vaultwarden

2302 commits 2 branches 74 tags 31 MiB

Author SHA1 Message Date

Author	SHA1	Message	Date
Jeremy Lin	a2162f4d69	Allow listening on privileged ports (below 1024) as non-root This is done by running `setcap cap_net_bind_service=+ep` on the executable in the build stage (doing it in the runtime stage creates an extra copy of the executable that bloats the image). This only works when using the BuildKit-based builder, since the `COPY` instruction doesn't copy capabilities on the legacy builder.	2023-02-01 00:35:33 -08:00
Jeremy Lin	686474f815	Disable Hadolint check for consecutive `RUN` instructions (DL3059) This check doesn't seem to add enough value to justify the difficulties it tends to create when generating `RUN` instructions from a template.	2023-01-24 13:11:13 -08:00
Jeremy Lin	2c6bd8c9dc	Rename `.buildx` Dockerfiles to `.buildkit` This is a more accurate name, since these Dockerfiles require BuildKit, not Buildx.	2023-01-24 13:11:12 -08:00

Jeremy Lin

a2162f4d69

Allow listening on privileged ports (below 1024) as non-root

This is done by running `setcap cap_net_bind_service=+ep` on the executable
in the build stage (doing it in the runtime stage creates an extra copy of
the executable that bloats the image). This only works when using the
BuildKit-based builder, since the `COPY` instruction doesn't copy
capabilities on the legacy builder.

2023-02-01 00:35:33 -08:00

Jeremy Lin

686474f815

Disable Hadolint check for consecutive RUN instructions (DL3059)

This check doesn't seem to add enough value to justify the difficulties it
tends to create when generating `RUN` instructions from a template.

2023-01-24 13:11:13 -08:00

Jeremy Lin

2c6bd8c9dc

Rename .buildx Dockerfiles to .buildkit

This is a more accurate name, since these Dockerfiles require BuildKit, not Buildx.

2023-01-24 13:11:12 -08:00

Renamed from docker/arm64/Dockerfile.buildx (Browse further)

3 commits