mirror of https://github.com/istio/proxy.git
38 lines
1.2 KiB
Docker
38 lines
1.2 KiB
Docker
FROM ubuntu:xenial
|
|
# Do not add more stuff to this list that isn't small or critically useful.
|
|
# If you occasionally need something on the container do
|
|
# sudo /usr/local/bin/proxy-redirection-clear
|
|
# sudo apt-get update && apt-get whichever
|
|
# sudo /usr/local/bin/proxy-redirection-restore
|
|
RUN apt-get update && \
|
|
apt-get install --no-install-recommends -y \
|
|
curl \
|
|
iptables \
|
|
iproute2 \
|
|
iputils-ping \
|
|
dnsutils \
|
|
netcat \
|
|
tcpdump \
|
|
net-tools \
|
|
libc6-dbg gdb \
|
|
elvis-tiny \
|
|
lsof \
|
|
busybox \
|
|
sudo && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Deprecated: use "/usr/local/bin/istio-iptables.sh clear"
|
|
ADD proxy-redirection-clear /usr/local/bin/proxy-redirection-clear
|
|
ADD proxy-redirection-restore /usr/local/bin/proxy-redirection-restore
|
|
ADD istio-iptables.sh /usr/local/bin/istio-iptables.sh
|
|
ADD istio-start.sh /usr/local/bin/istio-start.sh
|
|
ADD envoy.json /var/lib/istio/envoy/envoy.json
|
|
ADD envoy /usr/local/bin/envoy
|
|
|
|
# Sudoers used to allow tcpdump and other debug utilities.
|
|
RUN useradd -m --uid 1337 istio-proxy && \
|
|
echo "istio-proxy ALL=NOPASSWD: ALL" >> /etc/sudoers && \
|
|
chown -R istio-proxy /var/lib/istio
|
|
|
|
ENTRYPOINT /usr/local/bin/istio-start.sh
|