Compare commits

..

No commits in common. "main" and "testing" have entirely different histories.

2 changed files with 33 additions and 75 deletions

View File

@ -5,7 +5,6 @@ platform:
arch: amd64
node_selector:
kubernetes.io/arch: amd64
federationhq.de/location: Blumendorf
volumes:
- name: fedhq-ca-crt
@ -33,7 +32,6 @@ platform:
arch: arm64
node_selector:
kubernetes.io/arch: arm64
federationhq.de/location: Blumendorf
volumes:
- name: fedhq-ca-crt
@ -59,8 +57,7 @@ type: kubernetes
name: push
node_selector:
kubernetes.io/arch: amd64
federationhq.de/location: Blumendorf
volumes:
- name: fedhq-ca-crt
config_map:
@ -72,36 +69,14 @@ steps:
- name: push
image: quay.io/buildah/stable
privileged: true
environment:
USERNAME:
from_secret: username
PASSWORD:
from_secret: password
volumes:
- name: fedhq-ca-crt
path: /etc/ssl/certs2/
commands:
- scripts/setupEnvironment.sh
- buildah manifest create imapfilter:latest registry.cloud.federationhq.de/imapfilter:latest-arm64 registry.cloud.federationhq.de/imapfilter:latest-amd64
- buildah manifest push --all imapfilter:latest docker://registry.cloud.federationhq.de/imapfilter:latest
- buildah login -u $${USERNAME} -p $${PASSWORD} registry.hub.docker.com
- buildah manifest push --all imapfilter:latest docker://registry.hub.docker.com/byterazor/imapfilter:latest
- buildah manifest rm imapfilter:latest
- buildah manifest create registry.cloud.federationhq.de/imapfilter:latest registry.cloud.federationhq.de/imapfilter:latest-arm64 registry.cloud.federationhq.de/imapfilter:latest-amd64
- buildah manifest push registry.cloud.federationhq.de/imapfilter:latest docker://registry.cloud.federationhq.de/imapfilter:latest
- buildah manifest rm registry.cloud.federationhq.de/imapfilter:latest
depends_on:
- build-amd64
- build-arm64
---
kind: secret
name: username
get:
path: docker
name: username
---
kind: secret
name: password
get:
path: docker
name: secret
- build-arm64

View File

@ -1,66 +1,49 @@
---
lang: EN_US
---
# ImapFilter Container Image
## Description
This repository contains the Containerfile and associated scripts for a container image that runs [imapfilter](https://github.com/lefcha/imapfilter).
The image is based on Alpine Linux and compiles the main branch of
imapfilter in a build image so that the bare imapfilter image is
as small as possible.
The container is based on alpine linux to keep it small.
imapfilter is running in a loop waiting 500 seconds between each
run.
## Author
## Security
Imapfilter is running with a non-root userid to improve security.
In kubernetes you can also enforce running the image with readonly
root directory.
## Supported Architectures
- amd64
- arm64
## Updates
I am trying to update the image weekly as long as my private kubernetes cluster is available. So I do not promise anything and do **not** rely
your business on this image.
## Prerequisities
A container runtime like
* docker
* podman
* kubernetes
- Dominik Meyer <dmeyer@federationhq.de>
## Container Parameters
## Prerequisites
At the moment there are no parameters but there will be
some added in the future.
- Buildah
## Usage
## Volumes
### Building the Container Image
You have to mount the imapfilter config file to /home/imapfilter/config.lua. This can be done by a bind mount or a configmap in kubernetes.
You can build the container image using the following command:
## Source Repository
\```bash
buildah bud -t imapfilter:latest .
\```
* https://gitea.federationhq.de/Container/imapfilter.git
### Running the Container
## Prebuild Images
You can create and run a container from this image with the following command:
* https://hub.docker.com/repository/docker/byterazor/imapfilter/general
\```bash
podman run -d --name imapfilter imapfilter:latest
\```
## Authors
### Pushing the Container Image to a Registry
* **Dominik Meyer** - *Initial work*
With Buildah:
\```bash
buildah push imapfilter:latest docker://<registry>/<username>/imapfilter:latest
\```
Replace `<registry>` with the name of your Docker registry and `<username>` with your username on that registry.
## Configuration
T.b.d.
## License