| ADD alpine-minirootfs-3.24.1-aarch64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| LABEL author=Task Venture Capital GmbH <hello@task.vc> |
| WORKDIR /workspace |
| ENV NODE_VERSION_LTS=24.13.0 NVM_DIR=/usr/local/nvm NVM_NODEJS_ORG_MIRROR=https://unofficial-builds.nodejs.org/download/release |
| RUN /bin/sh -c apk add --no-cache bash coreutils=9.11-r0 curl git ca-certificates openssl=3.5.8-r0 unzip gcompat libstdc++ tini # buildkit |
| RUN /bin/sh -c mkdir -p $NVM_DIR && curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.7/install.sh | bash # buildkit |
| RUN /bin/sh -c printf '%s\n%s\n%s\n' 'export NVM_DIR="/usr/local/nvm"' '[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"' '[ -s "$NVM_DIR/bash_completion" ] && . "$NVM_DIR/bash_completion"' > /etc/bash.bashrc # buildkit |
| COPY image_support_files/bash-with-nvm /usr/local/bin/bash-with-nvm # buildkit |
| COPY image_support_files/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh # buildkit |
| COPY image_support_files/configure-pnpm-defaults /usr/local/bin/configure-pnpm-defaults # buildkit |
| RUN /bin/sh -c chmod +x /usr/local/bin/bash-with-nvm /usr/local/bin/docker-entrypoint.sh /usr/local/bin/configure-pnpm-defaults # buildkit |
| SHELL [/usr/local/bin/bash-with-nvm] |
| ENV BASH_ENV=/etc/bash.bashrc |
| RUN /usr/local/bin/bash-with-nvm nvm install $NODE_VERSION_LTS && nvm alias default $NODE_VERSION_LTS && nvm use default # buildkit |
| ENV NODE_PATH=/usr/local/nvm/versions/node/v24.13.0/lib/node_modules |
| ENV PATH=/usr/local/nvm/versions/node/v24.13.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| ENV PNPM_HOME=/root/.local/share/pnpm |
| ENV PATH=/root/.local/share/pnpm:/root/.local/share/pnpm/bin:/usr/local/nvm/versions/node/v24.13.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| RUN /usr/local/bin/bash-with-nvm set -o pipefail && mkdir -p ${PNPM_HOME} && curl -fsSL https://get.pnpm.io/install.sh | env PNPM_VERSION=12.3.1 ENV=/root/.bashrc SHELL=/bin/bash bash - && test "$(pnpm --version)" = "12.3.1" && configure-pnpm-defaults # buildkit |
| COPY third_party/pnpm /usr/share/doc/ht-docker-node/pnpm # buildkit |
| COPY third_party/alpine /usr/share/doc/ht-docker-node/alpine # buildkit |
| COPY image_support_files/install-alpine-materials.mjs /usr/local/lib/ht-docker-node/install-alpine-materials.mjs # buildkit |
| RUN /usr/local/bin/bash-with-nvm node /usr/local/lib/ht-docker-node/install-alpine-materials.mjs verify core # buildkit |
| COPY license.md /usr/share/doc/ht-docker-node/license.md # buildkit |
| ENTRYPOINT ["/sbin/tini" "--" "/usr/local/bin/docker-entrypoint.sh"] |
| CMD ["bash"] |
| LABEL author=Task Venture Capital GmbH <hello@task.vc> |
| ENV PNPM_HOME=/root/.local/share/pnpm |
| RUN /usr/local/bin/bash-with-nvm apk add --no-cache build-base python3 linux-headers wget iputils bind-tools # buildkit |
| RUN /usr/local/bin/bash-with-nvm mkdir -p ${PNPM_HOME} # buildkit |
| ENV PATH=/root/.local/share/pnpm:/root/.local/share/pnpm/bin:/root/.local/share/pnpm:/root/.local/share/pnpm/bin:/usr/local/nvm/versions/node/v24.13.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| RUN /usr/local/bin/bash-with-nvm pnpm -v && configure-pnpm-defaults # buildkit |
| ENV IDP_NODE_VERSION=22.22.1 |
| RUN /usr/local/bin/bash-with-nvm nvm install "$IDP_NODE_VERSION" && nvm alias default "$IDP_NODE_VERSION" # buildkit |
| ENV NODE_PATH=/usr/local/nvm/versions/node/v22.22.1/lib/node_modules |
| ENV PATH=/usr/local/nvm/versions/node/v22.22.1/bin:/root/.local/share/pnpm:/root/.local/share/pnpm/bin:/root/.local/share/pnpm:/root/.local/share/pnpm/bin:/usr/local/nvm/versions/node/v24.13.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| RUN /usr/local/bin/bash-with-nvm node -e "if (process.version !== 'v22.22.1') process.exit(1)" # buildkit |
| WORKDIR /app |
| ENV NODE_ENV=production |
| COPY --chown=0:0 /app/package.json /app/pnpm-lock.yaml /app/pnpm-workspace.yaml /app/qenv.yml /app/cli.js /app/startup-bootstrap.js /app/license.md /app/ # buildkit |
| RUN /usr/local/bin/bash-with-nvm test "$(pnpm --version)" = "12.3.4" # buildkit |
| COPY --chown=0:0 /app/dist_ts /app/dist_ts # buildkit |
| COPY --chown=0:0 /app/dist_serve /app/dist_serve # buildkit |
| COPY --chown=0:0 /app/scripts/generate-supply-chain-evidence.mjs /app/.build/generate-supply-chain-evidence.mjs # buildkit |
| RUN /usr/local/bin/bash-with-nvm pnpm config set registry https://verdaccio.lossless.digital/ && pnpm config set store-dir .pnpm-store && pnpm install --prod --frozen-lockfile && pnpm rebuild -r && node /app/.build/generate-supply-chain-evidence.mjs --out=/app/dist_legal && rm -rf /app/.build /app/.pnpm-store /tmp/.config/pnpm && chown -R 0:0 /app && chmod -R a+rX,go-w /app # buildkit |
| LABEL org.opencontainers.image.title=idp.global org.opencontainers.image.description=Identity provider server, web UI, OIDC provider, MFA, and passkey runtime org.opencontainers.image.source=https://code.foss.global/idp.global/app.git |
| ENV HOME=/tmp |
| USER 10001:10001 |
| EXPOSE [2999/tcp] |
| HEALTHCHECK {Test:[CMD-SHELL node -e "fetch('http://127.0.0.1:2999/healthz').then((response) => process.exit(response.ok ? 0 : 1)).catch(() => process.exit(1))"] Interval:30s Timeout:5s StartPeriod:10s StartInterval:0s Retries:3} |
| CMD ["node" "cli.js"] |
