2021-04-13 15:19:20 +02:00
|
|
|
# syntax=docker/dockerfile:1.2
|
2020-08-17 16:20:02 +02:00
|
|
|
|
|
|
|
|
2020-09-22 12:13:00 +02:00
|
|
|
# Copyright 2020 Docker Compose CLI authors
|
2020-06-18 16:13:24 +02:00
|
|
|
|
|
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
# you may not use this file except in compliance with the License.
|
|
|
|
# You may obtain a copy of the License at
|
|
|
|
|
|
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
|
|
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
# See the License for the specific language governing permissions and
|
|
|
|
# limitations under the License.
|
2020-09-22 12:13:00 +02:00
|
|
|
|
update golang to 1.18.3
go1.18.3 (released 2022-06-01) includes security fixes to the crypto/rand,
crypto/tls, os/exec, and path/filepath packages, as well as bug fixes to the
compiler, and the crypto/tls and text/template/parse packages. See the Go
1.18.3 milestone on our issue tracker for details:
https://github.com/golang/go/issues?q=milestone%3AGo1.18.3+label%3ACherryPickApproved
Hello gophers,
We have just released Go versions 1.18.3 and 1.17.11, minor point releases.
These minor releases include 4 security fixes following the security policy:
- crypto/rand: rand.Read hangs with extremely large buffers
On Windows, rand.Read will hang indefinitely if passed a buffer larger than
1 << 32 - 1 bytes.
Thanks to Davis Goodin and Quim Muntal, working at Microsoft on the Go toolset,
for reporting this issue.
This is [CVE-2022-30634][CVE-2022-30634] and Go issue https://go.dev/issue/52561.
- crypto/tls: session tickets lack random ticket_age_add
Session tickets generated by crypto/tls did not contain a randomly generated
ticket_age_add. This allows an attacker that can observe TLS handshakes to
correlate successive connections by comparing ticket ages during session
resumption.
Thanks to GitHub user nervuri for reporting this.
This is [CVE-2022-30629][CVE-2022-30629] and Go issue https://go.dev/issue/52814.
- `os/exec`: empty `Cmd.Path` can result in running unintended binary on Windows
If, on Windows, `Cmd.Run`, `cmd.Start`, `cmd.Output`, or `cmd.CombinedOutput`
are executed when Cmd.Path is unset and, in the working directory, there are
binaries named either "..com" or "..exe", they will be executed.
Thanks to Chris Darroch, brian m. carlson, and Mikhail Shcherbakov for reporting
this.
This is [CVE-2022-30580][CVE-2022-30580] and Go issue https://go.dev/issue/52574.
- `path/filepath`: Clean(`.\c:`) returns `c:` on Windows
On Windows, the `filepath.Clean` function could convert an invalid path to a
valid, absolute path. For example, Clean(`.\c:`) returned `c:`.
Thanks to Unrud for reporting this issue.
This is [CVE-2022-29804][CVE-2022-29804] and Go issue https://go.dev/issue/52476.
[CVE-2022-30634]: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30634
[CVE-2022-30629]: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30629
[CVE-2022-30580]: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30580
[CVE-2022-29804]: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29804
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-06-02 09:56:16 +02:00
|
|
|
ARG GO_VERSION=1.18.3-alpine
|
2021-05-19 17:00:13 +02:00
|
|
|
ARG GOLANGCI_LINT_VERSION=v1.40.1-alpine
|
2020-10-27 14:09:28 +01:00
|
|
|
ARG PROTOC_GEN_GO_VERSION=v1.4.3
|
2020-04-22 10:04:11 +02:00
|
|
|
|
2020-05-29 11:30:12 +02:00
|
|
|
FROM --platform=${BUILDPLATFORM} golang:${GO_VERSION} AS base
|
2020-08-21 17:24:53 +02:00
|
|
|
WORKDIR /compose-cli
|
2021-04-13 15:19:20 +02:00
|
|
|
RUN apk add --no-cache -vv \
|
2020-08-18 16:10:34 +02:00
|
|
|
git \
|
2020-05-29 11:30:12 +02:00
|
|
|
docker \
|
|
|
|
make \
|
2020-06-05 16:28:18 +02:00
|
|
|
protoc \
|
|
|
|
protobuf-dev
|
2020-05-29 11:30:12 +02:00
|
|
|
COPY go.* .
|
2020-09-23 17:13:27 +02:00
|
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
2021-05-19 16:59:21 +02:00
|
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
2020-09-23 17:13:27 +02:00
|
|
|
go mod download
|
2020-05-04 23:49:40 +02:00
|
|
|
|
2020-05-22 13:04:27 +02:00
|
|
|
FROM base AS lint
|
|
|
|
ENV CGO_ENABLED=0
|
2021-09-20 12:55:16 +02:00
|
|
|
COPY --from=golangci/golangci-lint /usr/bin/golangci-lint /usr/bin/golangci-lint
|
2020-11-18 17:18:15 +01:00
|
|
|
ARG BUILD_TAGS
|
2020-07-07 15:48:09 +02:00
|
|
|
ARG GIT_TAG
|
2020-05-29 11:30:12 +02:00
|
|
|
RUN --mount=target=. \
|
2020-09-23 17:13:27 +02:00
|
|
|
--mount=type=cache,target=/go/pkg/mod \
|
2020-05-29 11:30:12 +02:00
|
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
|
|
|
--mount=type=cache,target=/root/.cache/golangci-lint \
|
2020-11-18 17:18:15 +01:00
|
|
|
BUILD_TAGS=${BUILD_TAGS} \
|
2020-07-07 15:48:09 +02:00
|
|
|
GIT_TAG=${GIT_TAG} \
|
2020-05-22 13:04:27 +02:00
|
|
|
make -f builder.Makefile lint
|
|
|
|
|
2021-05-27 12:10:37 +02:00
|
|
|
FROM base AS make-compose-plugin
|
|
|
|
ENV CGO_ENABLED=0
|
|
|
|
ARG TARGETOS
|
|
|
|
ARG TARGETARCH
|
|
|
|
ARG BUILD_TAGS
|
|
|
|
ARG GIT_TAG
|
|
|
|
RUN --mount=target=. \
|
|
|
|
--mount=type=cache,target=/go/pkg/mod \
|
|
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
|
|
|
GOOS=${TARGETOS} \
|
|
|
|
GOARCH=${TARGETARCH} \
|
|
|
|
BUILD_TAGS=${BUILD_TAGS} \
|
|
|
|
GIT_TAG=${GIT_TAG} \
|
|
|
|
make COMPOSE_BINARY=/out/docker-compose -f builder.Makefile compose-plugin
|
2020-04-22 10:04:11 +02:00
|
|
|
|
2020-05-14 13:35:55 +02:00
|
|
|
FROM base AS make-cross
|
2020-06-15 17:41:59 +02:00
|
|
|
ARG BUILD_TAGS
|
2020-07-07 15:48:09 +02:00
|
|
|
ARG GIT_TAG
|
2020-05-29 11:30:12 +02:00
|
|
|
RUN --mount=target=. \
|
2020-09-23 17:13:27 +02:00
|
|
|
--mount=type=cache,target=/go/pkg/mod \
|
2020-05-29 11:30:12 +02:00
|
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
2020-06-15 17:41:59 +02:00
|
|
|
BUILD_TAGS=${BUILD_TAGS} \
|
2020-07-07 15:48:09 +02:00
|
|
|
GIT_TAG=${GIT_TAG} \
|
2021-08-31 18:53:24 +02:00
|
|
|
make COMPOSE_BINARY=/out/docker-compose -f builder.Makefile cross
|
2020-05-01 15:27:27 +02:00
|
|
|
|
2021-05-27 12:10:37 +02:00
|
|
|
FROM scratch AS compose-plugin
|
|
|
|
COPY --from=make-compose-plugin /out/* .
|
|
|
|
|
2020-05-04 10:32:30 +02:00
|
|
|
FROM scratch AS cross
|
2020-05-29 11:30:12 +02:00
|
|
|
COPY --from=make-cross /out/* .
|
2020-04-22 10:04:11 +02:00
|
|
|
|
2020-12-04 17:33:52 +01:00
|
|
|
FROM base AS test
|
2020-05-20 14:32:56 +02:00
|
|
|
ENV CGO_ENABLED=0
|
2020-07-07 15:48:09 +02:00
|
|
|
ARG BUILD_TAGS
|
|
|
|
ARG GIT_TAG
|
2020-05-29 11:30:12 +02:00
|
|
|
RUN --mount=target=. \
|
2020-09-23 17:13:27 +02:00
|
|
|
--mount=type=cache,target=/go/pkg/mod \
|
2020-05-29 11:30:12 +02:00
|
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
2020-06-15 17:41:59 +02:00
|
|
|
BUILD_TAGS=${BUILD_TAGS} \
|
2020-07-07 15:48:09 +02:00
|
|
|
GIT_TAG=${GIT_TAG} \
|
2020-05-22 13:26:30 +02:00
|
|
|
make -f builder.Makefile test
|
2020-08-17 15:18:47 +02:00
|
|
|
|
2020-12-04 17:33:52 +01:00
|
|
|
FROM base AS check-license-headers
|
2022-05-10 23:10:16 +02:00
|
|
|
RUN go install github.com/kunalkushwaha/ltag@latest
|
2020-08-17 15:18:47 +02:00
|
|
|
RUN --mount=target=. \
|
2020-08-17 16:20:02 +02:00
|
|
|
make -f builder.Makefile check-license-headers
|
|
|
|
|
2020-12-04 17:48:15 +01:00
|
|
|
FROM base AS make-go-mod-tidy
|
|
|
|
COPY . .
|
|
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
2021-05-19 16:59:21 +02:00
|
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
2020-12-04 17:48:15 +01:00
|
|
|
go mod tidy
|
|
|
|
|
|
|
|
FROM scratch AS go-mod-tidy
|
|
|
|
COPY --from=make-go-mod-tidy /compose-cli/go.mod .
|
|
|
|
COPY --from=make-go-mod-tidy /compose-cli/go.sum .
|
|
|
|
|
2020-12-04 17:33:52 +01:00
|
|
|
FROM base AS check-go-mod
|
2020-08-18 11:53:17 +02:00
|
|
|
COPY . .
|
2020-09-23 17:13:40 +02:00
|
|
|
RUN make -f builder.Makefile check-go-mod
|
2022-06-24 18:40:04 +02:00
|
|
|
|
|
|
|
# docs-reference is a target used as remote context to update docs on release
|
|
|
|
# with latest changes on docker.github.io.
|
|
|
|
# see open-pr job in .github/workflows/docs.yml for more details
|
|
|
|
FROM scratch AS docs-reference
|
|
|
|
COPY docs/reference/*.yaml .
|