/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc." vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://www.redhat.com"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi8-container" name="ubi8" version="8.10" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of Red Hat Universal Base Image 8."

/bin/sh -c #(nop) LABEL description="The Universal Base Image is designed and engineered to be the base layer for all of your containerized applications, middleware and utilities. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image is designed and engineered to be the base layer for all of your containerized applications, middleware and utilities. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 8"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="base rhel8"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:c51bfb7a136f537a061f852f860f96731e93cc94345acdf4967dbd81b97d8f99 in /

/bin/sh -c #(nop) COPY file:afdf9d7142d806831a8f0b36122a4294ffe97fb9463ad8299eef9d7acd444874 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY file:610932c4f3ece1b211db84c168564e3568fafd78c55ad95692ef8ad75eb1f95a in /usr/share/buildinfo/content-sets.json

/bin/sh -c #(nop) LABEL "build-date"="2025-07-02T08:11:49" "architecture"="aarch64" "vcs-type"="git" "vcs-ref"="80904ba5d09aff23f1c0ee015a2c40c8fd067305" "release"="1751443566"

MAINTAINER Roland Kammerer <roland.kammerer@linbit.com>

RUN /bin/sh -c echo "skip_missing_names_on_install=no" >> /etc/yum.conf # buildkit

ENV LINSTOR_VERSION=1.31.3

ARG release=1

LABEL name=linstor-controller vendor=LINBIT version=1.31.3 release=1 summary=LINSTOR's controller component description=LINSTOR's controller component

COPY COPYING /licenses/gpl-3.0.txt # buildkit

COPY /home/makepkg/rpmbuild/RPMS/noarch/*.rpm /tmp/ # buildkit

RUN |1 release=1 /bin/sh -c yum -y update-minimal --security --sec-severity=Important --sec-severity=Critical && yum install -y which openssl && yum install -y /tmp/linstor-common*.rpm /tmp/linstor-controller*.rpm && rm /tmp/*.rpm && yum clean all -y # buildkit

ENV PSK=https://packages.linbit.com/package-signing-pubkey.asc

RUN |1 release=1 /bin/sh -c curl "$PSK" >/tmp/psk.asc && rpm --import /tmp/psk.asc && rm /tmp/psk.asc # buildkit

ENV INTERNAL_REPO=/etc/yum.repos.d/linbit-internal.repo

RUN |1 release=1 /bin/sh -c printf '[linbit-internal]\nname=LINBIT Internal - $basearch\nbaseurl=https://nexus.at.linbit.com/repository/packages-linbit-com/yum/rhel8/drbd-9/$basearch\nenabled=1\ngpgcheck=1\ngpgkey=%s\n' "$PSK" | tee "$INTERNAL_REPO" # buildkit

RUN |1 release=1 /bin/sh -c yum install -y linstor-gui linstor-client && yum clean all -y && rm "$INTERNAL_REPO" # buildkit

ARG ARCH=arm64

ARG K8S_AWAIT_ELECTION_VERSION=v0.4.1

RUN |3 release=1 ARCH=arm64 K8S_AWAIT_ELECTION_VERSION=v0.4.1 /bin/sh -c curl --fail --location "https://github.com/LINBIT/k8s-await-election/releases/download/${K8S_AWAIT_ELECTION_VERSION}/k8s-await-election-${K8S_AWAIT_ELECTION_VERSION}-linux-${ARCH}.tar.gz" | tar -xvz -C /usr/local/bin/ # buildkit

RUN |3 release=1 ARCH=arm64 K8S_AWAIT_ELECTION_VERSION=v0.4.1 /bin/sh -c curl --fail --location "https://dl.k8s.io/$(curl --fail --location https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/${ARCH}/kubectl" -o /usr/local/bin/kubectl && chmod +x /usr/local/bin/kubectl # buildkit

RUN |3 release=1 ARCH=arm64 K8S_AWAIT_ELECTION_VERSION=v0.4.1 /bin/sh -c groupadd linstor # buildkit

RUN |3 release=1 ARCH=arm64 K8S_AWAIT_ELECTION_VERSION=v0.4.1 /bin/sh -c useradd -m -g linstor linstor # buildkit

RUN |3 release=1 ARCH=arm64 K8S_AWAIT_ELECTION_VERSION=v0.4.1 /bin/sh -c mkdir /var/log/linstor-controller # buildkit

RUN |3 release=1 ARCH=arm64 K8S_AWAIT_ELECTION_VERSION=v0.4.1 /bin/sh -c chown -R root:linstor /etc/linstor /var/lib/linstor /var/log/linstor-controller # buildkit

RUN |3 release=1 ARCH=arm64 K8S_AWAIT_ELECTION_VERSION=v0.4.1 /bin/sh -c chmod g+w /etc/linstor /var/lib/linstor /var/log/linstor-controller # buildkit

RUN |3 release=1 ARCH=arm64 K8S_AWAIT_ELECTION_VERSION=v0.4.1 /bin/sh -c sed -i 's#<!-- <appender-ref ref="FILE" /> -->#<appender-ref ref="FILE" />#' /usr/share/linstor-server/lib/conf/logback.xml # buildkit

EXPOSE map[3370/tcp:{} 3371/tcp:{}]

COPY scripts/entry.sh / # buildkit

USER linstor

CMD ["startController"]

ENTRYPOINT ["/usr/local/bin/k8s-await-election" "/entry.sh"]