Skip to content

Commit

Permalink
feat: enable FIPS-capable container builds
Browse files Browse the repository at this point in the history
  • Loading branch information
redhatrises committed Oct 17, 2023
1 parent 378995e commit fb75a95
Showing 1 changed file with 4 additions and 2 deletions.
6 changes: 4 additions & 2 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Build the manager binary
FROM golang:1.19 as builder
FROM registry.access.redhat.com/ubi8/go-toolset as builder
ARG TARGETOS
ARG TARGETARCH
ARG VERSION
Expand Down Expand Up @@ -32,8 +32,10 @@ RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -a -tags

# Use distroless as minimal base image to package the manager binary
# Refer to https://github.com/GoogleContainerTools/distroless for more details
FROM gcr.io/distroless/static:nonroot
FROM registry.access.redhat.com/ubi8/ubi-micro
WORKDIR /
COPY LICENSE licenses/
COPY --from=builder /etc/pki /etc/pki
COPY --from=builder /workspace/manager .
USER 65532:65532

Expand Down

0 comments on commit fb75a95

Please sign in to comment.