FROM golang:1.17.2-alpine3.14 AS builder WORKDIR /usr/local/src/dex RUN apk add --no-cache --update alpine-sdk ARG TARGETOS ARG TARGETARCH ARG TARGETVARIANT="" ENV GOOS=${TARGETOS} GOARCH=${TARGETARCH} GOARM=${TARGETVARIANT} ARG GOPROXY COPY go.mod go.sum ./ COPY api/v2/go.mod api/v2/go.sum ./api/v2/ RUN go mod download COPY . . RUN make release-binary FROM alpine:3.14.2 AS gomplate ARG TARGETOS ARG TARGETARCH ARG TARGETVARIANT ENV GOMPLATE_VERSION=v3.9.0 RUN wget -O /usr/local/bin/gomplate \ "https://github.com/hairyhenderson/gomplate/releases/download/${GOMPLATE_VERSION}/gomplate_${TARGETOS:-linux}-${TARGETARCH:-amd64}${TARGETVARIANT}" \ && chmod +x /usr/local/bin/gomplate FROM alpine:3.14.2 # Dex connectors, such as GitHub and Google logins require root certificates. # Proper installations should manage those certificates, but it's a bad user # experience when this doesn't work out of the box. # # OpenSSL is required so wget can query HTTPS endpoints for health checking. RUN apk add --no-cache --update ca-certificates openssl RUN mkdir -p /var/dex RUN chown -R 1001:1001 /var/dex RUN mkdir -p /etc/dex COPY config.docker.yaml /etc/dex/ RUN chown -R 1001:1001 /etc/dex # Copy module files for CVE scanning / dependency analysis. COPY --from=builder /usr/local/src/dex/go.mod /usr/local/src/dex/go.sum /usr/local/src/dex/ COPY --from=builder /usr/local/src/dex/api/v2/go.mod /usr/local/src/dex/api/v2/go.sum /usr/local/src/dex/api/v2/ COPY --from=builder /go/bin/dex /usr/local/bin/dex COPY --from=builder /usr/local/src/dex/web /srv/dex/web COPY --from=gomplate /usr/local/bin/gomplate /usr/local/bin/gomplate USER 1001:1001 COPY docker-entrypoint.sh /entrypoint.sh ENTRYPOINT ["/entrypoint.sh"] CMD ["dex", "serve", "/etc/dex/config.docker.yaml"]