 index 67a20a4..0000000 --- a/build/arm64/v3/Dockerfile.adapter_base +++ /dev/null @@ -1,17 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / - -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/arm64/v3/Dockerfile.all_base b/build/arm64/v3/Dockerfile.all_base deleted file mode 100644 index eb0f715..0000000 --- a/build/arm64/v3/Dockerfile.all_base +++ /dev/null @@ -1,49 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -ENV JAVA_VERSION=17.0.12_p8-r0 \ - JAVA_HOME=/usr/lib/jvm/java-1.17-openjdk/jre \ - PATH=$PATH:/usr/lib/jvm/java-1.17-openjdk/jre/bin:/usr/lib/jvm/java-1.17-openjdk/bin \ - LANG=C.UTF-8 \ - PYTHONUNBUFFERED=1 - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - java-17-openjdk python312 python312-pip \ - ca-certificates iproute2 ethtool lsof procps curl jq iptables grep tar awk tcpdump sed kmod wget unzip \ - libnetfilter_queue-devel liburcu-devel libpcap-devel pcre2-devel libjansson-devel libmnl-devel jemalloc-devel - -RUN zypper addrepo https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/isv:SUSE:neuvector.repo && \ - rpm --import https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/repodata/repomd.xml.key && \ - zypper -n refresh && \ - zypper --installroot /chroot install -y yq libhs5-vectorscan5 vectorscan-devel consul -RUN mv /chroot/usr/bin/consul /chroot/usr/local/bin/consul - -RUN cp /etc/resolv.conf /chroot/etc/resolv.conf && \ - chroot /chroot /usr/bin/python3.12 -m pip install --upgrade pip setuptools && \ - rm /chroot/usr/lib/python3.12/site-packages/distutils-precedence.pth && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY --from=builder /usr/sbin/useradd /usr/sbin -COPY stage / - -ARG OPA_VERSION=v1.4.2 - -RUN ln -s /usr/bin/python3.12 /usr/bin/python && \ - ln -s /usr/bin/python3.12 /usr/bin/python3 && \ - pip3 install --no-cache-dir -r /requirements.txt && \ - ln -s /usr/local/bin/supervisord /usr/bin/supervisord && \ - rm -r /root/.cache /requirements.txt - -RUN curl -fL -o /usr/local/bin/opa https://github.com/open-policy-agent/opa/releases/download/${OPA_VERSION}/opa_linux_arm64_static && \ - chmod +x /usr/local/bin/opa - -RUN ln -s /usr/lib64/libpcap.so /usr/lib64/libpcap.so.0.8 && \ - ln -s /usr/lib64/libpcre.so.1 /usr/lib64/libpcre.so.3 - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/arm64/v3/Dockerfile.controller_base b/build/arm64/v3/Dockerfile.controller_base deleted file mode 100644 index 763b485..0000000 --- a/build/arm64/v3/Dockerfile.controller_base +++ /dev/null @@ -1,28 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates pcre2-devel iproute2 ethtool lsof procps curl jq iptables grep tar awk wget unzip && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -RUN zypper addrepo https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/isv:SUSE:neuvector.repo && \ - rpm --import https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/repodata/repomd.xml.key && \ - zypper -n refresh && \ - zypper --installroot /chroot install -y consul -RUN mv /chroot/usr/bin/consul /chroot/usr/local/bin/consul - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY stage / - -ARG OPA_VERSION=v1.4.2 - -RUN curl -L -o /usr/local/bin/opa https://github.com/open-policy-agent/opa/releases/download/${OPA_VERSION}/opa_linux_arm64_static && \ - chmod +x /usr/local/bin/opa -RUN ln -s /usr/lib64/libpcre.so.1 /usr/lib64/libpcre.so.3 - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/arm64/v3/Dockerfile.enforcer_base b/build/arm64/v3/Dockerfile.enforcer_base deleted file mode 100644 index 1945276..0000000 --- a/build/arm64/v3/Dockerfile.enforcer_base +++ /dev/null @@ -1,26 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates iproute2 ethtool lsof procps curl jq iptables grep tar awk tcpdump sed kmod wget unzip \ - libnetfilter_queue-devel liburcu-devel libpcap-devel pcre2-devel libjansson-devel libmnl-devel jemalloc-devel - -RUN zypper addrepo https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/isv:SUSE:neuvector.repo && \ - rpm --import https://download.opensuse.org/repositories/isv:SUSE:neuvector/15.6/repodata/repomd.xml.key && \ - zypper -n refresh && \ - zypper --installroot /chroot install -y yq libhs5-vectorscan5 vectorscan-devel consul -RUN mv /chroot/usr/bin/consul /chroot/usr/local/bin/consul - -RUN zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY stage / - -RUN ln -s /usr/lib64/libpcap.so /usr/lib64/libpcap.so.0.8 - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/arm64/v3/Dockerfile.manager_base b/build/arm64/v3/Dockerfile.manager_base deleted file mode 100644 index 383f7a7..0000000 --- a/build/arm64/v3/Dockerfile.manager_base +++ /dev/null @@ -1,30 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -ENV JAVA_VERSION=17.0.12_p8-r0 \ - JAVA_HOME=/usr/lib/jvm/java-1.17-openjdk/jre \ - PATH=$PATH:/usr/lib/jvm/java-1.17-openjdk/jre/bin:/usr/lib/jvm/java-1.17-openjdk/bin \ - LANG=C.UTF-8 \ - PYTHONUNBUFFERED=1 - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - python312 python312-pip java-17-openjdk iproute2 lsof procps grep awk && \ - cp /etc/resolv.conf /chroot/etc/resolv.conf && \ - chroot /chroot /usr/bin/python3.12 -m pip install --upgrade pip setuptools && \ - rm /chroot/usr/lib/python3.12/site-packages/distutils-precedence.pth && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY --from=builder /usr/sbin/useradd /usr/sbin -COPY stage / - -RUN ln -s /usr/bin/python3.12 /usr/bin/python && \ - ln -s /usr/bin/python3.12 /usr/bin/python3 && \ - pip3 install --no-cache-dir -r /requirements.txt && \ - rm -r /root/.cache /requirements.txt -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/arm64/v3/Dockerfile.scanner_base b/build/arm64/v3/Dockerfile.scanner_base deleted file mode 100644 index 923b018..0000000 --- a/build/arm64/v3/Dockerfile.scanner_base +++ /dev/null @@ -1,17 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates procps grep && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / - -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch diff --git a/build/arm64/v3/Dockerfile.updater b/build/arm64/v3/Dockerfile.updater deleted file mode 100644 index 05d4c1c..0000000 --- a/build/arm64/v3/Dockerfile.updater +++ /dev/null @@ -1,21 +0,0 @@ -ARG BCI_VERSION=15.6 -FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS micro -FROM registry.suse.com/bci/bci-base:${BCI_VERSION} AS builder - -LABEL neuvector.image="neuvector/updater" \ - neuvector.role="updater" - -COPY --from=micro / /chroot/ -RUN zypper --installroot /chroot -n --gpg-auto-import-keys in --no-recommends \ - ca-certificates curl grep && \ - zypper --installroot /chroot clean -a && \ - rm -rf /chroot/var/log/ - -FROM micro -WORKDIR / -COPY --from=builder /chroot/ / -COPY stage / - -RUN cd /usr/bin/ && rm -rf basename chcon chgrp chmod chown chroot cksum dd df dircolors dirname du install install-info join locale localedef mkdir mkfifo mknod mktemp paste pathchk readlink realpath sync smidiff smidump smilink smiquery smistrip smixlate tee tiemout tload top truncate unlink watch - -ENTRYPOINT ["sleep", "30"]