https://github.com/jw3/sbt-openshift
Build OpenShift compatible images with SBT Native Packager
https://github.com/jw3/sbt-openshift
docker openshift openshift-origin sbt sbt-docker sbt-native-packager sbt-openshift scala
Last synced: about 2 months ago
JSON representation
Build OpenShift compatible images with SBT Native Packager
- Host: GitHub
- URL: https://github.com/jw3/sbt-openshift
- Owner: jw3
- License: apache-2.0
- Created: 2017-06-25T03:14:20.000Z (almost 8 years ago)
- Default Branch: master
- Last Pushed: 2017-07-01T20:37:18.000Z (almost 8 years ago)
- Last Synced: 2025-02-01T18:44:06.294Z (4 months ago)
- Topics: docker, openshift, openshift-origin, sbt, sbt-docker, sbt-native-packager, sbt-openshift, scala
- Language: Scala
- Homepage:
- Size: 9.77 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# SBT OpenShift #
Learning exercise for SBT plugin development and POC extension of the great SBT Native Packager with support for building OpenShift compatible images.
## How does it work ##
Currently leverages the capability of Packager's Docker Plugin. The OpenShift Plugin mostly just reconfigures the existing build process as defined in Packager.
## What does OpenShift compatible mean? ##
See the [guidelines](https://docs.openshift.org/latest/creating_images/guidelines.html) for a full description.
### Support Arbitrary User IDs ###
By default, OpenShift Origin runs containers using an arbitrarily assigned user ID. This provides additional security against processes escaping the container due to a container engine vulnerability and thereby achieving escalated permissions on the host node.
For an image to support running as an arbitrary user, directories and files that may be written to by processes in the image should be owned by the root group and be read/writable by that group. Files to be executed should also have group execute permissions.
Adding the following to your Dockerfile sets the directory and file permissions to allow users in the root group to access them in the built image:
```bash
RUN chgrp -R 0 /some/directory \
&& chmod -R g+rwX /some/directory
```
## Example ##
The following is generated the default configuration other than exposing `9000` with `dockerExposedPorts := Seq(9000)`
```dockerfile
FROM registry.access.redhat.com/redhat-openjdk-18/openjdk18-openshift
USER root
WORKDIR /opt/docker
ADD opt /opt
RUN chgrp -R 0 . \
&& chmod -R g+rwX .
EXPOSE 9000
USER 10001
CMD ["bin/example"]
```
## Disclaimer ##
I dont yet know how to correctly write SBT plugins, so buyer beware.
## Bugs and Feedback
For bugs, questions, and discussions please use the [Github Issues](https://github.com/jw3/sbt-openshift/issues).