45 Commits

Author SHA1 Message Date
Chris Lu
e225940202 docker: add curl for HTTPS healthcheck support (#7709)
Alpine's busybox wget does not support --ca-cert, --certificate, and
--private-key options required for HTTPS healthchecks with client
certificate authentication.

Adding curl to Docker images enables proper HTTPS healthchecks.

Fixes #7707
2025-12-10 12:54:20 -08:00
Chris Lu
caca3bf427 Enable FIPS 140-3 compliant crypto by default (#7590)
* Enable FIPS 140-3 compliant crypto by default

Addresses #6889

- Enable GOEXPERIMENT=systemcrypto by default in all Makefiles
- Enable GOEXPERIMENT=systemcrypto by default in all Dockerfiles
- Go 1.24+ has native FIPS 140-3 support via this setting
- Users can disable by setting GOEXPERIMENT= (empty)

Algorithms used (all FIPS approved):
- AES-256-GCM for data encryption
- AES-256-CTR for SSE-C
- HMAC-SHA256 for S3 signatures
- TLS 1.2/1.3 for transport encryption

* Fix: Remove invalid GOEXPERIMENT=systemcrypto

Go 1.24 uses GODEBUG=fips140=on at runtime, not GOEXPERIMENT at build time.

- Remove GOEXPERIMENT=systemcrypto from all Makefiles
- Remove GOEXPERIMENT=systemcrypto from all Dockerfiles

FIPS 140-3 mode can be enabled at runtime:
  GODEBUG=fips140=on ./weed server ...

* Add FIPS 140-3 support enabled by default

Addresses #6889

- FIPS 140-3 mode is ON by default in Docker containers
- Sets GODEBUG=fips140=on via entrypoint.sh
- To disable: docker run -e GODEBUG=fips140=off ...
2025-12-01 12:17:58 -08:00
chrislu
626954b76c unified builds
Some checks failed
go: build dev binaries / cleanup (push) Has been cancelled
docker: build dev containers / build-dev-containers (push) Has been cancelled
End to End / FUSE Mount (push) Has been cancelled
FUSE Integration Tests / FUSE Integration Testing (push) Has been cancelled
go: build binary / Build (push) Has been cancelled
Java Client Integration Tests / Java Integration Tests (11) (push) Has been cancelled
Java Client Integration Tests / Java Integration Tests (17) (push) Has been cancelled
Kafka Quick Test (Load Test with Schema Registry) / Kafka Client Load Test (Quick) (push) Has been cancelled
Kafka Gateway Tests / Kafka Unit Tests (unit-tests-1) (push) Has been cancelled
Kafka Gateway Tests / Kafka Integration Tests (Critical) (integration-1) (push) Has been cancelled
Kafka Gateway Tests / Kafka End-to-End Tests (with SMQ) (e2e-1) (push) Has been cancelled
Kafka Gateway Tests / Kafka Consumer Group Tests (Highly Isolated) (consumer-group-1) (push) Has been cancelled
Kafka Gateway Tests / Kafka Client Compatibility (with SMQ) (client-compat-1) (push) Has been cancelled
Kafka Gateway Tests / Kafka SMQ Integration Tests (Full Stack) (smq-integration-1) (push) Has been cancelled
Kafka Gateway Tests / Kafka Protocol Tests (Isolated) (protocol-1) (push) Has been cancelled
PostgreSQL Gateway Tests / PostgreSQL Basic Tests (push) Has been cancelled
S3 IAM Integration Tests / IAM Unit Tests (push) Has been cancelled
S3 IAM Integration Tests / S3 IAM Integration Tests (advanced) (push) Has been cancelled
S3 IAM Integration Tests / S3 IAM Integration Tests (basic) (push) Has been cancelled
S3 IAM Integration Tests / S3 IAM Integration Tests (policy-enforcement) (push) Has been cancelled
S3 IAM Integration Tests / S3 IAM Distributed Tests (push) Has been cancelled
S3 IAM Integration Tests / S3 IAM Performance Tests (push) Has been cancelled
S3 Keycloak Integration Tests / S3 Keycloak Integration Tests (push) Has been cancelled
S3 PyArrow Parquet Tests / PyArrow Parquet Tests (Python 3.11) (push) Has been cancelled
S3 PyArrow Parquet Tests / PyArrow Parquet Tests (Python 3.12) (push) Has been cancelled
S3 PyArrow Parquet Tests / PyArrow Parquet Tests (Python 3.9) (push) Has been cancelled
S3 PyArrow Parquet Tests / Go Unit Tests (Implicit Directory) (push) Has been cancelled
Ceph S3 tests / Basic S3 tests (KV store) (push) Has been cancelled
Ceph S3 tests / S3 Versioning & Object Lock tests (push) Has been cancelled
Ceph S3 tests / S3 CORS tests (push) Has been cancelled
Ceph S3 tests / SeaweedFS Custom S3 Copy tests (push) Has been cancelled
Ceph S3 tests / Basic S3 tests (SQL store) (push) Has been cancelled
test s3 over https using aws-cli / awscli-tests (push) Has been cancelled
go: build dev binaries / build_dev_linux_windows (amd64, linux) (push) Has been cancelled
go: build dev binaries / build_dev_linux_windows (amd64, windows) (push) Has been cancelled
go: build dev binaries / build_dev_darwin (amd64, darwin) (push) Has been cancelled
go: build dev binaries / build_dev_darwin (arm64, darwin) (push) Has been cancelled
2025-11-27 23:13:51 -08:00
chrislu
5734223b2b fix git checkout 2025-11-27 22:50:38 -08:00
Chris Lu
2a05af2e14 docker: fix /data ownership and permission (#7451)
* docker: fix /data ownership and permission

* chown if not owned by seaweed user

* fix github tests

* comments

* fix the unquoted variables in the case pattern matching

* Update docker/entrypoint.sh

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* Update docker/entrypoint.sh

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* Update entrypoint.sh

* Update entrypoint.sh

* Update docker/entrypoint.sh

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

---------

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-11-08 01:10:33 -08:00
Chris Lu
8a032bf57d fix add user command (#7406)
* fix add user command

* add folder /etc/seaweedfs
2025-10-29 19:41:04 -07:00
Chris Lu
b8bef0328b docker containers: add non-root user (#7399)
* add non-root user

* using -g more clearly expresses the intent of setting the primary group for the new user

* no cache

* read only

* specific perm
2025-10-28 14:58:10 -07:00
chrislu
bd4891a117 change version directory 2025-06-03 22:46:10 -07:00
Konstantin Lebedev
c8b0a04409 golang up version to 1.24 (#6724) 2025-04-23 15:49:28 -07:00
chrislu
5e46960651 use golang:1.23 image
Some checks are pending
go: build dev binaries / cleanup (push) Waiting to run
go: build dev binaries / build_dev_linux_windows (amd64, linux) (push) Blocked by required conditions
go: build dev binaries / build_dev_linux_windows (amd64, windows) (push) Blocked by required conditions
go: build dev binaries / build_dev_darwin (amd64, darwin) (push) Blocked by required conditions
go: build dev binaries / build_dev_darwin (arm64, darwin) (push) Blocked by required conditions
docker: build dev containers / build-dev-containers (push) Waiting to run
End to End / FUSE Mount (push) Waiting to run
go: build binary / Build (push) Waiting to run
Ceph S3 tests / Ceph S3 tests (push) Waiting to run
2025-02-04 09:01:44 -08:00
Chris Lu
2ad363d984 upgrade go, rocksdb 2024-02-07 00:41:03 -08:00
Konstantin Lebedev
ce9b822a8e golang up version to 1.21.3 (#4911) 2023-10-13 05:31:43 -07:00
Chris Lu
bac45912e3 go 1.20 (#4192) 2023-02-08 16:41:23 -08:00
chrislu
466bbe4cdd dockerfile fix directory 2022-09-01 09:43:41 -07:00
chrislu
8a61c124c7 go 1.19 2022-08-02 12:17:31 -07:00
chrislu
26dbc6c905 move to https://github.com/seaweedfs/seaweedfs 2022-07-29 00:17:28 -07:00
Konstantin Lebedev
8f762a1a06 build release containers for all tags 2022-05-14 18:40:32 +05:00
chrislu
8e98d7326b docker move to go version 1.18 2022-04-18 02:34:03 -07:00
Chris Lu
947fe4cc97 docker: entry point change working directory from root to /data 2021-11-12 17:21:49 -08:00
Chris Lu
b485c905d4 docker image: build with arm also
fix https://github.com/chrislusf/seaweedfs/issues/2418
2021-11-04 08:57:24 -07:00
Chris Lu
7bf65c1e99 use go 1.17 for docker 2021-08-16 18:47:46 -07:00
Chris Lu
40945a60cf use go 1.16.4 to build docker image 2021-05-10 00:13:36 -07:00
Chris Lu
216de41ed9 build static binary in docker images
fix https://github.com/chrislusf/seaweedfs/issues/1856
2021-03-10 12:17:31 -08:00
Chris Lu
9c56b46886 webdav: adds to docker file 2021-01-31 22:57:30 -08:00
Chris Lu
712563fbdd dev cluster adds fuse mount 2020-12-31 19:54:33 -08:00
nivekuil
efd4253ab6 Add fuse to all dockerfiles 2020-12-28 13:54:02 -08:00
LazyDBA247-Anyvision
a37f069296 fix Argument Name, and use the correct one. 2020-12-17 19:41:33 +02:00
LazyDBA247-Anyvision
2ac31da89e support build branches other than master 2020-12-15 14:07:13 +02:00
Chris Lu
b843358d65 adjust 2020-10-18 21:27:07 -07:00
Chris Lu
a47e8f4c06 adjust 2020-10-18 21:07:37 -07:00
Chris Lu
bff99ecc75 build add git version 2020-10-18 21:02:08 -07:00
Chris Lu
4dec5e0e4a fix dockerhub build 2020-03-01 18:23:07 -08:00
Chris Lu
ca4ca1ae6f update docker local dev env 2020-02-25 21:56:15 -08:00
Chris Lu
3f6e0e34cb Revert "use docker built binaries for faster automated release"
This reverts commit 9863f51cc8.
2020-01-25 08:17:59 -08:00
Chris Lu
9863f51cc8 use docker built binaries for faster automated release 2020-01-25 08:04:45 -08:00
Chris Lu
94526f8e10 2-stage docker dev image build
fix https://github.com/chrislusf/seaweedfs/issues/1047
2020-01-25 07:50:54 -08:00
Chris Lu
8e071c2fa6 docker: tweaking docker file 2020-01-24 17:56:46 -08:00
Chris Lu
2401168c13 fix dev build 2020-01-01 11:00:02 -08:00
Chris Lu
e40a051d4b fix dev docker build 2020-01-01 09:47:25 -08:00
Chris Lu
15ecf4e3bf filer: default to leveldb2 2019-06-30 00:44:57 -07:00
Chris Lu
5cbe7392a3 weed server: mkdir first 2019-03-15 00:33:51 -07:00
Chris Lu
023f447d56 add directory /data/filerdb
fix https://github.com/chrislusf/seaweedfs/issues/885
2019-03-14 23:48:53 -07:00
Chris Lu
2b3cef7780 fix docker to work with master grpc port 2019-01-18 14:32:02 -08:00
Chris Lu
68eacc2226 adjust local build 2018-12-27 16:41:22 -08:00
Chris Lu
39bf274a83 WIP 2018-12-16 22:39:39 -08:00