Dockerfile

# Docker build for Kabanero CLI Microservice
FROM openliberty/open-liberty:kernel-java8-openj9-ubi

# The following labels are required for Redhat container certification
LABEL vendor="Kabanero" \
      name="Kabanero CLI Service" \
      summary="Image for Kabanero CLI Service" \
      description="This image contains the service for the Kabanero CLI.  See https://github.com/kabanero-io/kabanero-command-line-services/"

# The licence must be here for Redhat container certification
COPY LICENSE /licenses/ 

COPY --chown=1001:0 /target/kabanero-cli-service-1.0-SNAPSHOT.war /config/apps
COPY --chown=1001:0 /src/main/liberty/config/cacerts /config/resources/security/cacerts
COPY --chown=1001:0 /target/liberty/wlp/usr/servers/defaultServer/server.xml /config
COPY --chown=1001:0 /src/main/liberty/config/jvm.options /config

RUN mkdir -p /opt/ol/wlp/output/defaultServer/resources/security
RUN chown -R 1001:0 /opt/ol/wlp/output/defaultServer/resources/security
RUN chmod -R g+rw /opt/ol/wlp/output/defaultServer/resources/security
RUN chmod 444 /config/server.xml
RUN chmod 444 /config/server.env
RUN chmod 444 /config/jvm.options
RUN chmod 444 /config/resources/security/cacerts
RUN rm /config/configDropins/defaults/open-default-port.xml

### switch to root in order to install skopeo
USER root
### Figure out how to build without root
### Add necessary Red Hat repos here
## Note: The UBI has different repos than the RHEL repos.
RUN REPOLIST=ubi-8-baseos,ubi-8-codeready-builder,ubi-8-appstream \

### Add your package needs here
    SKOPEO_VERSION_NAME=0.1.40 \
    SKOPEO_SRC_PKG_NAME=v${SKOPEO_VERSION_NAME}.tar.gz \
    SKOPEO_SRC_ROOT_NAME=skopeo-${SKOPEO_VERSION_NAME} \
    INSTALL_PKGS="ostree-libs" \
    TEMP_BUILD_UBI_PKGS="wget make golang gpgme-devel libassuan-devel device-mapper-devel" && \
    yum -y update-minimal --disablerepo "*" --enablerepo ubi-8* --setopt=tsflags=nodocs \
    yum repolist && \
    yum -y install --disablerepo "*" --enablerepo ${REPOLIST} --setopt=tsflags=nodocs ${INSTALL_PKGS} ${TEMP_BUILD_UBI_PKGS} && \

### Install your application here -- add all other necessary items to build your image
    GOPATH=$(pwd) && \
    mkdir -p /src/github.com/containers && \
    cd /src/github.com/containers && \
    wget https://github.com/containers/skopeo/archive/${SKOPEO_SRC_PKG_NAME} && \
    tar -xzpf ${SKOPEO_SRC_PKG_NAME} && \
    mv ${SKOPEO_SRC_ROOT_NAME} skopeo && \
    cd skopeo && \
    make binary-local && \
    mv skopeo /usr/local/bin && \
    # Create required config file
    mkdir -p /etc/containers && \
    echo $'{\n    \"default\": [\n        {\n            \"type\": \"insecureAcceptAnything\"\n        }\n    ]\n}' \
    > /etc/containers/policy.json && \
    cat /etc/containers/policy.json 

### switch back to liberty user 
USER 1001