/bin/sh -c #(nop) ADD file:1ba1c97a10483a1aa59b260f54af828fa785d3aeee2ea06c4b428ac283d3ae2e in /

/bin/sh -c mv -f /etc/yum.repos.d/ubi.repo /tmp || :

/bin/sh -c #(nop) ADD file:df13b6a4fdeac4626ab7cd7e99d16d30edc6e3e5441295ae7691bee26604a5b1 in /tmp/tls-ca-bundle.pem

/bin/sh -c #(nop) ADD multi:d7c6a0863b5a33b3038eda733414ece7091372501b255c430df066f009e99c5c in /etc/yum.repos.d/

/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL com.redhat.component="ubi8-minimal-container" name="ubi8-minimal" version="8.10"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 8."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 8 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel8"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) ENV PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c rm -rf /var/log/*

/bin/sh -c #(nop) LABEL release=1255

/bin/sh -c #(nop) ADD file:5c3a4c0f156fb7be3636ca0c9632f7eb9bb6b78579df0201480bb9e9b4bac105 in /root/buildinfo/content_manifests/ubi8-minimal-container-8.10-1255.json

/bin/sh -c #(nop) ADD file:08d959c9a01a06268e68a7aa0e56b841b94f8162f805ac0dcb5cff2c645bd152 in /root/buildinfo/Dockerfile-ubi8-minimal-8.10-1255

/bin/sh -c #(nop) LABEL "distribution-scope"="public" "vendor"="Red Hat, Inc." "build-date"="2025-04-16T09:03:23" "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="4f8da2b64a13f2a264bd802d8909bf803211fb20" "io.k8s.description"="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly." "url"="https://access.redhat.com/containers/#/registry.access.redhat.com/ubi8-minimal/images/8.10-1255"

/bin/sh -c rm -f '/etc/yum.repos.d/repo-ba3f3.repo' '/etc/yum.repos.d/repo-c6679.repo'

/bin/sh -c rm -f /tmp/tls-ca-bundle.pem

/bin/sh -c mv -fZ /tmp/ubi.repo /etc/yum.repos.d/ubi.repo || :

RUN /bin/sh -c curl -fsSL https://packages.linbit.com/public/linbit-keyring.rpm -o /run/linbit-keyring.rpm && rpm -ivh /run/linbit-keyring.rpm && rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-linbit # buildkit

ARG VERSION=1.1.0

ARG RELEASE=1

RUN |2 VERSION=1.1.0 RELEASE=1 /bin/sh -c microdnf install -y ktls-utils-${VERSION}-${RELEASE} && microdnf clean all # buildkit

COPY --chmod=0600 tlshd.conf /etc/tlshd.conf # buildkit

CMD ["/usr/sbin/tlshd" "--stderr"]

LABEL name=ktls-utils

LABEL org.opencontainers.image.title=ktls-utils

LABEL vendor=LINBIT

LABEL org.opencontainers.image.vendor=LINBIT

LABEL version=1.1.0

LABEL org.opencontainers.image.version=1.1.0

LABEL release=1

LABEL org.opencontainers.image.release=1

LABEL summary=ktls-utils perform kernel-initiated TLS handshakes in user-space

LABEL description=In-kernel TLS consumers need a mechanism to perform TLS handshakes on a connected socket to negotiate TLS session parameters that can then be programmed into the kernel's TLS record protocol engine. This container provides a TLS handshake user agent that listens for kernel requests and then materializes a user space socket endpoint on which to perform these handshakes. The resulting negotiated session parameters are passed back to the kernel via standard kTLS socket options.

LABEL org.opencontainers.image.description=In-kernel TLS consumers need a mechanism to perform TLS handshakes on a connected socket to negotiate TLS session parameters that can then be programmed into the kernel's TLS record protocol engine. This container provides a TLS handshake user agent that listens for kernel requests and then materializes a user space socket endpoint on which to perform these handshakes. The resulting negotiated session parameters are passed back to the kernel via standard kTLS socket options.

LABEL org.opencontainers.image.licenses=GPL-2.0-only