adelorenzo
/
kilo
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
kilo/Dockerfile

20 lines
1013 B
Docker
Raw Normal View History

Makefile,Dockerfile: add multi-arch images This commit changes the build-system for Kilo to create container images for multiple architectures. This will enable running Kilo on Arm devices, e.g. Raspberry Pis. This is accomplished using Docker manifests.
2019-05-16 17:07:58 +00:00
ARG FROM=alpine
Makefile: handle a private registry
2021-04-15 19:12:10 +00:00
FROM $FROM AS cni
Dockerfile: Update CNI Plugins Also extract them into arguments so it is easier to update
2021-04-18 17:37:07 +00:00
ARG GOARCH=amd64
bump CNI plugins version to 1.1.1
2022-04-19 12:27:35 +00:00
ARG CNI_PLUGINS_VERSION=v1.1.1
*: add complete CNI support This commit enables Kilo to work as an independent networking provider. This is done by leveraging CNI. Kilo brings the necessary CNI plugins to operate and takes care of all networking. Add-on compatibility for Calico, Flannel, etc, will be re-introduced shortly.
2019-05-06 23:49:55 +00:00
RUN apk add --no-cache curl && \
Dockerfile: Update CNI Plugins Also extract them into arguments so it is easier to update
2021-04-18 17:37:07 +00:00
curl -Lo cni.tar.gz https://github.com/containernetworking/plugins/releases/download/$CNI_PLUGINS_VERSION/cni-plugins-linux-$GOARCH-$CNI_PLUGINS_VERSION.tgz && \
*: add complete CNI support This commit enables Kilo to work as an independent networking provider. This is done by leveraging CNI. Kilo brings the necessary CNI plugins to operate and takes care of all networking. Add-on compatibility for Calico, Flannel, etc, will be re-introduced shortly.
2019-05-06 23:49:55 +00:00
tar -xf cni.tar.gz
Makefile,Dockerfile: add multi-arch images This commit changes the build-system for Kilo to create container images for multiple architectures. This will enable running Kilo on Arm devices, e.g. Raspberry Pis. This is accomplished using Docker manifests.
2019-05-16 17:07:58 +00:00
FROM $FROM
Dockerfile: fix cni plugins for arm This commit ensures that the architecture of the installed CNI plugins corresponds to the architecture of the container.
2019-08-16 15:37:56 +00:00
ARG GOARCH
Dockerfile: Update CNI Plugins Also extract them into arguments so it is easier to update
2021-04-18 17:37:07 +00:00
ARG ALPINE_VERSION=v3.12
Makefile,Dockerfile: add multi-arch images This commit changes the build-system for Kilo to create container images for multiple architectures. This will enable running Kilo on Arm devices, e.g. Raspberry Pis. This is accomplished using Docker manifests.
2019-05-16 17:07:58 +00:00
LABEL maintainer="squat <lserven@gmail.com>"
Dockerfile: Update CNI Plugins Also extract them into arguments so it is easier to update
2021-04-18 17:37:07 +00:00
RUN echo -e "https://alpine.global.ssl.fastly.net/alpine/$ALPINE_VERSION/main\nhttps://alpine.global.ssl.fastly.net/alpine/$ALPINE_VERSION/community" > /etc/apk/repositories && \
migrate to golang.zx2c4.com/wireguard/wgctrl (#239) * migrate to golang.zx2c4.com/wireguard/wgctrl This commit introduces the usage of wgctrl. It avoids the usage of exec calls of the wg command and parsing the output of `wg show`. Signed-off-by: leonnicolas <leonloechner@gmx.de> * vendor wgctrl Signed-off-by: leonnicolas <leonloechner@gmx.de> * apply suggestions from code review Remove wireguard.Enpoint struct and use net.UDPAddr for the resolved endpoint and addr string (dnsanme:port) if a DN was supplied. Signed-off-by: leonnicolas <leonloechner@gmx.de> * pkg/*: use wireguard.Enpoint This commit introduces the wireguard.Enpoint struct. It encapsulates a DN name with port and a net.UPDAddr. The fields are private and only accessible over exported Methods to avoid accidental modification. Also iptables.GetProtocol is improved to avoid ipv4 rules being applied by `ip6tables`. Signed-off-by: leonnicolas <leonloechner@gmx.de> * pkg/wireguard/conf_test.go: add tests for Endpoint Signed-off-by: leonnicolas <leonloechner@gmx.de> * cmd/kg/main.go: validate port range Signed-off-by: leonnicolas <leonloechner@gmx.de> * add suggestions from review Signed-off-by: leonnicolas <leonloechner@gmx.de> * pkg/mesh/mesh.go: use Equal func Implement an Equal func for Enpoint and use it instead of comparing strings. Signed-off-by: leonnicolas <leonloechner@gmx.de> * cmd/kgctl/main.go: check port range Signed-off-by: leonnicolas <leonloechner@gmx.de> * vendor Signed-off-by: leonnicolas <leonloechner@gmx.de>
2022-01-30 16:38:45 +00:00
apk add --no-cache ipset iptables ip6tables graphviz font-noto
*: add complete CNI support This commit enables Kilo to work as an independent networking provider. This is done by leveraging CNI. Kilo brings the necessary CNI plugins to operate and takes care of all networking. Add-on compatibility for Calico, Flannel, etc, will be re-introduced shortly.
2019-05-06 23:49:55 +00:00
COPY --from=cni bridge host-local loopback portmap /opt/cni/bin/
Dockerfile: support nftables Currently, Kilo _only_ supports adding firewall rules via the legacy iptables API. This means that on systems using nftables in the host network namespace, the namespace will be polluted and both firewall infrastructures will be used, causing unexpected and difficult to predict interactions. In other words, networking may not work as expected on nftables-based systems. This PR fixes this by using the iptables-wrappers project [0] to install run-time detection of the in-use iptables backend. [0] https://github.com/kubernetes-sigs/iptables-wrappers Signed-off-by: Lucas Servén Marín <lserven@gmail.com>
2022-04-21 16:51:14 +00:00
ADD https://raw.githubusercontent.com/kubernetes-sigs/iptables-wrappers/e139a115350974aac8a82ec4b815d2845f86997e/iptables-wrapper-installer.sh /
RUN chmod 700 /iptables-wrapper-installer.sh && /iptables-wrapper-installer.sh --no-sanity-check
pkg/*: allow kgctl to compile for other OSes This commit enables the compilation of kgctl when GOOS!=linux. This fixes #56. Signed-off-by: Lucas Servén Marín <lserven@gmail.com>
2020-11-13 17:36:07 +00:00
COPY bin/linux/$GOARCH/kg /opt/bin/
init
2019-01-18 01:50:10 +00:00
ENTRYPOINT ["/opt/bin/kg"]