c007315764
Upversioning docker-distribution to v2.8.2+ds1-1 to be able to block
TLS1.0, TLS1.1 in registry-distribution.
Test Plan:
PASS: $downloader.
PASS: $build-pkgs docker-distribution --clean.
PASS: $build-image.
PASS: List docker-distribution package installed with apt list |
grep docker.
PASS: Verify if ports 9001 and 9002 are blocking tls1.0, 1.1 and
1.2 with nmap.
Closes-Bug: 2043217
Change-Id: Id0fc5f8794af54fc4b87b9cab6cec8b454775410
Signed-off-by: Karla Felix <karla.karolinenogueirafelix@windriver.com>
142 lines
6.7 KiB
Diff
142 lines
6.7 KiB
Diff
From c4682c6ef5deba520d2e6cf4ec24459c86eb6399 Mon Sep 17 00:00:00 2001
|
|
From: Karla Felix <karla.karolinenogueirafelix@windriver.com>
|
|
Date: Thu, 19 Oct 2023 14:08:31 -0300
|
|
Subject: [PATCH] code_patches
|
|
|
|
---
|
|
Dockerfile | 4 ++--
|
|
cmd/registry/config-example.yml | 2 +-
|
|
contrib/docker-integration/docker-compose.yml | 20 +++++++++----------
|
|
.../registry-config-notls.yml | 2 +-
|
|
.../tokenserver-oauth/registry-config.yml | 6 +++---
|
|
.../tokenserver/registry-config.yml | 6 +++---
|
|
6 files changed, 20 insertions(+), 20 deletions(-)
|
|
|
|
diff --git a/Dockerfile b/Dockerfile
|
|
index fb54b68..a8233ad 100644
|
|
--- a/Dockerfile
|
|
+++ b/Dockerfile
|
|
@@ -52,9 +52,9 @@ COPY --from=releaser /out /
|
|
|
|
FROM alpine:${ALPINE_VERSION}
|
|
RUN apk add --no-cache ca-certificates
|
|
-COPY cmd/registry/config-dev.yml /etc/docker/registry/config.yml
|
|
+COPY cmd/registry/config-dev.yml /etc/docker-distribution/registry/config.yml
|
|
COPY --from=binary /registry /bin/registry
|
|
VOLUME ["/var/lib/registry"]
|
|
EXPOSE 5000
|
|
ENTRYPOINT ["registry"]
|
|
-CMD ["serve", "/etc/docker/registry/config.yml"]
|
|
+CMD ["serve", "/etc/docker-distribution/registry/config.yml"]
|
|
diff --git a/cmd/registry/config-example.yml b/cmd/registry/config-example.yml
|
|
index d2aecbb..30c9f62 100644
|
|
--- a/cmd/registry/config-example.yml
|
|
+++ b/cmd/registry/config-example.yml
|
|
@@ -16,7 +16,7 @@ http:
|
|
auth:
|
|
htpasswd:
|
|
realm: basic-realm
|
|
- path: /etc/docker/registry
|
|
+ path: /etc/docker-distribution/registry
|
|
health:
|
|
storagedriver:
|
|
enabled: true
|
|
diff --git a/contrib/docker-integration/docker-compose.yml b/contrib/docker-integration/docker-compose.yml
|
|
index 374197a..bd981a6 100644
|
|
--- a/contrib/docker-integration/docker-compose.yml
|
|
+++ b/contrib/docker-integration/docker-compose.yml
|
|
@@ -37,10 +37,10 @@ registryv2token:
|
|
ports:
|
|
- "5000"
|
|
volumes:
|
|
- - ./tokenserver/registry-config.yml:/etc/docker/registry/config.yml
|
|
- - ./tokenserver/certs/localregistry.cert:/etc/docker/registry/localregistry.cert
|
|
- - ./tokenserver/certs/localregistry.key:/etc/docker/registry/localregistry.key
|
|
- - ./tokenserver/certs/signing.cert:/etc/docker/registry/tokenbundle.pem
|
|
+ - ./tokenserver/registry-config.yml:/etc/docker-distribution/registry/config.yml
|
|
+ - ./tokenserver/certs/localregistry.cert:/etc/docker-distribution/registry/localregistry.cert
|
|
+ - ./tokenserver/certs/localregistry.key:/etc/docker-distribution/registry/localregistry.key
|
|
+ - ./tokenserver/certs/signing.cert:/etc/docker-distribution/registry/tokenbundle.pem
|
|
tokenserver:
|
|
build: "tokenserver"
|
|
command: "--debug -addr 0.0.0.0:5556 -issuer registry-test -passwd .htpasswd -tlscert tls.cert -tlskey tls.key -key sign.key -realm http://auth.localregistry:5556"
|
|
@@ -51,17 +51,17 @@ registryv2tokenoauth:
|
|
ports:
|
|
- "5000"
|
|
volumes:
|
|
- - ./tokenserver-oauth/registry-config.yml:/etc/docker/registry/config.yml
|
|
- - ./tokenserver-oauth/certs/localregistry.cert:/etc/docker/registry/localregistry.cert
|
|
- - ./tokenserver-oauth/certs/localregistry.key:/etc/docker/registry/localregistry.key
|
|
- - ./tokenserver-oauth/certs/signing.cert:/etc/docker/registry/tokenbundle.pem
|
|
+ - ./tokenserver-oauth/registry-config.yml:/etc/docker-distribution/registry/config.yml
|
|
+ - ./tokenserver-oauth/certs/localregistry.cert:/etc/docker-distribution/registry/localregistry.cert
|
|
+ - ./tokenserver-oauth/certs/localregistry.key:/etc/docker-distribution/registry/localregistry.key
|
|
+ - ./tokenserver-oauth/certs/signing.cert:/etc/docker-distribution/registry/tokenbundle.pem
|
|
registryv2tokenoauthnotls:
|
|
image: golem-distribution:latest
|
|
ports:
|
|
- "5000"
|
|
volumes:
|
|
- - ./tokenserver-oauth/registry-config-notls.yml:/etc/docker/registry/config.yml
|
|
- - ./tokenserver-oauth/certs/signing.cert:/etc/docker/registry/tokenbundle.pem
|
|
+ - ./tokenserver-oauth/registry-config-notls.yml:/etc/docker-distribution/registry/config.yml
|
|
+ - ./tokenserver-oauth/certs/signing.cert:/etc/docker-distribution/registry/tokenbundle.pem
|
|
tokenserveroauth:
|
|
build: "tokenserver-oauth"
|
|
command: "--debug -addr 0.0.0.0:5559 -issuer registry-test -passwd .htpasswd -tlscert tls.cert -tlskey tls.key -key sign.key -realm http://auth.localregistry:5559 -enforce-class"
|
|
diff --git a/contrib/docker-integration/tokenserver-oauth/registry-config-notls.yml b/contrib/docker-integration/tokenserver-oauth/registry-config-notls.yml
|
|
index a700d08..bbde741 100644
|
|
--- a/contrib/docker-integration/tokenserver-oauth/registry-config-notls.yml
|
|
+++ b/contrib/docker-integration/tokenserver-oauth/registry-config-notls.yml
|
|
@@ -15,4 +15,4 @@ auth:
|
|
realm: "https://auth.localregistry:5559/token/"
|
|
issuer: "registry-test"
|
|
service: "registry-test"
|
|
- rootcertbundle: "/etc/docker/registry/tokenbundle.pem"
|
|
+ rootcertbundle: "/etc/docker-distribution/registry/tokenbundle.pem"
|
|
diff --git a/contrib/docker-integration/tokenserver-oauth/registry-config.yml b/contrib/docker-integration/tokenserver-oauth/registry-config.yml
|
|
index 226798b..253769f 100644
|
|
--- a/contrib/docker-integration/tokenserver-oauth/registry-config.yml
|
|
+++ b/contrib/docker-integration/tokenserver-oauth/registry-config.yml
|
|
@@ -8,8 +8,8 @@ storage:
|
|
http:
|
|
addr: 0.0.0.0:5000
|
|
tls:
|
|
- certificate: "/etc/docker/registry/localregistry.cert"
|
|
- key: "/etc/docker/registry/localregistry.key"
|
|
+ certificate: "/etc/docker-distribution/registry/localregistry.cert"
|
|
+ key: "/etc/docker-distribution/registry/localregistry.key"
|
|
compatibility:
|
|
schema1:
|
|
enabled: true
|
|
@@ -18,4 +18,4 @@ auth:
|
|
realm: "https://auth.localregistry:5559/token/"
|
|
issuer: "registry-test"
|
|
service: "registry-test"
|
|
- rootcertbundle: "/etc/docker/registry/tokenbundle.pem"
|
|
+ rootcertbundle: "/etc/docker-distribution/registry/tokenbundle.pem"
|
|
diff --git a/contrib/docker-integration/tokenserver/registry-config.yml b/contrib/docker-integration/tokenserver/registry-config.yml
|
|
index b9efdd3..11be98e 100644
|
|
--- a/contrib/docker-integration/tokenserver/registry-config.yml
|
|
+++ b/contrib/docker-integration/tokenserver/registry-config.yml
|
|
@@ -8,8 +8,8 @@ storage:
|
|
http:
|
|
addr: 0.0.0.0:5000
|
|
tls:
|
|
- certificate: "/etc/docker/registry/localregistry.cert"
|
|
- key: "/etc/docker/registry/localregistry.key"
|
|
+ certificate: "/etc/docker-distribution/registry/localregistry.cert"
|
|
+ key: "/etc/docker-distribution/registry/localregistry.key"
|
|
compatibility:
|
|
schema1:
|
|
enabled: true
|
|
@@ -18,4 +18,4 @@ auth:
|
|
realm: "https://auth.localregistry:5556/token/"
|
|
issuer: "registry-test"
|
|
service: "registry-test"
|
|
- rootcertbundle: "/etc/docker/registry/tokenbundle.pem"
|
|
+ rootcertbundle: "/etc/docker-distribution/registry/tokenbundle.pem"
|
|
--
|
|
2.25.1
|
|
|