Compare commits
No commits in common. "main" and "2025-07-01-1" have entirely different histories.
main
...
2025-07-01
|
@ -1,9 +1,7 @@
|
||||||
ARG STEPVER="0.28.2"
|
ARG STEPVER="0.28.2"
|
||||||
ARG STEPCAVER="0.28.4"
|
|
||||||
|
|
||||||
FROM docker.io/library/almalinux:9 AS rpm-builder
|
FROM docker.io/library/almalinux:9 AS rpm-builder
|
||||||
ARG STEPVER
|
ARG STEPVER
|
||||||
ARG STEPCAVER
|
|
||||||
|
|
||||||
WORKDIR /tmp
|
WORKDIR /tmp
|
||||||
|
|
||||||
|
@ -51,12 +49,10 @@ RUN --mount=type=secret,id=gpg \
|
||||||
|
|
||||||
RUN \
|
RUN \
|
||||||
dnf localinstall -y https://github.com/smallstep/cli/releases/download/v${STEPVER}/step-cli-${STEPVER}-1.$(uname -i).rpm && \
|
dnf localinstall -y https://github.com/smallstep/cli/releases/download/v${STEPVER}/step-cli-${STEPVER}-1.$(uname -i).rpm && \
|
||||||
dnf localinstall -y https://github.com/smallstep/certificates/releases/download/v${STEPCAVER}/step-ca-${STEPCAVER}-1.$(uname -i).rpm && \
|
|
||||||
dnf localinstall -y /root/rpmbuild/RPMS/*/*.rpm
|
dnf localinstall -y /root/rpmbuild/RPMS/*/*.rpm
|
||||||
|
|
||||||
FROM docker.io/library/ubuntu:latest AS deb-builder
|
FROM docker.io/library/ubuntu:latest AS deb-builder
|
||||||
ARG STEPVER
|
ARG STEPVER
|
||||||
ARG STEPCAVER
|
|
||||||
|
|
||||||
COPY --from=rpm-builder /root/rpmbuild/RPMS /root/rpmbuild/RPMS
|
COPY --from=rpm-builder /root/rpmbuild/RPMS /root/rpmbuild/RPMS
|
||||||
|
|
||||||
|
@ -73,9 +69,7 @@ RUN \
|
||||||
|
|
||||||
RUN \
|
RUN \
|
||||||
curl -L -o step-cli.deb https://github.com/smallstep/cli/releases/download/v${STEPVER}/step-cli_${STEPVER}-1_$(dpkg --print-architecture).deb && \
|
curl -L -o step-cli.deb https://github.com/smallstep/cli/releases/download/v${STEPVER}/step-cli_${STEPVER}-1_$(dpkg --print-architecture).deb && \
|
||||||
curl -L -o step-ca.deb https://github.com/smallstep/certificates/releases/download/v${STEPCAVER}/step-ca_${STEPCAVER}-1_$(dpkg --print-architecture).deb && \
|
|
||||||
apt-get install -y ./step-cli.deb && \
|
apt-get install -y ./step-cli.deb && \
|
||||||
apt-get install -y ./step-ca.deb && \
|
|
||||||
apt-get install -y /root/debbuild/*/*.deb
|
apt-get install -y /root/debbuild/*/*.deb
|
||||||
|
|
||||||
FROM docker.io/library/nginx:latest
|
FROM docker.io/library/nginx:latest
|
||||||
|
|
|
@ -1,8 +1,10 @@
|
||||||
FROM docker.io/library/almalinux:9 AS rpm-builder9
|
FROM docker.io/library/almalinux:9 AS rpm-builder
|
||||||
|
|
||||||
WORKDIR /tmp
|
WORKDIR /tmp
|
||||||
|
|
||||||
COPY RPMS /tmp/packages/RPMS
|
COPY RPMS /tmp/packages/RPMS
|
||||||
COPY DEBS /tmp/packages/DEBS
|
COPY DEBS /tmp/packages/DEBS
|
||||||
|
|
||||||
RUN \
|
RUN \
|
||||||
dnf install -y createrepo_c && \
|
dnf install -y createrepo_c && \
|
||||||
mkdir -p /tmp/packages/RPMS/x86_64/el9 && \
|
mkdir -p /tmp/packages/RPMS/x86_64/el9 && \
|
||||||
|
@ -12,35 +14,7 @@ RUN \
|
||||||
cd /tmp/packages/RPMS/aarch64 && \
|
cd /tmp/packages/RPMS/aarch64 && \
|
||||||
createrepo -u https://spiffe.github.io/spire-examples/RPMS/aarch64 -o el9/ .
|
createrepo -u https://spiffe.github.io/spire-examples/RPMS/aarch64 -o el9/ .
|
||||||
|
|
||||||
FROM docker.io/library/almalinux:10 AS rpm-builder10
|
|
||||||
WORKDIR /tmp
|
|
||||||
COPY RPMS /tmp/packages/RPMS
|
|
||||||
RUN \
|
|
||||||
dnf install -y createrepo_c && \
|
|
||||||
mkdir -p /tmp/packages/RPMS/x86_64/el10 && \
|
|
||||||
mkdir -p /tmp/packages/RPMS/aarch64/el10 && \
|
|
||||||
cd /tmp/packages/RPMS/x86_64 && \
|
|
||||||
createrepo -u https://spiffe.github.io/spire-examples/RPMS/x86_64 -o el10/ . && \
|
|
||||||
cd /tmp/packages/RPMS/aarch64 && \
|
|
||||||
createrepo -u https://spiffe.github.io/spire-examples/RPMS/aarch64 -o el10/ .
|
|
||||||
|
|
||||||
FROM docker.io/library/almalinux:8 AS rpm-builder8
|
|
||||||
WORKDIR /tmp
|
|
||||||
COPY RPMS /tmp/packages/RPMS
|
|
||||||
RUN \
|
|
||||||
dnf install -y createrepo_c && \
|
|
||||||
mkdir -p /tmp/packages/RPMS/x86_64/el8 && \
|
|
||||||
mkdir -p /tmp/packages/RPMS/aarch64/el8 && \
|
|
||||||
cd /tmp/packages/RPMS/x86_64 && \
|
|
||||||
createrepo -u https://spiffe.github.io/spire-examples/RPMS/x86_64 -o el8/ . && \
|
|
||||||
cd /tmp/packages/RPMS/aarch64 && \
|
|
||||||
createrepo -u https://spiffe.github.io/spire-examples/RPMS/aarch64 -o el8/ .
|
|
||||||
|
|
||||||
FROM docker.io/library/nginx:latest
|
FROM docker.io/library/nginx:latest
|
||||||
RUN rm -rf /usr/share/nginx/html/*
|
RUN rm -rf /usr/share/nginx/html/*
|
||||||
COPY --from=rpm-builder9 /tmp/packages/RPMS /usr/share/nginx/html/RPMS
|
COPY --from=rpm-builder /tmp/packages/RPMS /usr/share/nginx/html/RPMS
|
||||||
COPY --from=rpm-builder9 /tmp/packages/DEBS /usr/share/nginx/html/DEBS
|
COPY --from=rpm-builder /tmp/packages/DEBS /usr/share/nginx/html/DEBS
|
||||||
COPY --from=rpm-builder10 /tmp/packages/RPMS/x86_64/el10 /usr/share/nginx/html/RPMS/x86_64/el10
|
|
||||||
COPY --from=rpm-builder10 /tmp/packages/RPMS/aarch64/el10 /usr/share/nginx/html/RPMS/aarch64/el10
|
|
||||||
COPY --from=rpm-builder8 /tmp/packages/RPMS/x86_64/el8 /usr/share/nginx/html/RPMS/x86_64/el8
|
|
||||||
COPY --from=rpm-builder8 /tmp/packages/RPMS/aarch64/el8 /usr/share/nginx/html/RPMS/aarch64/el8
|
|
||||||
|
|
|
@ -21,7 +21,7 @@
|
||||||
|
|
||||||
Summary: AWS SPIFFE Workload Helper
|
Summary: AWS SPIFFE Workload Helper
|
||||||
Name: aws-spiffe-workload-helper
|
Name: aws-spiffe-workload-helper
|
||||||
Version: 0.0.4
|
Version: 0.0.3
|
||||||
Release: 1
|
Release: 1
|
||||||
Group: Applications/Internet
|
Group: Applications/Internet
|
||||||
License: Apache-2.0
|
License: Apache-2.0
|
||||||
|
|
|
@ -21,8 +21,8 @@
|
||||||
|
|
||||||
Summary: SPIFFE Step SSH
|
Summary: SPIFFE Step SSH
|
||||||
Name: spiffe-step-ssh
|
Name: spiffe-step-ssh
|
||||||
Version: 0.0.9
|
Version: 0.0.6
|
||||||
Release: 1
|
Release: 2
|
||||||
Group: Applications/Internet
|
Group: Applications/Internet
|
||||||
License: Apache-2.0
|
License: Apache-2.0
|
||||||
URL: https://spiffe.io
|
URL: https://spiffe.io
|
||||||
|
@ -35,13 +35,6 @@ Requires: spiffe-helper
|
||||||
%description
|
%description
|
||||||
SPIFFE Step SSH
|
SPIFFE Step SSH
|
||||||
|
|
||||||
%package -n spiffe-step-ssh-server
|
|
||||||
Summary: SPIFFE Step SSH Server
|
|
||||||
Requires: step-ca
|
|
||||||
Requires: spiffe-helper
|
|
||||||
%description -n spiffe-step-ssh-server
|
|
||||||
SPIFFE Step SSH Server
|
|
||||||
|
|
||||||
%global _missing_build_ids_terminate_build 0
|
%global _missing_build_ids_terminate_build 0
|
||||||
%global debug_package %{nil}
|
%global debug_package %{nil}
|
||||||
|
|
||||||
|
@ -54,7 +47,6 @@ SPIFFE Step SSH Server
|
||||||
%install
|
%install
|
||||||
cd spiffe-step-ssh-%{version}
|
cd spiffe-step-ssh-%{version}
|
||||||
make install DESTDIR="%{buildroot}"
|
make install DESTDIR="%{buildroot}"
|
||||||
make install-server DESTDIR="%{buildroot}"
|
|
||||||
|
|
||||||
%clean
|
%clean
|
||||||
rm -rf %{buildroot}
|
rm -rf %{buildroot}
|
||||||
|
@ -65,14 +57,3 @@ rm -rf %{buildroot}
|
||||||
/usr/lib/systemd/system/spiffe-step-ssh@.service
|
/usr/lib/systemd/system/spiffe-step-ssh@.service
|
||||||
/usr/lib/systemd/system/spiffe-step-ssh-cleanup.service
|
/usr/lib/systemd/system/spiffe-step-ssh-cleanup.service
|
||||||
%config(noreplace) /etc/spiffe/step-ssh
|
%config(noreplace) /etc/spiffe/step-ssh
|
||||||
|
|
||||||
%files -n spiffe-step-ssh-server
|
|
||||||
/usr/lib/systemd/system/spiffe-step-ssh-server@.service
|
|
||||||
/usr/lib/systemd/system/spiffe-step-ssh-fetchca@.service
|
|
||||||
/usr/libexec/spiffe/step-ssh-server/main
|
|
||||||
/usr/libexec/spiffe/step-ssh-server/ssh_x5c.tpl
|
|
||||||
/usr/libexec/spiffe/step-ssh-server/nginx-fetchca.conf
|
|
||||||
/usr/libexec/spiffe/step-ssh-server/helper-fetchca.conf
|
|
||||||
/usr/sbin/setup-spiffe-step-ssh-server
|
|
||||||
/usr/sbin/spiffe-step-ssh-get-cert-authority
|
|
||||||
%config(noreplace) /etc/spiffe/step-ssh-server
|
|
||||||
|
|
Loading…
Reference in New Issue