mirror of
https://github.com/fleetdm/fleet
synced 2026-05-24 09:28:54 +00:00
b81ef1617b
Fixes a [DoS vulnerability](https://groups.google.com/g/golang-announce/c/gyb7aM1C9H4) that affects the http.ReverseProxy used in the MDM proxy.
17 lines
792 B
Docker
17 lines
792 B
Docker
FROM golang:1.22.5-alpine3.20@sha256:8c9183f715b0b4eca05b8b3dbf59766aaedb41ec07477b132ee2891ac0110a07
|
|
ARG TAG
|
|
RUN apk update && apk add --no-cache git
|
|
RUN git clone -b $TAG --depth=1 --no-tags --progress --no-recurse-submodules https://github.com/fleetdm/fleet.git && cd /go/fleet/tools/mdm/migration/mdmproxy && go build .
|
|
|
|
FROM alpine:3.20.1@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
|
|
LABEL maintainer="Fleet Developers"
|
|
|
|
RUN apk update && apk add --no-cache tini
|
|
COPY --from=0 /go/fleet/tools/mdm/migration/mdmproxy/mdmproxy /usr/bin/mdmproxy
|
|
ADD --chmod=0755 ./entrypoint.sh /usr/bin/entrypoint.sh
|
|
|
|
# Create mdmproxy group and user
|
|
RUN addgroup -S mdmproxy && adduser -S mdmproxy -G mdmproxy
|
|
USER mdmproxy
|
|
|
|
ENTRYPOINT ["/sbin/tini", "/usr/bin/entrypoint.sh"]
|