mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-10-30 21:28:14 +00:00
abf0a5d098
This was added to alpine since our package was created. Now we have upgraded we can just use the binary. The package contains an auditd.conf but we have a tweak local copy which writes to stdio (which goes to /var/log/auditd.*.log already). The package doesn't have an audit.rules so keep that here too. Signed-off-by: Ian Campbell <ijc@docker.com>
20 lines
534 B
Docker
20 lines
534 B
Docker
FROM linuxkit/alpine:4584958639b2378246371fe219f33b270667e22e AS mirror
|
|
|
|
RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
|
|
RUN apk add --initdb -p /out alpine-baselayout apk-tools audit busybox tini
|
|
|
|
# Remove apk residuals. We have a read-only rootfs, so apk is of no use.
|
|
RUN rm -rf /out/etc/apk /out/lib/apk /out/var/cache
|
|
|
|
FROM scratch
|
|
ENTRYPOINT []
|
|
CMD []
|
|
WORKDIR /
|
|
COPY --from=mirror /out/ /
|
|
|
|
COPY auditd.conf /etc/audit
|
|
COPY audit.rules /etc/audit
|
|
COPY runaudit.sh /usr/bin
|
|
|
|
CMD ["/sbin/tini", "/usr/bin/runaudit.sh"]
|