mirror of
https://github.com/certbot/certbot.git
synced 2026-01-26 07:41:33 +03:00
b8b759f1d2
Fixes https://github.com/certbot/certbot/issues/9892 and https://github.com/certbot/certbot/security/dependabot Upgrading the base docker image has been done in previous PRs like https://github.com/certbot/certbot/pull/9415. Doing this was needed because the [newer versions of `cryptography` need a newer version of rust](https://dev.azure.com/certbot/certbot/_build/results?buildId=7451&view=logs&j=fdd3565a-f3c6-5154-eca9-9ae03666f7bd&t=5dbd9851-46a4-524f-73a8-4028241afcde&l=475). I ran the full test suite on this branch which you can see in the GitHub status checks below. The boulder tests should fail as they're to be fixed by https://github.com/certbot/certbot/pull/9889 but everything else should pass.
50 lines
1.4 KiB
Docker
50 lines
1.4 KiB
Docker
#base image
|
|
FROM python:3.12-alpine3.18 as certbot
|
|
|
|
ENTRYPOINT [ "certbot" ]
|
|
EXPOSE 80 443
|
|
VOLUME /etc/letsencrypt /var/lib/letsencrypt
|
|
WORKDIR /opt/certbot
|
|
|
|
# Copy certbot code
|
|
COPY CHANGELOG.md README.rst src/
|
|
COPY tools tools
|
|
COPY acme src/acme
|
|
COPY certbot src/certbot
|
|
|
|
# Install certbot runtime dependencies
|
|
RUN apk add --no-cache --virtual .certbot-deps \
|
|
libffi \
|
|
libssl1.1 \
|
|
openssl \
|
|
ca-certificates \
|
|
binutils
|
|
|
|
# We set this environment variable and install git while building to try and
|
|
# increase the stability of fetching the rust crates needed to build the
|
|
# cryptography library
|
|
ARG CARGO_NET_GIT_FETCH_WITH_CLI=true
|
|
# Install certbot from sources
|
|
RUN apk add --no-cache --virtual .build-deps \
|
|
gcc \
|
|
linux-headers \
|
|
openssl-dev \
|
|
musl-dev \
|
|
libffi-dev \
|
|
python3-dev \
|
|
cargo \
|
|
git \
|
|
pkgconfig \
|
|
&& python tools/pip_install.py --no-cache-dir \
|
|
--editable src/acme \
|
|
--editable src/certbot \
|
|
&& apk del .build-deps \
|
|
&& rm -rf ${HOME}/.cargo
|
|
|
|
#static definition for making a plugin, but beware that
|
|
#using this layer definition will cause collisions if you make
|
|
#extensive use of the cache.
|
|
FROM certbot as certbot-plugin
|
|
COPY --from=plugin-src . /opt/certbot/src/plugin
|
|
RUN python tools/pip_install.py --no-cache-dir --editable /opt/certbot/src/plugin
|