sunjizzle/diskless-workstation
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

serving: mirror the remaining base/service images through Harbor

Browse Source 
Route the pre-existing non-CI image pulls through harbor.bitasylum.org per the
standing rule (harbor.bitasylum.org/<registry>/<namespace>/<image>):
- enrol-broker/Dockerfile: golang:1.23-alpine -> dockerhub/library/...,
  smallstep/step-cli:latest -> dockerhub/smallstep/...
- dot1x-bench/docker-compose.yml: smallstep/step-ca + freeradius/freeradius-server
  -> dockerhub/<namespace>/...
CI-built git.bitasylum.org/audiobuzz/* images and ${OCI_IMAGE}/${IPXE_IMAGE}
type:image volume mounts are unchanged.
This commit is contained in:
Audiobuzz
2026-07-05 01:34:10 +00:00
parent 08847532ee
commit 24d67d07db
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
serving/dot1x-bench/docker-compose.yml
+2 -2
View File
@@ -15,7 +15,7 @@
services: services:
# --- Fleet CA (signs TPM-generated CSRs; trust anchor for the image) -------- # --- Fleet CA (signs TPM-generated CSRs; trust anchor for the image) --------
step-ca: step-ca:
image: smallstep/step-ca:latest image: harbor.bitasylum.org/dockerhub/smallstep/step-ca:latest
network_mode: host network_mode: host
restart: unless-stopped restart: unless-stopped
environment: environment:
@@ -38,7 +38,7 @@ services:
# --- RADIUS (EAP-TLS; validates client cert vs step-ca root, returns MSK) --- # --- RADIUS (EAP-TLS; validates client cert vs step-ca root, returns MSK) ---
freeradius: freeradius:
image: freeradius/freeradius-server:latest image: harbor.bitasylum.org/dockerhub/freeradius/freeradius-server:latest
network_mode: host # RADIUS 1812/1813 from the authenticator network_mode: host # RADIUS 1812/1813 from the authenticator
restart: unless-stopped restart: unless-stopped
depends_on: depends_on:
serving/enrol-broker/Dockerfile
+2 -2
View File
@@ -7,14 +7,14 @@
# #
# Pin + mirror these base tags through your registry (like the rest of the stack) # Pin + mirror these base tags through your registry (like the rest of the stack)
# if the build/serving host has no egress. # if the build/serving host has no egress.
FROM golang:1.23-alpine AS build FROM harbor.bitasylum.org/dockerhub/library/golang:1.23-alpine AS build
WORKDIR /src WORKDIR /src
COPY go.mod . COPY go.mod .
COPY *.go wordlist.txt ./ COPY *.go wordlist.txt ./
ENV CGO_ENABLED=0 GOPROXY=off GOTOOLCHAIN=local ENV CGO_ENABLED=0 GOPROXY=off GOTOOLCHAIN=local
RUN go build -trimpath -buildvcs=false -ldflags '-s -w -buildid=' -o /enrol-broker . RUN go build -trimpath -buildvcs=false -ldflags '-s -w -buildid=' -o /enrol-broker .
FROM smallstep/step-cli:latest FROM harbor.bitasylum.org/dockerhub/smallstep/step-cli:latest
COPY --from=build /enrol-broker /usr/local/bin/enrol-broker COPY --from=build /enrol-broker /usr/local/bin/enrol-broker
# Non-root by default (the step-cli image runs as uid 1000 "step"); the broker # Non-root by default (the step-cli image runs as uid 1000 "step"); the broker
# binds loopback ports >1024 and only READS the mounted CA root + provisioner # binds loopback ports >1024 and only READS the mounted CA root + provisioner