Dockerfile

FROM rockylinux:8.8
#FROM --platform=$TARGETPLATFORM rockylinux:8.8

# Install Corretto Java JDK (from Amazon repo, more arch independent)
RUN rpm --import https://yum.corretto.aws/corretto.key \
    && curl -L -o /etc/yum.repos.d/corretto.repo https://yum.corretto.aws/corretto.repo \
    && yum install -y java-17-amazon-corretto-devel
ENV JAVA_HOME=/usr/lib/jvm/java-17-amazon-corretto

RUN rm -fr /var/cache/yum/* && yum clean all && yum -y update && yum -y install --setopt=tsflags=nodocs epel-release && \
    yum -y install wget supervisor && \
    yum -y clean all

RUN mkdir -p /opt/shibui

COPY containerfiles/supervisord.conf /etc/supervisor/supervisord.conf
COPY containerfiles/users.txt /opt/shibui

# beacon env
ENV TIERVERSION=PACKAGE_2.0.0-BETA-R1
ARG version=2.0.0-BETA-R1

COPY bootstrapfiles/shibui-${version}.war.sha256sum .

RUN wget https://github.internet2.edu/TIER/shib-idp-ui/releases/download/v${version}/shibui-${version}.war \
    && sha256sum -c shibui-${version}.war.sha256sum && mv shibui-${version}.war shibui.war

RUN mv shibui.war /opt/shibui/shibui.war

# TIER Beacon Opt-out
# Completely uncomment the following ENV line to prevent the containers from sending analytics information to Internet2.
# With the default/release configuration, it will only send product (Shibb/Grouper/COmanage) and version (3.3.1-17040, etc)
#   once daily between midnight and 4am.  There is no configuration or private information collected or sent.
# This data helps with the scalaing and funding of TIER.  Please do not disable it if you find the TIER tools useful.
# To keep it commented, keep multiple comments on the following line (to prevent other scripts from processing it).
#####     ENV TIER_BEACON_OPT_OUT True

WORKDIR /opt/shibui

CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/supervisord.conf"]