13 Commits

Author SHA1 Message Date
InfraOwner
0558ceaf41
[Snyk] Security upgrade ubuntu from latest to 22.10 (#3159)
<p>This PR was automatically created by Snyk using the credentials of a real user.</p><br />Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

#### Changes included in this PR 


- docker/Dockerfile

We recommend upgrading to `ubuntu:22.10`, as this image has only 7 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.



Some of the most important vulnerabilities in your base image include:

| Severity                                                                                                           | Issue                                                                     | Exploit Maturity      |
| :------:                                                                                                           | :----                                                                     | :---------------      |
| ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity")   | Integer Overflow or Wraparound <br/>[SNYK-UBUNTU2204-KRB5-3126899](https://snyk.io/vuln/SNYK-UBUNTU2204-KRB5-3126899)   | No Known Exploit   |
| ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity")   | Integer Overflow or Wraparound <br/>[SNYK-UBUNTU2204-KRB5-3126899](https://snyk.io/vuln/SNYK-UBUNTU2204-KRB5-3126899)   | No Known Exploit   |
| ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity")   | Access of Resource Using Incompatible Type (&#x27;Type Confusion&#x27;) <br/>[SNYK-UBUNTU2204-OPENSSL-3314792](https://snyk.io/vuln/SNYK-UBUNTU2204-OPENSSL-3314792)   | No Known Exploit   |
| ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity")   | CVE-2022-4415 <br/>[SNYK-UBUNTU2204-SYSTEMD-3180311](https://snyk.io/vuln/SNYK-UBUNTU2204-SYSTEMD-3180311)   | No Known Exploit   |
| ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity")   | Out-of-bounds Read <br/>[SNYK-UBUNTU2204-TAR-3261138](https://snyk.io/vuln/SNYK-UBUNTU2204-TAR-3261138)   | No Known Exploit   |



---

**Note:** _You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs._

For more information: <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiJlZmRlYTk2Yi1jZjgxLTQ4NjAtOTVhNC0wYzU4ZTcwZWI3N2EiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6ImVmZGVhOTZiLWNmODEtNDg2MC05NWE0LTBjNThlNzBlYjc3YSJ9fQ==" width="0" height="0"/>
🧐 [View latest project report](https://app.snyk.io/org/alcion/project/79a3dd06-1da0-4ec7-a75f-f901c70a6f83?utm_source&#x3D;github-enterprise&amp;utm_medium&#x3D;referral&amp;page&#x3D;fix-pr)

🛠 [Adjust project settings](https://app.snyk.io/org/alcion/project/79a3dd06-1da0-4ec7-a75f-f901c70a6f83?utm_source&#x3D;github-enterprise&amp;utm_medium&#x3D;referral&amp;page&#x3D;fix-pr/settings)

[//]: # 'snyk:metadata:{"prId":"efdea96b-cf81-4860-95a4-0c58e70eb77a","prPublicId":"efdea96b-cf81-4860-95a4-0c58e70eb77a","dependencies":[{"name":"ubuntu","from":"latest","to":"22.10"}],"packageManager":"dockerfile","projectPublicId":"79a3dd06-1da0-4ec7-a75f-f901c70a6f83","projectUrl":"https://app.snyk.io/org/alcion/project/79a3dd06-1da0-4ec7-a75f-f901c70a6f83?utm_source=github-enterprise&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-UBUNTU2204-TAR-3261138","SNYK-UBUNTU2204-OPENSSL-3314792","SNYK-UBUNTU2204-KRB5-3126899","SNYK-UBUNTU2204-SYSTEMD-3180311"],"upgrade":["SNYK-UBUNTU2204-KRB5-3126899","SNYK-UBUNTU2204-KRB5-3126899","SNYK-UBUNTU2204-OPENSSL-3314792","SNYK-UBUNTU2204-SYSTEMD-3180311","SNYK-UBUNTU2204-TAR-3261138"],"isBreakingChange":false,"env":"prod","prType":"fix","templateVariants":["updated-fix-title"],"priorityScoreList":[null,null,null,null],"remediationStrategy":"vuln"}'

---

**Learn how to fix vulnerabilities with free interactive lessons:**

 🦉 [Learn about vulnerability in an interactive lesson of Snyk Learn.](https://learn.snyk.io/?loc&#x3D;fix-pr)
2023-04-21 04:32:57 +00:00
ashmrtn
865edac9bd
Update to go1.19 for corso (#1632)
## Description

Required as some third party libraries are now requiring 1.19.

## Type of change

- [ ] 🌻 Feature
- [ ] 🐛 Bugfix
- [ ] 🗺️ Documentation
- [ ] 🤖 Test
- [ ] 💻 CI/Deployment
- [x] 🐹 Trivial/Minor

## Issue(s)

* closes #1629 

## Test Plan

- [x] 💪 Manual
- [ ]  Unit test
- [ ] 💚 E2E
2022-12-13 21:01:55 +00:00
Keepers
dfdd162943
quick fix on image/user pair for images (#961)
## Type of change

- [x] 🐛 Bugfix

## Test Plan

- [x] 💪 Manual
2022-09-27 01:21:26 +00:00
Keepers
e5ca159ad7
use alpine for dockerfile base images (#758)
## Description

Uses alpine in the base docker images, to gain access
to a shell within corso containers.

## Type of change

- [x] 🌻 Feature

## Issue(s)

* #573 

## Test Plan

- [x] 💪 Manual
- [ ]  Unit test
- [ ] 💚 E2E
2022-09-02 22:46:44 +00:00
Keepers
a9e66b0db4
Issue 570 deploy sep b (#719)
Recovery action after losing this commit upon merging `issue-570-deploy`.
2022-09-01 16:40:36 +00:00
Keepers
127b6d061a
introduce docker container production (#660)
Introduces the production of docker containers as a CI step.
Currently only provides a rolling-release version that builds
on every push to main.  Images are deployed to ghcr.io.

The PR includes two variations on building the images.  We'll
likely only want to stick with one or the other.
2022-09-01 15:06:57 +00:00
Sidhartha Mani
c5f152477d
cleanup build scripts and simplify build/build-container (#301) 2022-07-08 22:25:21 +00:00
Vaibhav Kamra
0707d00ab5
Add a Dockerfile for corso (#247)
Adds a Dockerfile under the docker to package the corso binary.

This currently requires the user to build the corso binary (for linux/amd64) in the build image
prior to building the docker image. Follow up PRs will introduce a Makefile.

Also moves the build image to the build folder and adds a couple of README.md files with
instructions.

Fixes #218
2022-06-28 12:15:30 -07:00
ashmrtn
4ac3aa08f0
Fix building base image on Mac. (#22)
Mac uses low group IDs for the default user, which would cause groupadd
to fail as the group already existed. Only make a new group if it
doesn't already exist.

This does raise other questions though as now we are technically having
the container run with a "services" group.
2022-05-09 17:20:03 -07:00
Ashlie Martinez
548ffb02ec Simple shell script to run dev container.
* Mounts the current repo's code in the proper golang path in the
  container
* Container will be destroyed when container is exited
* User will start in the repo's code directory in the container
2022-05-03 15:44:14 -07:00
Ashlie Martinez
9522a33ebe Script file to build a basic dev container image.
* New container will have deps known at the time the container was made
  * If deps change a lot, rebuild/save current container image as deps
    are outside the directory mount
* Deps are not explicitly listed in the container Dockerfile or script
  as go mod is expected to manage them for us
* Automatically creates a container user with UID/GID of the current
  user to avoid file ownership issues
2022-05-03 15:39:53 -07:00
Ashlie Martinez
6d9d4dc8c7 Add some information of note for later scripts.
Mostly using bash filepath mangling and known values to build up
information used to find the proper locations of golang code in a
container.
2022-05-03 15:38:43 -07:00
Ashlie Martinez
0af5f2f141 Very basic golang docker with new user.
* Expects go get/go mod to be used to handle application dependencies
* Expects users to use a volume mount to make code visible to the
  container
* Add a user (with the option of having the same UID/GID as current
  user) to avoid weird file owners when building things in the container
  as golang usually runs as root
2022-05-03 15:31:23 -07:00