use the git url ts so much easier :sob: · vielle.dev/pi-config@ed3095b

+2 -2

compose.yml

··· 29 29 30 30 knot: 31 31 build: 32 - context: ./knot 32 + context: https://tangled.org/tangled.org/knot-docker.git 33 33 args: 34 + TAG: master 34 35 UID: 1000 35 36 GID: 1000 36 - TAG: v1.11.0-alpha 37 37 restart: unless-stopped 38 38 ports: 39 39 - "5555:5555"

-40

knot/Dockerfile

··· 1 - FROM golang:1.24-alpine AS builder 2 - ENV KNOT_REPO_SCAN_PATH=/home/git/repositories 3 - ENV CGO_ENABLED=1 4 - 5 - ARG TAG='v1.10.0-alpha' 6 - 7 - WORKDIR /app 8 - RUN apk add git gcc musl-dev 9 - RUN git clone -b ${TAG} https://tangled.org/tangled.org/core . 10 - RUN go build -o /usr/bin/knot -ldflags '-s -w -extldflags "-static"' ./cmd/knot 11 - 12 - FROM alpine:edge 13 - EXPOSE 5555 14 - EXPOSE 22 15 - 16 - LABEL org.opencontainers.image.title='knot' 17 - LABEL org.opencontainers.image.description='data server for tangled' 18 - LABEL org.opencontainers.image.source='https://tangled.org/@tangled.org/knot-docker' 19 - LABEL org.opencontainers.image.url='https://tangled.org' 20 - LABEL org.opencontainers.image.vendor='tangled.org' 21 - LABEL org.opencontainers.image.licenses='MIT' 22 - 23 - ARG UID=1000 24 - ARG GID=1000 25 - 26 - COPY rootfs . 27 - RUN chmod 755 /etc 28 - RUN chmod -R 755 /etc/s6-overlay 29 - RUN apk add shadow s6-overlay execline openssl openssh git curl bash 30 - RUN groupadd -g $GID -f git 31 - RUN useradd -u $UID -g $GID -d /home/git git 32 - RUN openssl rand -hex 16 | passwd --stdin git 33 - RUN mkdir -p /home/git/repositories && chown -R git:git /home/git 34 - COPY --from=builder /usr/bin/knot /usr/bin 35 - RUN mkdir /app && chown -R git:git /app 36 - 37 - HEALTHCHECK --interval=60s --timeout=30s --start-period=5s --retries=3 \ 38 - cmd curl -f http://localhost:5555 || exit 1 39 - 40 - ENTRYPOINT ["/init"]

-1

knot/rootfs/etc/s6-overlay/s6-rc.d/create-sshd-host-keys/type

··· 1 - oneshot

-1

knot/rootfs/etc/s6-overlay/s6-rc.d/create-sshd-host-keys/up

··· 1 - /etc/s6-overlay/scripts/create-sshd-host-keys

knot/rootfs/etc/s6-overlay/s6-rc.d/knotserver/dependencies.d/base

This is a binary file and will not be displayed.

-3

knot/rootfs/etc/s6-overlay/s6-rc.d/knotserver/run

··· 1 - #!/command/with-contenv ash 2 - 3 - exec s6-setuidgid git /usr/bin/knot server

-1

knot/rootfs/etc/s6-overlay/s6-rc.d/knotserver/type

··· 1 - longrun

knot/rootfs/etc/s6-overlay/s6-rc.d/sshd/dependencies.d/base

This is a binary file and will not be displayed.

knot/rootfs/etc/s6-overlay/s6-rc.d/sshd/dependencies.d/create-sshd-host-keys

This is a binary file and will not be displayed.

-3

knot/rootfs/etc/s6-overlay/s6-rc.d/sshd/run

··· 1 - #!/usr/bin/execlineb -P 2 - 3 - /usr/sbin/sshd -e -D

-1

knot/rootfs/etc/s6-overlay/s6-rc.d/sshd/type

··· 1 - longrun

knot/rootfs/etc/s6-overlay/s6-rc.d/user/contents.d/knotserver

This is a binary file and will not be displayed.

knot/rootfs/etc/s6-overlay/s6-rc.d/user/contents.d/sshd

This is a binary file and will not be displayed.

-21

knot/rootfs/etc/s6-overlay/scripts/create-sshd-host-keys

··· 1 - #!/usr/bin/execlineb -P 2 - 3 - foreground { 4 - if -n { test -d /etc/ssh/keys } 5 - mkdir /etc/ssh/keys 6 - } 7 - 8 - foreground { 9 - if -n { test -f /etc/ssh/keys/ssh_host_rsa_key } 10 - ssh-keygen -t rsa -f /etc/ssh/keys/ssh_host_rsa_key -q -N "" 11 - } 12 - 13 - foreground { 14 - if -n { test -f /etc/ssh/keys/ssh_host_ecdsa_key } 15 - ssh-keygen -t rsa -f /etc/ssh/keys/ssh_host_ecdsa_key -q -N "" 16 - } 17 - 18 - foreground { 19 - if -n { test -f /etc/ssh/keys/ssh_host_ed25519_key } 20 - ssh-keygen -t rsa -f /etc/ssh/keys/ssh_host_ed25519_key -q -N "" 21 - }

-8

knot/rootfs/etc/s6-overlay/scripts/keys-wrapper

··· 1 - #!/bin/sh 2 - 3 - # Execute the knot keys command with proper shell context 4 - exec /bin/sh -c '/usr/bin/knot keys -output authorized-keys \ 5 - -internal-api "http://${KNOT_SERVER_INTERNAL_LISTEN_ADDR:-localhost:5444}" \ 6 - -git-dir "${KNOT_REPO_SCAN_PATH:-/home/git/repositories}" \ 7 - -log-path "/tmp/knotguard.log"' 8 -

-3

knot/rootfs/etc/ssh/sshd_config.d/authorized_keys_command.conf

··· 1 - Match User git 2 - AuthorizedKeysCommand /usr/bin/knot keys -o authorized-keys -git-dir /home/git/repositories 3 - AuthorizedKeysCommandUser nobody

-9

knot/rootfs/etc/ssh/sshd_config.d/tangled_sshd.conf

··· 1 - HostKey /etc/ssh/keys/ssh_host_rsa_key 2 - HostKey /etc/ssh/keys/ssh_host_ecdsa_key 3 - HostKey /etc/ssh/keys/ssh_host_ed25519_key 4 - 5 - PasswordAuthentication no 6 - 7 - Match User git 8 - AuthorizedKeysCommand /etc/s6-overlay/scripts/keys-wrapper 9 - AuthorizedKeysCommandUser nobody

Configure Feed

Configure Feed