Compare commits

..

No commits in common. "main" and "2025-07-01-1" have entirely different histories.

4 changed files with 8 additions and 59 deletions

View File

@ -1,9 +1,7 @@
ARG STEPVER="0.28.2" ARG STEPVER="0.28.2"
ARG STEPCAVER="0.28.4"
FROM docker.io/library/almalinux:9 AS rpm-builder FROM docker.io/library/almalinux:9 AS rpm-builder
ARG STEPVER ARG STEPVER
ARG STEPCAVER
WORKDIR /tmp WORKDIR /tmp
@ -51,12 +49,10 @@ RUN --mount=type=secret,id=gpg \
RUN \ RUN \
dnf localinstall -y https://github.com/smallstep/cli/releases/download/v${STEPVER}/step-cli-${STEPVER}-1.$(uname -i).rpm && \ dnf localinstall -y https://github.com/smallstep/cli/releases/download/v${STEPVER}/step-cli-${STEPVER}-1.$(uname -i).rpm && \
dnf localinstall -y https://github.com/smallstep/certificates/releases/download/v${STEPCAVER}/step-ca-${STEPCAVER}-1.$(uname -i).rpm && \
dnf localinstall -y /root/rpmbuild/RPMS/*/*.rpm dnf localinstall -y /root/rpmbuild/RPMS/*/*.rpm
FROM docker.io/library/ubuntu:latest AS deb-builder FROM docker.io/library/ubuntu:latest AS deb-builder
ARG STEPVER ARG STEPVER
ARG STEPCAVER
COPY --from=rpm-builder /root/rpmbuild/RPMS /root/rpmbuild/RPMS COPY --from=rpm-builder /root/rpmbuild/RPMS /root/rpmbuild/RPMS
@ -73,9 +69,7 @@ RUN \
RUN \ RUN \
curl -L -o step-cli.deb https://github.com/smallstep/cli/releases/download/v${STEPVER}/step-cli_${STEPVER}-1_$(dpkg --print-architecture).deb && \ curl -L -o step-cli.deb https://github.com/smallstep/cli/releases/download/v${STEPVER}/step-cli_${STEPVER}-1_$(dpkg --print-architecture).deb && \
curl -L -o step-ca.deb https://github.com/smallstep/certificates/releases/download/v${STEPCAVER}/step-ca_${STEPCAVER}-1_$(dpkg --print-architecture).deb && \
apt-get install -y ./step-cli.deb && \ apt-get install -y ./step-cli.deb && \
apt-get install -y ./step-ca.deb && \
apt-get install -y /root/debbuild/*/*.deb apt-get install -y /root/debbuild/*/*.deb
FROM docker.io/library/nginx:latest FROM docker.io/library/nginx:latest

View File

@ -1,8 +1,10 @@
FROM docker.io/library/almalinux:9 AS rpm-builder9 FROM docker.io/library/almalinux:9 AS rpm-builder
WORKDIR /tmp WORKDIR /tmp
COPY RPMS /tmp/packages/RPMS COPY RPMS /tmp/packages/RPMS
COPY DEBS /tmp/packages/DEBS COPY DEBS /tmp/packages/DEBS
RUN \ RUN \
dnf install -y createrepo_c && \ dnf install -y createrepo_c && \
mkdir -p /tmp/packages/RPMS/x86_64/el9 && \ mkdir -p /tmp/packages/RPMS/x86_64/el9 && \
@ -12,35 +14,7 @@ RUN \
cd /tmp/packages/RPMS/aarch64 && \ cd /tmp/packages/RPMS/aarch64 && \
createrepo -u https://spiffe.github.io/spire-examples/RPMS/aarch64 -o el9/ . createrepo -u https://spiffe.github.io/spire-examples/RPMS/aarch64 -o el9/ .
FROM docker.io/library/almalinux:10 AS rpm-builder10
WORKDIR /tmp
COPY RPMS /tmp/packages/RPMS
RUN \
dnf install -y createrepo_c && \
mkdir -p /tmp/packages/RPMS/x86_64/el10 && \
mkdir -p /tmp/packages/RPMS/aarch64/el10 && \
cd /tmp/packages/RPMS/x86_64 && \
createrepo -u https://spiffe.github.io/spire-examples/RPMS/x86_64 -o el10/ . && \
cd /tmp/packages/RPMS/aarch64 && \
createrepo -u https://spiffe.github.io/spire-examples/RPMS/aarch64 -o el10/ .
FROM docker.io/library/almalinux:8 AS rpm-builder8
WORKDIR /tmp
COPY RPMS /tmp/packages/RPMS
RUN \
dnf install -y createrepo_c && \
mkdir -p /tmp/packages/RPMS/x86_64/el8 && \
mkdir -p /tmp/packages/RPMS/aarch64/el8 && \
cd /tmp/packages/RPMS/x86_64 && \
createrepo -u https://spiffe.github.io/spire-examples/RPMS/x86_64 -o el8/ . && \
cd /tmp/packages/RPMS/aarch64 && \
createrepo -u https://spiffe.github.io/spire-examples/RPMS/aarch64 -o el8/ .
FROM docker.io/library/nginx:latest FROM docker.io/library/nginx:latest
RUN rm -rf /usr/share/nginx/html/* RUN rm -rf /usr/share/nginx/html/*
COPY --from=rpm-builder9 /tmp/packages/RPMS /usr/share/nginx/html/RPMS COPY --from=rpm-builder /tmp/packages/RPMS /usr/share/nginx/html/RPMS
COPY --from=rpm-builder9 /tmp/packages/DEBS /usr/share/nginx/html/DEBS COPY --from=rpm-builder /tmp/packages/DEBS /usr/share/nginx/html/DEBS
COPY --from=rpm-builder10 /tmp/packages/RPMS/x86_64/el10 /usr/share/nginx/html/RPMS/x86_64/el10
COPY --from=rpm-builder10 /tmp/packages/RPMS/aarch64/el10 /usr/share/nginx/html/RPMS/aarch64/el10
COPY --from=rpm-builder8 /tmp/packages/RPMS/x86_64/el8 /usr/share/nginx/html/RPMS/x86_64/el8
COPY --from=rpm-builder8 /tmp/packages/RPMS/aarch64/el8 /usr/share/nginx/html/RPMS/aarch64/el8

View File

@ -21,7 +21,7 @@
Summary: AWS SPIFFE Workload Helper Summary: AWS SPIFFE Workload Helper
Name: aws-spiffe-workload-helper Name: aws-spiffe-workload-helper
Version: 0.0.4 Version: 0.0.3
Release: 1 Release: 1
Group: Applications/Internet Group: Applications/Internet
License: Apache-2.0 License: Apache-2.0

View File

@ -21,8 +21,8 @@
Summary: SPIFFE Step SSH Summary: SPIFFE Step SSH
Name: spiffe-step-ssh Name: spiffe-step-ssh
Version: 0.0.9 Version: 0.0.6
Release: 1 Release: 2
Group: Applications/Internet Group: Applications/Internet
License: Apache-2.0 License: Apache-2.0
URL: https://spiffe.io URL: https://spiffe.io
@ -35,13 +35,6 @@ Requires: spiffe-helper
%description %description
SPIFFE Step SSH SPIFFE Step SSH
%package -n spiffe-step-ssh-server
Summary: SPIFFE Step SSH Server
Requires: step-ca
Requires: spiffe-helper
%description -n spiffe-step-ssh-server
SPIFFE Step SSH Server
%global _missing_build_ids_terminate_build 0 %global _missing_build_ids_terminate_build 0
%global debug_package %{nil} %global debug_package %{nil}
@ -54,7 +47,6 @@ SPIFFE Step SSH Server
%install %install
cd spiffe-step-ssh-%{version} cd spiffe-step-ssh-%{version}
make install DESTDIR="%{buildroot}" make install DESTDIR="%{buildroot}"
make install-server DESTDIR="%{buildroot}"
%clean %clean
rm -rf %{buildroot} rm -rf %{buildroot}
@ -65,14 +57,3 @@ rm -rf %{buildroot}
/usr/lib/systemd/system/spiffe-step-ssh@.service /usr/lib/systemd/system/spiffe-step-ssh@.service
/usr/lib/systemd/system/spiffe-step-ssh-cleanup.service /usr/lib/systemd/system/spiffe-step-ssh-cleanup.service
%config(noreplace) /etc/spiffe/step-ssh %config(noreplace) /etc/spiffe/step-ssh
%files -n spiffe-step-ssh-server
/usr/lib/systemd/system/spiffe-step-ssh-server@.service
/usr/lib/systemd/system/spiffe-step-ssh-fetchca@.service
/usr/libexec/spiffe/step-ssh-server/main
/usr/libexec/spiffe/step-ssh-server/ssh_x5c.tpl
/usr/libexec/spiffe/step-ssh-server/nginx-fetchca.conf
/usr/libexec/spiffe/step-ssh-server/helper-fetchca.conf
/usr/sbin/setup-spiffe-step-ssh-server
/usr/sbin/spiffe-step-ssh-get-cert-authority
%config(noreplace) /etc/spiffe/step-ssh-server