/bin/sh -c #(nop) ADD file:cddc4c0cdda085a6a547a29986533bcbe4c6525d846c967aaa0839636e307239 in /

/bin/sh -c mv -f /etc/yum.repos.d/ubi.repo /tmp || :

/bin/sh -c #(nop) ADD file:df13b6a4fdeac4626ab7cd7e99d16d30edc6e3e5441295ae7691bee26604a5b1 in /tmp/tls-ca-bundle.pem

/bin/sh -c #(nop) ADD multi:d7c6a0863b5a33b3038eda733414ece7091372501b255c430df066f009e99c5c in /etc/yum.repos.d/

/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL com.redhat.component="ubi8-minimal-container" name="ubi8-minimal" version="8.10"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 8."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 8 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel8"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) ENV PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c rm -rf /var/log/*

/bin/sh -c #(nop) LABEL release=1255

/bin/sh -c #(nop) ADD file:6d63af03a5b8a80ecc41d3db0b899cba3fdb460b6722943b9b7f1875f1c277fa in /root/buildinfo/content_manifests/ubi8-minimal-container-8.10-1255.json

/bin/sh -c #(nop) ADD file:20a1511df16ccc72102a29659e5dc467d4aed44e07c3f91cd523db168cb3e20c in /root/buildinfo/Dockerfile-ubi8-minimal-8.10-1255

/bin/sh -c #(nop) LABEL "distribution-scope"="public" "vendor"="Red Hat, Inc." "build-date"="2025-04-16T09:03:23" "architecture"="aarch64" "vcs-type"="git" "vcs-ref"="4f8da2b64a13f2a264bd802d8909bf803211fb20" "io.k8s.description"="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly." "url"="https://access.redhat.com/containers/#/registry.access.redhat.com/ubi8-minimal/images/8.10-1255"

/bin/sh -c rm -f '/etc/yum.repos.d/repo-ba3f3.repo' '/etc/yum.repos.d/repo-c6679.repo'

/bin/sh -c rm -f /tmp/tls-ca-bundle.pem

/bin/sh -c mv -fZ /tmp/ubi.repo /etc/yum.repos.d/ubi.repo || :

RUN /bin/sh -c curl -fsSL https://packages.linbit.com/public/linbit-keyring.rpm -o /run/linbit-keyring.rpm && rpm -ivh /run/linbit-keyring.rpm && rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-linbit # buildkit

ARG VERSION=1.1.0

ARG RELEASE=1

RUN |2 VERSION=1.1.0 RELEASE=1 /bin/sh -c microdnf install -y ktls-utils-${VERSION}-${RELEASE} && microdnf clean all # buildkit

COPY --chmod=0600 tlshd.conf /etc/tlshd.conf # buildkit

CMD ["/usr/sbin/tlshd" "--stderr"]

LABEL name=ktls-utils

LABEL org.opencontainers.image.title=ktls-utils

LABEL vendor=LINBIT

LABEL org.opencontainers.image.vendor=LINBIT

LABEL version=1.1.0

LABEL org.opencontainers.image.version=1.1.0

LABEL release=1

LABEL org.opencontainers.image.release=1

LABEL summary=ktls-utils perform kernel-initiated TLS handshakes in user-space

LABEL description=In-kernel TLS consumers need a mechanism to perform TLS handshakes on a connected socket to negotiate TLS session parameters that can then be programmed into the kernel's TLS record protocol engine. This container provides a TLS handshake user agent that listens for kernel requests and then materializes a user space socket endpoint on which to perform these handshakes. The resulting negotiated session parameters are passed back to the kernel via standard kTLS socket options.

LABEL org.opencontainers.image.description=In-kernel TLS consumers need a mechanism to perform TLS handshakes on a connected socket to negotiate TLS session parameters that can then be programmed into the kernel's TLS record protocol engine. This container provides a TLS handshake user agent that listens for kernel requests and then materializes a user space socket endpoint on which to perform these handshakes. The resulting negotiated session parameters are passed back to the kernel via standard kTLS socket options.

LABEL org.opencontainers.image.licenses=GPL-2.0-only