29 lines
852 B
Docker
29 lines
852 B
Docker
|
ARG VERSION=10.11
|
||
|
|
ARG UID=200011
|
||
|
|
ARG GID=200011
|
||
|
|
|
||
|
|
FROM mariadb:${VERSION}-ubi
|
||
|
|
|
||
|
|
ARG UID
|
||
|
|
ARG GID
|
||
|
|
|
||
|
|
LABEL maintainer="Lukas Raub titanz@pm.me"
|
||
|
|
|
||
|
|
USER root
|
||
|
|
|
||
|
|
RUN --network=none \
|
||
|
|
usermod -u ${UID} mysql \
|
||
|
|
&& groupmod -g ${GID} mysql \
|
||
|
|
&& find / -path '/proc' -prune -user 999 -exec chown -h mysql {} \; \
|
||
|
|
&& find / -path '/proc' -prune -group 999 -exec chgrp -h mysql {} \;
|
||
|
|
|
||
|
|
RUN microdnf -y upgrade \
|
||
|
|
&& rm -rf /usr/local/bin/gosu \
|
||
|
|
&& curl https://copr.fedorainfracloud.org/coprs/secureblue/hardened_malloc/repo/rhel-9/secureblue-hardened_malloc-rhel-9.repo \
|
||
|
|
-o /etc/yum.repos.d/_copr:copr.fedorainfracloud.org:secureblue:hardened_malloc.repo \
|
||
|
|
&& microdnf install -y crypto-policies-scripts hardened_malloc \
|
||
|
|
&& update-crypto-policies --set FUTURE \
|
||
|
|
&& echo libhardened_malloc.so > /etc/ld.so.preload
|
||
|
|
|
||
|
|
USER mysql
|