adrien/ctie-exercice
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Removed comments
Some checks failed
Build and Push Docker Images / build-and-push (push) Failing after 4m51s
Details

Browse Source
This commit is contained in:
Adrien Bouvais 2026-08-15 16:26:41 +02:00
parent 189a3c4e0c
commit 7abb8db1e4
2 changed files with 0 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
images/base/dockerfile
View File

@ -4,14 +4,12 @@ LABEL org.opencontainers.image.title="tenant-base" \
org.opencontainers.image.description="Hardened base image for tenant workspaces" \ org.opencontainers.image.description="Hardened base image for tenant workspaces" \
org.opencontainers.image.source="https://git.bouvais.lu/adrien/" org.opencontainers.image.source="https://git.bouvais.lu/adrien/"
# System deps only — keep this layer stable so it's rarely rebuilt
RUN apt-get update && apt-get install -y --no-install-recommends \ RUN apt-get update && apt-get install -y --no-install-recommends \
ca-certificates \ ca-certificates \
curl \ curl \
tini \ tini \
&& rm -rf /var/lib/apt/lists/* && rm -rf /var/lib/apt/lists/*
# Non-root user, fixed UID/GID for predictable K8s securityContext
RUN groupadd --gid 1000 appuser \ RUN groupadd --gid 1000 appuser \
&& useradd --uid 1000 --gid appuser --shell /bin/bash --create-home appuser && useradd --uid 1000 --gid appuser --shell /bin/bash --create-home appuser

1
images/jupyter/dockerfile
View File

@ -10,7 +10,6 @@ COPY --chown=appuser:appuser requirements.txt /tmp/requirements.txt
RUN pip install --no-cache-dir -r /tmp/requirements.txt \ RUN pip install --no-cache-dir -r /tmp/requirements.txt \
&& rm /tmp/requirements.txt && rm /tmp/requirements.txt
# No secrets baked in — S3 creds come from a mounted K8s Secret / env at runtime
USER appuser USER appuser
WORKDIR /home/appuser/work WORKDIR /home/appuser/work