Permalink
Cannot retrieve contributors at this time
Name already in use
A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
shib-idp-appliance/Dockerfile
Go to fileThis commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
49 lines (40 sloc)
2.57 KB
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| FROM bigfleet/shibboleth_idp:autoexec | |
| ARG maintainer=my | |
| ARG imagename=shibboleth_idp | |
| ARG version=3.3.1 | |
| ENV VERSION=$version | |
| ENV JAVA_OPTS=-Xmx1500m -XX:MaxPermSize=128m | |
| # Uncomment all the following lines to download the JDK to your Shibboleth IDP image. By uncommenting these lines, you agree to the Oracle Binary Code License Agreement for Java SE (http://www.oracle.com/technetwork/java/javase/terms/license/index.html) | |
| ENV JAVA_VERSION 8u101 | |
| ENV BUILD_VERSION b13 | |
| ENV JAVA_HOME /usr/java/latest | |
| RUN wget -nv --no-cookies --no-check-certificate --header "Cookie: oraclelicense=accept-securebackup-cookie" "http://download.oracle.com/otn-pub/java/jdk/$JAVA_VERSION-$BUILD_VERSION/jdk-$JAVA_VERSION-linux-x64.rpm" -O /tmp/jdk-8-linux-x64.rpm && \ | |
| yum -y install /tmp/jdk-8-linux-x64.rpm && \ | |
| rm -f /tmp/jdk-8-linux-x64.rpm && \ | |
| alternatives --install /usr/bin/java jar $JAVA_HOME/bin/java 200000 && \ | |
| alternatives --install /usr/bin/javaws javaws $JAVA_HOME/bin/javaws 200000 && \ | |
| alternatives --install /usr/bin/javac javac $JAVA_HOME/bin/javac 200000 | |
| RUN yum -y install unzip \ | |
| && wget --no-check-certificate --no-cookies --header "Cookie: oraclelicense=accept-securebackup-cookie" \ | |
| http://download.oracle.com/otn-pub/java/jce/8/jce_policy-8.zip \ | |
| && echo "f3020a3922efd6626c2fff45695d527f34a8020e938a49292561f18ad1320b59 jce_policy-8.zip" | sha256sum -c - \ | |
| && unzip -oj jce_policy-8.zip UnlimitedJCEPolicyJDK8/local_policy.jar -d $JAVA_HOME/jre/lib/security/ \ | |
| && unzip -oj jce_policy-8.zip UnlimitedJCEPolicyJDK8/US_export_policy.jar -d $JAVA_HOME/jre/lib/security/ \ | |
| && rm jce_policy-8.zip \ | |
| && chmod -R 640 $JAVA_HOME/jre/lib/security/ | |
| RUN chown -R root:root /opt/shibboleth/shibboleth-identity-provider-$version && \ | |
| rm -rf /usr/local/tomcat/webapps/* && \ | |
| ANT_OPTS="-Didp.target.dir=/opt/shibboleth/current" /opt/shibboleth/current/bin/build.sh && \ | |
| ln -s /opt/shibboleth/current /opt/shibboleth-idp && \ | |
| ln -s /opt/shibboleth-idp/war/idp.war $CATALINA_HOME/webapps/idp.war && \ | |
| touch /usr/local/tomcat/logs/voltest && \ | |
| touch /opt/shibboleth/shibboleth-identity-provider-$version/logs/voltest && \ | |
| mkdir /opt/certs | |
| COPY ./conf/ /usr/local/tomcat/conf/ | |
| COPY ./certs/gencert.sh /opt/autoexec/onbuild/gencert.sh | |
| # Remove this line once build is cooking | |
| COPY ./container_files/bin/onbuild.sh /opt/autoexec/bin/onbuild.sh | |
| RUN chmod +x /opt/autoexec/onbuild/gencert.sh && /opt/autoexec/bin/onbuild.sh | |
| VOLUME ["/usr/local/tomcat/logs", "/opt/shibboleth/shibboleth-identity-provider-$VERSION/logs"] | |
| EXPOSE 8080 | |
| CMD ["catalina.sh", "run"] |