6 Commits
Author SHA1 Message Date
david 9a6faaeb53 update readme 2026-06-24 14:32:06 +02:00
david f7e95aa679 update for alpine 23
Build docker container / build (release) Has been cancelled
2026-06-24 12:14:17 +02:00
David Claeys a3b3eb2792 make 9.0 alpine 22
Build docker container / build (release) Successful in 1m32s
2025-11-26 17:32:18 +01:00
David Claeys f8492f5450 update readme
Build docker container / build (release) Successful in 2m52s
2025-11-26 17:28:42 +01:00
David Claeys 23b884767d create 9.0 branch
Build docker container / build (release) Successful in 1m31s
2025-11-26 16:31:40 +01:00
David Claeys ff0e8a0c7f make 8.0 branch
Build docker container / build (release) Successful in 1m36s
2025-11-26 16:24:10 +01:00
3 changed files with 17 additions and 127 deletions
+7 -100
View File
@@ -1,18 +1,6 @@
name: 'Build docker container' name: 'Build docker container'
on: on:
workflow_dispatch: release:
inputs:
branch:
description: "Select branch to build"
required: true
type: choice
options:
- 9.0-alpine-24
- 9.0-alpine-23
- 9.0-alpine-22
- 9.0-alpine-21
- 8.0-alpine-22
- 8.0-alpine-21
jobs: jobs:
build: build:
runs-on: ubuntu-latest runs-on: ubuntu-latest
@@ -22,83 +10,6 @@ jobs:
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v3 uses: actions/checkout@v3
- name: Set build variables for docker build
id: variables-test
uses: https://git.claeyscloud.com/david/gitea-actions/conditional-variables@main
with:
context: |
branch=${{ inputs.branch }}
rules: |
- conditions:
- branch == 9.0-alpine-24
- branch == 9.0-alpine-23
set:
DOTNET_SDK_VERSION=9.0
DOTNET_RUNTIME_VERSION=9.0.18
- conditions:
- branch == 9.0-alpine-24
set:
ALPINE_VERSION=24
- name: Dump contexts
env:
GITEA_CONTEXT: ${{ toJson(gitea) }}
JOB_CONTEXT: ${{ toJson(job) }}
RUNNER_CONTEXT: ${{ toJson(runner) }}
STRATEGY_CONTEXT: ${{ toJson(strategy) }}
MATRIX_CONTEXT: ${{ toJson(matrix) }}
run: |
echo "=== ENVIRONMENT VARIABLES ==="
echo '${{ toJson(steps.variables-test.outputs) }}'
# echo "$GITEA_CONTEXT"
# echo "$JOB_CONTEXT"
# echo "$RUNNER_CONTEXT"
# echo "$STRATEGY_CONTEXT"
# echo "$MATRIX_CONTEXT"
- name: Set build variables for docker build
id: variables
run: |
case "${{ inputs.branch }}" in
9.0-alpine-24)
echo "DOTNET_SDK_VERSION=9.0" >> $GITHUB_OUTPUT
echo "DOTNET_RUNTIME_VERSION=9.0.18" >> $GITHUB_OUTPUT
echo "ALPINE_VERSION=3.24" >> $GITHUB_OUTPUT
echo "IS_LATEST=true" >> $GITHUB_OUTPUT
;;
9.0-alpine-23)
echo "DOTNET_SDK_VERSION=9.0" >> $GITHUB_OUTPUT
echo "DOTNET_RUNTIME_VERSION=9.0.18" >> $GITHUB_OUTPUT
echo "ALPINE_VERSION=3.23" >> $GITHUB_OUTPUT
echo "IS_LATEST=false" >> $GITHUB_OUTPUT
;;
9.0-alpine-22)
echo "DOTNET_SDK_VERSION=9.0" >> $GITHUB_OUTPUT
echo "DOTNET_RUNTIME_VERSION=9.0" >> $GITHUB_OUTPUT
echo "ALPINE_VERSION=3.22" >> $GITHUB_OUTPUT
echo "IS_LATEST=false" >> $GITHUB_OUTPUT
;;
9.0-alpine-21)
echo "DOTNET_SDK_VERSION=9.0" >> $GITHUB_OUTPUT
echo "DOTNET_RUNTIME_VERSION=9.0" >> $GITHUB_OUTPUT
echo "ALPINE_VERSION=3.21" >> $GITHUB_OUTPUT
echo "IS_LATEST=false" >> $GITHUB_OUTPUT
;;
8.0-alpine-22)
echo "DOTNET_SDK_VERSION=8.0" >> $GITHUB_OUTPUT
echo "DOTNET_RUNTIME_VERSION=8.0" >> $GITHUB_OUTPUT
echo "ALPINE_VERSION=3.22" >> $GITHUB_OUTPUT
echo "IS_LATEST=false" >> $GITHUB_OUTPUT
;;
8.0-alpine-21)
echo "DOTNET_SDK_VERSION=8.0" >> $GITHUB_OUTPUT
echo "DOTNET_RUNTIME_VERSION=8.0" >> $GITHUB_OUTPUT
echo "ALPINE_VERSION=3.21" >> $GITHUB_OUTPUT
echo "IS_LATEST=false" >> $GITHUB_OUTPUT
;;
*)
echo "Unsupported branch"
exit 1
;;
esac
- name: Install Docker - name: Install Docker
run: | run: |
echo "Checking docker installation" echo "Checking docker installation"
@@ -115,19 +26,19 @@ jobs:
with: with:
registry: git.claeyscloud.com registry: git.claeyscloud.com
username: nologin username: nologin
password: ${{ secrets.PACKAGE_TOKEN }} password: ${{ secrets.PACKAGE_TOKEN }}
- name: Extract metadata (tags, labels) for Docker - name: Extract metadata (tags, labels) for Docker
id: meta id: meta
uses: docker/metadata-action@v5 uses: docker/metadata-action@v5
with: with:
labels: | labels: |
org.opencontainers.image.documentation=https://git.claeyscloud.com/david/net-base/README.md org.opencontainers.image.documentation=https://git.claeyscloud.com/david/epg-info-docker/src/branch/main/README.md
images: | images: |
git.claeyscloud.com/david/net-base git.claeyscloud.com/david/net-base
tags: | tags: |
type=raw,value=${{ inputs.branch }} type=semver,pattern={{raw}}
type=raw,value=latest,enable=${{ steps.variables.outputs.IS_LATEST == 'true' }} type=sha
type=sha type=semver,pattern={{version}}
- name: Generate random password for certificate - name: Generate random password for certificate
id: password id: password
run: run:
@@ -135,11 +46,7 @@ jobs:
- name: Build and push - name: Build and push
uses: https://github.com/docker/build-push-action@v5 uses: https://github.com/docker/build-push-action@v5
with: with:
build-args: | build-args: CERT_PASSWORD=${{ steps.password.outputs.secret }}
CERT_PASSWORD=${{ steps.password.outputs.secret }}
DOTNET_SDK_VERSION=${{ steps.variables.outputs.DOTNET_SDK_VERSION }}
DOTNET_RUNTIME_VERSION=${{ steps.variables.outputs.DOTNET_RUNTIME_VERSION }}
ALPINE_VERSION=${{ steps.variables.outputs.ALPINE_VERSION }}
context: . context: .
push: true push: true
tags: ${{ steps.meta.outputs.tags }} tags: ${{ steps.meta.outputs.tags }}
+5 -5
View File
@@ -1,9 +1,9 @@
ARG CERT_PASSWORD ARG CERT_PASSWORD
ARG DOTNET_SDK_VERSION=10.0.100 ARG DOTNET_SDK_VERSION=9.0.315
ARG DOTNET_RUNTIME_VERSION=10.0.0 ARG DOTNET_RUNTIME_VERSION=9.0.17
ARG ALPINE_VERSION=3.22 ARG ALPINE_VERSION=3.23
ARG CONFIG_DIRECTORY_ARG=/config ARG CONFIG_DIRECTORY_ARG=/config
FROM mcr.microsoft.com/dotnet/sdk:${DOTNET_SDK_VERSION}-alpine${ALPINE_VERSION} AS build-env FROM mcr.microsoft.com/dotnet/sdk:${DOTNET_SDK_VERSION}-alpine${ALPINE_VERSION}-amd64 AS build-env
ARG CONFIG_DIRECTORY_ARG ARG CONFIG_DIRECTORY_ARG
ENV CONFIG_DIRECTORY=$CONFIG_DIRECTORY_ARG ENV CONFIG_DIRECTORY=$CONFIG_DIRECTORY_ARG
ARG CERT_PASSWORD ARG CERT_PASSWORD
@@ -13,7 +13,7 @@ RUN mkdir $CONFIG_DIRECTORY \
&& rm -rf /var/cache/apk/* \ && rm -rf /var/cache/apk/* \
&& dotnet dev-certs https --export-path /config/aspnetapp.pem --password "$CERT_PASSWORD" --format PEM && dotnet dev-certs https --export-path /config/aspnetapp.pem --password "$CERT_PASSWORD" --format PEM
FROM mcr.microsoft.com/dotnet/aspnet:${DOTNET_RUNTIME_VERSION}-alpine${ALPINE_VERSION} FROM mcr.microsoft.com/dotnet/aspnet:${DOTNET_RUNTIME_VERSION}-alpine${ALPINE_VERSION}-amd64
ARG CONFIG_DIRECTORY_ARG ARG CONFIG_DIRECTORY_ARG
ENV CONFIG_DIRECTORY=$CONFIG_DIRECTORY_ARG ENV CONFIG_DIRECTORY=$CONFIG_DIRECTORY_ARG
ENV DOTNET_CLI_TELEMETRY_OPTOUT=1 ENV DOTNET_CLI_TELEMETRY_OPTOUT=1
+5 -22
View File
@@ -66,9 +66,9 @@ docker build --build-arg CERT_PASSWORD=supersecretpassword . -t net-base
| Argument | Description | Default | | Argument | Description | Default |
|-----------------------------------------------------|-------------------------------------------------------------------------|----------------------------------------------------------------------------------------------| |-----------------------------------------------------|-------------------------------------------------------------------------|----------------------------------------------------------------------------------------------|
| CERT_PASSWORD | The password for the generated certificate | N/A **(required)** | | CERT_PASSWORD | The password for the generated certificate | N/A **(required)** |
| DOTNET_SDK_VERSION | The [SDK](https://mcr.microsoft.com/en-us/artifact/mar/dotnet/sdk/tags) version used to generate the development certificate | 10.0.100 | | DOTNET_SDK_VERSION | The [SDK](https://mcr.microsoft.com/en-us/artifact/mar/dotnet/sdk/tags) version used to generate the development certificate | 9.0.315 |
| DOTNET_RUNTIME_VERSION | The [runtime](https://mcr.microsoft.com/en-us/artifact/mar/dotnet/aspnet/tags) version used as a base | 10.0.0 | | DOTNET_RUNTIME_VERSION | The [runtime](https://mcr.microsoft.com/en-us/artifact/mar/dotnet/aspnet/tags) version used as a base | 9.0.17 |
| ALPINE_VERSION | The version of [alpine linux](https://www.alpinelinux.org/) used as a base| 3.22 | | ALPINE_VERSION | The version of [alpine linux](https://www.alpinelinux.org/) used as a base| 3.23 |
## Security implications ## Security implications
@@ -93,25 +93,8 @@ Depending on your use-case you event might consider to use docker networking in
The included certificate is generated through the _dotnet dev-certs_ command. This is a very convenient and suitable way to generate development certificates through the dotnet SDK. The included certificate is generated through the _dotnet dev-certs_ command. This is a very convenient and suitable way to generate development certificates through the dotnet SDK.
The password used to generate the certificate is randomly generated through the `openssl rand -base64 12` at build time. The password used to generate the certificate is randomly generated through the `openssl rand -base64 12` at build time.
If you inspect the image layers you'll able to easily see it. The build agent used for the build is hosted on my own infrastructure but I don't have any access to it (neither do I intend to do so).<br/>
I think this is fine for development purposes and just want to get things up and running, although this is not recommended for production use at all. However if you feel uncomfortable with this fact, feel free to build the image yourself.
You can generate your own password and certificates in the following way :
```sh
# generate a random secure password
openssl rand -base64 12
# use the .net cli to generate your own certificates with your chosen password
dotnet dev-certs https --export-path /config/aspnetapp.pem --password "YOUR PASSWORD" --format PEM
```
After this you only need to map your own certificates with the **ASPNETCORE_Kestrel__Certificates__** variables.
### Versioning
Recently Microsoft decided to update the base images to alpine 3.22.
Before 2025-11-11 the latest supported version was alpine 3.21.
In order to support these changes the naming scheme will need to be changed.
Going forward specefic tags will be vailable for the different versions: by example `9.0.11-alpine-21` and `9.0.11-alpine-22`.
By default alpine 22 will be used and the older versions will be supported as long Microsoft does.
## FAQ ## FAQ