commit 9264d903bc98d94b7adccfdaa1e826fe205b858c · bladee.bsky.social/knot-container

+1 -1

10-tangled.conf

···

       1
       1
        
       Match User git

     

       2
       2
       -
           AuthorizedKeysCommand /usr/libexec/keyfetch -repoguard-path /usr/libexec/repoguard

     

       2
       2
       +
           AuthorizedKeysCommand /usr/libexec/knot keys -o authorized-keys

     

       3
       3
        
           AuthorizedKeysCommandUser nobody

+2 -5

Containerfile

···

       5
       5
        
       

     

       6
       6
        
       WORKDIR /core

     

       7
       7
        
       ENV CGO_ENABLED=1

     

       8
       8
       -
       RUN go build -o knot ./cmd/knotserver && \

     

       9
       9
       -
           go build -o keyfetch ./cmd/keyfetch && \

     

       10
       10
       -
           go build -o repoguard ./cmd/repoguard

     

       8
       8
       +
       RUN git checkout v1.8.0-alpha && \

     

       9
       9
       +
           go build -o knot ./cmd/knot

     

       11
       10
        
       

     

       12
       11
        
       FROM registry.fedoraproject.org/fedora:42 AS run

     

       13
       12
        
       

     

       14
       13
        
       RUN dnf install --assumeyes git openssh-server && \

     

       15
       14
        
           dnf clean all

     

       16
       15
        
       

     

       17
       17
       -
       COPY --from=build /core/keyfetch /usr/libexec/keyfetch

     

       18
       16
        
       COPY --from=build /core/knot /usr/libexec/knot

     

       19
       19
       -
       COPY --from=build /core/repoguard /usr/libexec/repoguard

     

       20
       17
        
       

     

       21
       18
        
       COPY ./10-tangled.conf /etc/ssh/sshd_config.d/10-tangled.conf

     

       22
       19

+1 -1

entrypoint.sh

···

       14
       14
        
       /usr/sbin/sshd -D -h /keys/ssh_host_ed25519_key &

     

       15
       15
        
       

     

       16
       16
        
       chown git:git /home/git

     

       17
       17
       -
       exec sudo -u git -E /usr/bin/sh -c "cd /home/git && /usr/libexec/knot \"$@\""

     

       17
       17
       +
       exec sudo -u git -E /usr/bin/sh -c "cd /home/git && /usr/libexec/knot server \"$@\""

+1 -1

knot.container

···

       7
       7
        
       Environment=APPVIEW_ENDPOINT=https://tangled.sh

     

       8
       8
        
       Environment=KNOT_REPO_SCAN_PATH=/home/git

     

       9
       9
        
       Environment=KNOT_SERVER_HOSTNAME=

     

       10
       10
       -
       Environment=KNOT_SERVER_SECRET=

     

       10
       10
       +
       Environment=KNOT_SERVER_OWNER=

     

       11
       11
        
       Environment=KNOT_SERVER_INTERNAL_LISTEN_ADDR=0.0.0.0:5444

     

       12
       12
        
       Environment=KNOT_SERVER_LISTEN_ADDR=0.0.0.0:5555

     

       13
       13
        
       PublishPort=0.0.0.0:10222:22/tcp