diff --git a/sonarqube/Dockerfile b/sonarqube/Dockerfile index b3f8f49645bc705e06ef8680c3233bf96f62f23b..240e46a29048d99ac019a8f922daf0078512eb86 100644 --- a/sonarqube/Dockerfile +++ b/sonarqube/Dockerfile @@ -1,6 +1,6 @@ FROM openjdk:8 -ENV SONAR_VERSION=7.1 \ +ENV SONAR_VERSION=7.3 \ SONARQUBE_HOME=/opt/sonarqube \ # Database configuration # Defaults to using H2 @@ -13,17 +13,23 @@ EXPOSE 9000 RUN groupadd -r sonarqube && useradd -r -g sonarqube sonarqube +COPY gosu-amd64 /usr/local/bin/gosu +COPY gosu-amd64.asc /usr/local/bin/gosu.asc + # grab gosu for easy step-down from root RUN set -x \ - && wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/1.10/gosu-$(dpkg --print-architecture)" \ - && wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/1.10/gosu-$(dpkg --print-architecture).asc" \ + # && wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/1.10/gosu-$(dpkg --print-architecture)" \ + # && wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/1.10/gosu-$(dpkg --print-architecture).asc" \ && export GNUPGHOME="$(mktemp -d)" \ - && gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \ - && gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \ + # && gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \ + # && gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \ && rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc \ && chmod +x /usr/local/bin/gosu \ && gosu nobody true +COPY sonarqube-7.3.zip /opt/sonarqube.zip +COPY sonarqube-7.3.zip.asc sonarqube.zip.asc + RUN set -x \ # pub 2048R/D26468DE 2015-05-25 @@ -33,9 +39,9 @@ RUN set -x \ && gpg --keyserver ha.pool.sks-keyservers.net --recv-keys F1182E81C792928921DBCAB4CFCA4A29D26468DE \ && cd /opt \ - && curl -o sonarqube.zip -fSL https://sonarsource.bintray.com/Distribution/sonarqube/sonarqube-$SONAR_VERSION.zip \ - && curl -o sonarqube.zip.asc -fSL https://sonarsource.bintray.com/Distribution/sonarqube/sonarqube-$SONAR_VERSION.zip.asc \ - && gpg --batch --verify sonarqube.zip.asc sonarqube.zip \ + # && curl -o sonarqube.zip -fSL https://sonarsource.bintray.com/Distribution/sonarqube/sonarqube-$SONAR_VERSION.zip \ + # && curl -o sonarqube.zip.asc -fSL https://sonarsource.bintray.com/Distribution/sonarqube/sonarqube-$SONAR_VERSION.zip.asc \ + # && gpg --batch --verify sonarqube.zip.asc sonarqube.zip \ && unzip sonarqube.zip \ && mv sonarqube-$SONAR_VERSION sonarqube \ && chown -R sonarqube:sonarqube sonarqube \ diff --git a/sonarqube/gosu-amd64 b/sonarqube/gosu-amd64 new file mode 100644 index 0000000000000000000000000000000000000000..47a2a41f725180e8fb9b6c7d761a900bd61ebd6d Binary files /dev/null and b/sonarqube/gosu-amd64 differ diff --git a/sonarqube/gosu-amd64.asc b/sonarqube/gosu-amd64.asc new file mode 100644 index 0000000000000000000000000000000000000000..46acdcdf5a00ec642532431e4bcb84c2046dd404 Binary files /dev/null and b/sonarqube/gosu-amd64.asc differ diff --git a/sonarqube/run.sh b/sonarqube/run.sh old mode 100644 new mode 100755 diff --git a/sonarqube/sonarqube-7.3.zip b/sonarqube/sonarqube-7.3.zip new file mode 100644 index 0000000000000000000000000000000000000000..994bd48c282f69d26db0c7e0f0075ecc1310b2b5 Binary files /dev/null and b/sonarqube/sonarqube-7.3.zip differ diff --git a/sonarqube/sonarqube-7.3.zip.asc b/sonarqube/sonarqube-7.3.zip.asc new file mode 100644 index 0000000000000000000000000000000000000000..2c14d9bd666cd1cee40e26f66f4166a4c0cc0e6d --- /dev/null +++ b/sonarqube/sonarqube-7.3.zip.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- +Version: BCPG v1.53 + +iQEcBAABCAAGBQJbcZIGAAoJEM/KSinSZGjeEboIALlhmL93pOKIlF5TIVneACho +ypxlIRAQ3PKSew+Udhgtyluq00emhZ0CYDu2kwOeVkwDtQWXCzj9UguQIZSCrKF+ +PDBjwwP3cyckG5kv8uk9PSEyf/XZnt5gX0Qzj7J3Co6ZDEgvjy2t7KLLJRgqnk3D +f3fq76QN24dYkvQmHptaZrjH/7LYLI7Jz7N4PnJbxjtW8kX4V2QE+kbjZO4bW3ew +xRxD3wn3+nkxMdIXaH/sm6J6FIBJ/spuQM+4+hhTcE+sloISZkRIXFBWrkewmTLu +5DAE+7ccaUSmOoAlNGgkK6ziUjEQqWWjODqhtqV7KyngZoMgi/IQaWpDRCpGKrU= +=BTXS +-----END PGP SIGNATURE-----