Files
gitea-dynamic-runner/container/controller.Dockerfile
panxiao81 3ec528623a
test / python (pull_request) Successful in 10s
test / shell (pull_request) Successful in 21s
修复只读根文件系统下的服务账号令牌挂载
2026-09-16 15:18:21 +00:00

18 lines
677 B
Docker

FROM ghcr.io/spiffe/spire-agent:1.15.3@sha256:41b0dcd8b258a69db9e2768292a060766fb76fd866e4bc925849981ea1b825ff AS spire
FROM python:3.12.11-alpine3.22 AS build
WORKDIR /src
COPY pyproject.toml README.md ./
COPY src ./src
RUN python -m venv /venv && /venv/bin/pip install --no-cache-dir .
FROM python:3.12.11-alpine3.22
RUN addgroup -S -g 65532 runner \
&& adduser -S -D -H -u 65532 -G runner runner \
&& install -d -o 65532 -g 65532 /var/run/secrets/kubernetes.io/serviceaccount
COPY --from=build /venv /venv
COPY --from=spire /opt/spire/bin/spire-agent /opt/spire/bin/spire-agent
USER 65532:65532
EXPOSE 8787
ENTRYPOINT ["/venv/bin/gitea-dynamic-runner-controller"]