sourcegraph/wolfi-images/sourcegraph-template.yaml
Erik Seliger e9d7e95876
Upgrade git to 2.45.0 and unpin old cURL version (#62282)
We recently reverted the cURL version to 8.6.0 because it was incompatible with Git.
In the new Git release, there was a workaround put in that should make it work with latest cURL again before upstream cURL is fixed.
By that we can use the latest version again and don't need to ship a cURL with known CVEs in the next release.

Test plan:

Git integration tests are still working, E2E tests can still successfully look at repository contents, and will test that we can successfully clone the k8s repo which failed previously.
2024-04-30 17:52:52 +02:00

44 lines
1.2 KiB
YAML

# Base template used by all Sourcegraph images
# Add Wolfi + Sourcegraph repositories; install base set of packages
contents:
keyring:
- https://packages.wolfi.dev/os/wolfi-signing.rsa.pub
- https://packages.sgdev.org/sourcegraph-melange-prod.rsa.pub
repositories:
- https://packages.wolfi.dev/os
- '@sourcegraph https://packages.sgdev.org/main'
packages:
## Base set of packages
- wolfi-baselayout
- ca-certificates-bundle
- tzdata
# TODO: Dev tools - remove in future release
- busybox
- curl
- wget
- bind-tools
# Add sourcegraph user and group
# NOTE: Adding other accounts in files where sourcegraph-template.yaml is included will overwrite these users
accounts:
groups:
- groupname: sourcegraph
gid: 101
users:
- username: sourcegraph
uid: 100
gid: 101
# NOTE: This is ignored (see build output)
# To force amd64, first run `docker pull --platform linux/arm64 cgr.dev/chainguard/apko`
archs:
- amd64
# NOTE: These don't seem to be applied to the image
annotations:
org.opencontainers.image.url: https://sourcegraph.com/
org.opencontainers.image.source: https://github.com/sourcegraph/sourcegraph/
org.opencontainers.image.documentation: https://sourcegraph.com/docs/