Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-04-29 09:27:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 107
fleet/infrastructure/loadtesting/terraform/docker/loadtest.Dockerfile

19 lines
770 B
Text
Raw Normal View History

Update Go to 1.24.6 (#31784) Ran ``` make update-go version=1.24.6 ``` And then updated the `sha256`s manually in the Dockerfiles. Fixes https://nvd.nist.gov/vuln/detail/CVE-2025-47907 ``` Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error. ```
2025-08-12 11:10:05 +00:00
FROM golang:1.24.6-alpine3.21@sha256:50f8a10a46c0c26b5b816a80314f1999196c44c3e3571f41026b061339c29db6
Add new loadtesting infra and scaledown option to save costs (#4662)
2022-03-21 17:18:21 +00:00
ARG TAG
Update loadtest osquery-perf to cleanup vulns in built image (#19317) Note this is the same Dockerfile used in cloud for adding fake hosts to preview/tests environments.
2024-05-28 21:33:55 +00:00
RUN apk add git
reduce the build time of loadtest.Dockerfile (#8584) - yarn is not needed to build osquery-perf - we can change the clone step to not fetch unnecessary data
2022-11-04 16:20:38 +00:00
RUN git clone -b $TAG --depth=1 --no-tags --progress --no-recurse-submodules https://github.com/fleetdm/fleet.git && cd /go/fleet/cmd/osquery-perf/ && go build .
Loadtest test (#6218) * testing * another fix * Revert "add changes file" This reverts commit bc2402348e2e6d6e7252ef899dd899b758379003. * revert 71e1639531832217500fafcec32df781f22d85e7 Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
2022-06-14 15:39:49 +00:00
Update alpine to patch vulnerability with severity "HIGH" (#26593) The vulnerability was posted by a prospect. Posting manual command until we get #25902 done. ```sh trivy image --ignore-unfixed --pkg-types os,library --severity CRITICAL,HIGH --show-suppressed fleetdm/fleet:v4.64.1 [...] fleetdm/fleet:v4.64.1 (alpine 3.21.0) Total: 2 (HIGH: 2, CRITICAL: 0) ┌────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────┐ │ Library │ Vulnerability │ Severity │ Status │ Installed Version │ Fixed Version │ Title │ ├────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────┤ │ libcrypto3 │ CVE-2024-12797 │ HIGH │ fixed │ 3.3.2-r4 │ 3.3.3-r0 │ openssl: RFC7250 handshakes with unauthenticated servers │ │ │ │ │ │ │ │ don't abort as expected │ │ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2024-12797 │ ├────────────┤ │ │ │ │ │ │ │ libssl3 │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ └────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────┘ ```
2025-02-25 21:33:24 +00:00
FROM alpine:3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
Update loadtest osquery-perf to cleanup vulns in built image (#19317) Note this is the same Dockerfile used in cloud for adding fake hosts to preview/tests environments.
2024-05-28 21:33:55 +00:00
LABEL maintainer="Fleet Developers"
# Create FleetDM group and user
RUN addgroup -S osquery-perf && adduser -S osquery-perf -G osquery-perf
upgrade Go to 1.21.1 for infra (#13878) related to #13715, this updates the infra dependencies for the general go upgrade that's happening at https://github.com/fleetdm/fleet/pull/13877 I'm thinking we probably want to merge this after we're sure that everything works well, maybe even after we have a release with go 1.21.1 out, so I'm making a separate PR. --------- Co-authored-by: Martin Angers <martin.n.angers@gmail.com>
2023-10-13 02:09:17 +00:00
Loadtest test (#6218) * testing * another fix * Revert "add changes file" This reverts commit bc2402348e2e6d6e7252ef899dd899b758379003. * revert 71e1639531832217500fafcec32df781f22d85e7 Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
2022-06-14 15:39:49 +00:00
COPY --from=0 /go/fleet/cmd/osquery-perf/osquery-perf /go/osquery-perf
Update loadtest osquery-perf to cleanup vulns in built image (#19317) Note this is the same Dockerfile used in cloud for adding fake hosts to preview/tests environments.
2024-05-28 21:33:55 +00:00
COPY --from=0 /go/fleet/server/vulnerabilities/testdata/ /go/fleet/server/vulnerabilities/testdata/
RUN set -eux; \
apk update; \
apk upgrade
USER osquery-perf
Reference in a new issue Copy permalink