bpfman-operator/Containerfile.bpfman-agent.openshift at main · openshift/bpfman-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
ARG BUILDVERSION

# Build the manager binary
ARG BUILDPLATFORM

FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:9.8-1783442369 AS bpfman-agent-build
ARG BUILDVERSION

# The following ARGs are set internally by docker/build-push-action in github actions
ARG TARGETOS
ARG TARGETARCH
ARG TARGETPLATFORM

ARG BUILDPLATFORM

# Build metadata passed from the caller so that every platform in a
# multi-arch build gets identical version strings.  When not supplied
# (e.g. a plain "podman build") the values are computed locally.
ARG BUILD_VERSION=${BUILDVERSION}
ARG BUILD_COMMIT
ARG BUILD_DATE

RUN echo "TARGETOS=${TARGETOS}  TARGETARCH=${TARGETARCH}  BUILDPLATFORM=${BUILDPLATFORM}  TARGETPLATFORM=${TARGETPLATFORM}"

WORKDIR /usr/src/bpfman-operator

# Copy everything except what's excluded by the .dockerignore file.
COPY . .

# Build
# the GOARCH has not a default value to allow the binary be built according to the host where the command
# was called. For example, if we call make docker-build in a local env which has the Apple Silicon M1 SO
# the docker BUILDPLATFORM arg will be linux/arm64 when for Apple x86 it will be linux/amd64. Therefore,
# by leaving it empty we can ensure that the container and binary shipped on it will have the same platform.
ENV GOEXPERIMENT=strictfipsruntime
RUN : "${BUILD_VERSION:=$(git describe --tags --dirty --always --long 2>/dev/null || echo 0.0.0-unknown)}" && \
    : "${BUILD_COMMIT:=$(git rev-parse HEAD 2>/dev/null || echo unknown)}" && \
    : "${BUILD_DATE:=$(date -u +%Y-%m-%dT%H:%M:%SZ)}" && \
    VERSION_PKG="github.com/bpfman/bpfman-operator/internal/version" && \
    LDFLAGS="-X '${VERSION_PKG}.buildVersion=${BUILD_VERSION}' -X '${VERSION_PKG}.buildCommit=${BUILD_COMMIT}' -X '${VERSION_PKG}.buildDate=${BUILD_DATE}'" && \
    CGO_ENABLED=1 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -tags strictfipsruntime -mod vendor -ldflags "${LDFLAGS}" -o bpfman-agent ./cmd/bpfman-agent/main.go && \
    CGO_ENABLED=1 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -tags strictfipsruntime -mod vendor -ldflags "${LDFLAGS}" -o metrics-proxy ./cmd/metrics-proxy/main.go && \
    CGO_ENABLED=1 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -tags strictfipsruntime -mod vendor -ldflags "${LDFLAGS}" -o bpfman-crictl ./cmd/bpfman-crictl/main.go


FROM --platform=$TARGETPLATFORM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1782797275

ARG BUILDVERSION
ARG CPE_VERSION
ARG TARGETARCH
ARG TARGETPLATFORM

WORKDIR /
COPY --from=bpfman-agent-build /usr/src/bpfman-operator/bpfman-agent .
COPY --from=bpfman-agent-build /usr/src/bpfman-operator/metrics-proxy .
COPY --from=bpfman-agent-build /usr/src/bpfman-operator/bpfman-crictl .

COPY LICENSE /licenses/

LABEL name="bpfman/bpfman-agent" \
      com.redhat.component="bpfman-agent" \
      io.k8s.display-name="Bpfman Agent" \
      summary="Bpfman agent manages the eBPF programs lifecycle." \
      description="The bpfman-agent manage bpfman ebpf programs on every node." \
      io.k8s.description="The bpfman-agent manage bpfman programs on every node." \
      io.openshift.tags="bpfman-agent" \
      maintainer="support@redhat.com" \
      version=$BUILDVERSION \
      cpe="cpe:/a:redhat:openshift_bpfman_operator:${CPE_VERSION}::el9" \
      vendor="Red Hat, Inc."

ENTRYPOINT ["/bpfman-agent"]