Mohammed Naser | 564caa8 | 2025-01-18 15:49:44 -0500 | [diff] [blame] | 1 | # SPDX-FileCopyrightText: © 2025 VEXXHOST, Inc. |
| 2 | # SPDX-License-Identifier: GPL-3.0-or-later |
Mohammed Naser | 3000423 | 2025-02-20 16:43:21 -0500 | [diff] [blame] | 3 | # Atmosphere-Rebuild-Time: 2025-02-20T21:42:46Z |
Mohammed Naser | da99423 | 2024-04-13 12:34:01 -0400 | [diff] [blame] | 4 | |
Mohammed Naser | 564caa8 | 2025-01-18 15:49:44 -0500 | [diff] [blame] | 5 | FROM openstack-venv-builder AS build |
Mohammed Naser | 49aa233 | 2025-02-17 16:53:31 -0500 | [diff] [blame] | 6 | ARG KEYSTONE_GIT_REF=47891f4ae8fd7876e5a7657f58c32c371feeddc3 |
Mohammed Naser | da99423 | 2024-04-13 12:34:01 -0400 | [diff] [blame] | 7 | ADD --keep-git-dir=true https://opendev.org/openstack/keystone.git#${KEYSTONE_GIT_REF} /src/keystone |
| 8 | RUN git -C /src/keystone fetch --unshallow |
Mohammed Naser | afc8c8c | 2025-02-21 15:02:33 -0500 | [diff] [blame] | 9 | RUN --mount=type=cache,target=/root/.cache/uv <<EOF bash -xe |
| 10 | uv pip install \ |
Mohammed Naser | da99423 | 2024-04-13 12:34:01 -0400 | [diff] [blame] | 11 | --constraint /upper-constraints.txt \ |
| 12 | /src/keystone[ldap] \ |
Mohammed Naser | 49aa233 | 2025-02-17 16:53:31 -0500 | [diff] [blame] | 13 | keystone-keycloak-backend==0.2.0 |
Mohammed Naser | da99423 | 2024-04-13 12:34:01 -0400 | [diff] [blame] | 14 | EOF |
| 15 | |
Mohammed Naser | 564caa8 | 2025-01-18 15:49:44 -0500 | [diff] [blame] | 16 | FROM openstack-python-runtime |
Mohammed Naser | da99423 | 2024-04-13 12:34:01 -0400 | [diff] [blame] | 17 | RUN <<EOF bash -xe |
| 18 | apt-get update -qq |
| 19 | apt-get install -qq -y --no-install-recommends \ |
| 20 | apache2 libapache2-mod-wsgi-py3 |
| 21 | apt-get clean |
| 22 | rm -rf /var/lib/apt/lists/* |
| 23 | EOF |
| 24 | ARG MOD_AUTH_OPENIDC_VERSION=2.4.12.1 |
| 25 | ARG TARGETARCH |
| 26 | RUN <<EOF bash -xe |
Mohammed Naser | 564caa8 | 2025-01-18 15:49:44 -0500 | [diff] [blame] | 27 | # TODO(mnaser): mod_auth_openidc does not have aarch64 builds |
| 28 | if [ "${TARGETARCH}" = "arm64" ]; then |
| 29 | exit 0 |
| 30 | fi |
| 31 | |
Mohammed Naser | da99423 | 2024-04-13 12:34:01 -0400 | [diff] [blame] | 32 | apt-get update -qq |
| 33 | apt-get install -qq -y --no-install-recommends \ |
| 34 | curl |
| 35 | curl -LO https://github.com/OpenIDC/mod_auth_openidc/releases/download/v${MOD_AUTH_OPENIDC_VERSION}/libapache2-mod-auth-openidc_${MOD_AUTH_OPENIDC_VERSION}-1.$(lsb_release -sc)_${TARGETARCH}.deb |
| 36 | apt-get install -y --no-install-recommends ./libapache2-mod-auth-openidc_${MOD_AUTH_OPENIDC_VERSION}-1.$(lsb_release -sc)_${TARGETARCH}.deb |
| 37 | a2enmod auth_openidc |
| 38 | apt-get purge -y --auto-remove curl |
| 39 | apt-get clean |
| 40 | rm -rfv /var/lib/apt/lists/* libapache2-mod-auth-openidc_${MOD_AUTH_OPENIDC_VERSION}-1.$(lsb_release -sc)_${TARGETARCH}.deb |
| 41 | EOF |
| 42 | COPY --from=build --link /var/lib/openstack /var/lib/openstack |