c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
36 lines
1.2 KiB
Plaintext
36 lines
1.2 KiB
Plaintext
FROM alpine:3.20.0
|
|
|
|
# Because this image supports SQLite, we create /home/ory and /home/ory/sqlite which is owned by the ory user
|
|
# and declare /home/ory/sqlite a volume.
|
|
#
|
|
# To get SQLite and Docker Volumes working with this image, mount the volume where SQLite should be written to at:
|
|
#
|
|
# /home/ory/sqlite/some-file.
|
|
|
|
RUN addgroup -S ory; \
|
|
adduser -S ory -G ory -D -u 10000 -h /home/ory -s /bin/nologin; \
|
|
chown -R ory:ory /home/ory
|
|
RUN apk --update upgrade && apk --no-cache --update-cache --upgrade --latest add ca-certificates
|
|
|
|
WORKDIR /home/ory
|
|
|
|
COPY kratos /usr/bin/kratos
|
|
|
|
# By creating the sqlite folder as the ory user, the mounted volume will be owned by ory:ory, which
|
|
# is required for read/write of SQLite.
|
|
RUN mkdir -p /var/lib/sqlite
|
|
RUN chown ory:ory /var/lib/sqlite
|
|
VOLUME /var/lib/sqlite
|
|
|
|
# Exposing the ory home directory to simplify passing in Kratos configuration (e.g. if the file $HOME/.kratos.yaml
|
|
# exists, it will be automatically used as the configuration file).
|
|
VOLUME /home/ory
|
|
|
|
# Declare the standard ports used by Kratos (4433 for public service endpoint, 4434 for admin service endpoint)
|
|
EXPOSE 4433 4434
|
|
|
|
USER 10000
|
|
|
|
ENTRYPOINT ["kratos"]
|
|
CMD ["serve"]
|