Chris Lu
e225940202
docker: add curl for HTTPS healthcheck support ( #7709 )
...
Alpine's busybox wget does not support --ca-cert, --certificate, and
--private-key options required for HTTPS healthchecks with client
certificate authentication.
Adding curl to Docker images enables proper HTTPS healthchecks.
Fixes #7707
2025-12-10 12:54:20 -08:00
Chris Lu
caca3bf427
Enable FIPS 140-3 compliant crypto by default ( #7590 )
...
* Enable FIPS 140-3 compliant crypto by default
Addresses #6889
- Enable GOEXPERIMENT=systemcrypto by default in all Makefiles
- Enable GOEXPERIMENT=systemcrypto by default in all Dockerfiles
- Go 1.24+ has native FIPS 140-3 support via this setting
- Users can disable by setting GOEXPERIMENT= (empty)
Algorithms used (all FIPS approved):
- AES-256-GCM for data encryption
- AES-256-CTR for SSE-C
- HMAC-SHA256 for S3 signatures
- TLS 1.2/1.3 for transport encryption
* Fix: Remove invalid GOEXPERIMENT=systemcrypto
Go 1.24 uses GODEBUG=fips140=on at runtime, not GOEXPERIMENT at build time.
- Remove GOEXPERIMENT=systemcrypto from all Makefiles
- Remove GOEXPERIMENT=systemcrypto from all Dockerfiles
FIPS 140-3 mode can be enabled at runtime:
GODEBUG=fips140=on ./weed server ...
* Add FIPS 140-3 support enabled by default
Addresses #6889
- FIPS 140-3 mode is ON by default in Docker containers
- Sets GODEBUG=fips140=on via entrypoint.sh
- To disable: docker run -e GODEBUG=fips140=off ...
2025-12-01 12:17:58 -08:00
chrislu
626954b76c
unified builds
go: build dev binaries / cleanup (push) Has been cancelled
docker: build dev containers / build-dev-containers (push) Has been cancelled
End to End / FUSE Mount (push) Has been cancelled
FUSE Integration Tests / FUSE Integration Testing (push) Has been cancelled
go: build binary / Build (push) Has been cancelled
Java Client Integration Tests / Java Integration Tests (11) (push) Has been cancelled
Java Client Integration Tests / Java Integration Tests (17) (push) Has been cancelled
Kafka Quick Test (Load Test with Schema Registry) / Kafka Client Load Test (Quick) (push) Has been cancelled
Kafka Gateway Tests / Kafka Unit Tests (unit-tests-1) (push) Has been cancelled
Kafka Gateway Tests / Kafka Integration Tests (Critical) (integration-1) (push) Has been cancelled
Kafka Gateway Tests / Kafka End-to-End Tests (with SMQ) (e2e-1) (push) Has been cancelled
Kafka Gateway Tests / Kafka Consumer Group Tests (Highly Isolated) (consumer-group-1) (push) Has been cancelled
Kafka Gateway Tests / Kafka Client Compatibility (with SMQ) (client-compat-1) (push) Has been cancelled
Kafka Gateway Tests / Kafka SMQ Integration Tests (Full Stack) (smq-integration-1) (push) Has been cancelled
Kafka Gateway Tests / Kafka Protocol Tests (Isolated) (protocol-1) (push) Has been cancelled
PostgreSQL Gateway Tests / PostgreSQL Basic Tests (push) Has been cancelled
S3 IAM Integration Tests / IAM Unit Tests (push) Has been cancelled
S3 IAM Integration Tests / S3 IAM Integration Tests (advanced) (push) Has been cancelled
S3 IAM Integration Tests / S3 IAM Integration Tests (basic) (push) Has been cancelled
S3 IAM Integration Tests / S3 IAM Integration Tests (policy-enforcement) (push) Has been cancelled
S3 IAM Integration Tests / S3 IAM Distributed Tests (push) Has been cancelled
S3 IAM Integration Tests / S3 IAM Performance Tests (push) Has been cancelled
S3 Keycloak Integration Tests / S3 Keycloak Integration Tests (push) Has been cancelled
S3 PyArrow Parquet Tests / PyArrow Parquet Tests (Python 3.11) (push) Has been cancelled
S3 PyArrow Parquet Tests / PyArrow Parquet Tests (Python 3.12) (push) Has been cancelled
S3 PyArrow Parquet Tests / PyArrow Parquet Tests (Python 3.9) (push) Has been cancelled
S3 PyArrow Parquet Tests / Go Unit Tests (Implicit Directory) (push) Has been cancelled
Ceph S3 tests / Basic S3 tests (KV store) (push) Has been cancelled
Ceph S3 tests / S3 Versioning & Object Lock tests (push) Has been cancelled
Ceph S3 tests / S3 CORS tests (push) Has been cancelled
Ceph S3 tests / SeaweedFS Custom S3 Copy tests (push) Has been cancelled
Ceph S3 tests / Basic S3 tests (SQL store) (push) Has been cancelled
test s3 over https using aws-cli / awscli-tests (push) Has been cancelled
go: build dev binaries / build_dev_linux_windows (amd64, linux) (push) Has been cancelled
go: build dev binaries / build_dev_linux_windows (amd64, windows) (push) Has been cancelled
go: build dev binaries / build_dev_darwin (amd64, darwin) (push) Has been cancelled
go: build dev binaries / build_dev_darwin (arm64, darwin) (push) Has been cancelled
2025-11-27 23:13:51 -08:00
chrislu
5734223b2b
fix git checkout
2025-11-27 22:50:38 -08:00
Chris Lu
2a05af2e14
docker: fix /data ownership and permission ( #7451 )
...
* docker: fix /data ownership and permission
* chown if not owned by seaweed user
* fix github tests
* comments
* fix the unquoted variables in the case pattern matching
* Update docker/entrypoint.sh
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* Update docker/entrypoint.sh
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* Update entrypoint.sh
* Update entrypoint.sh
* Update docker/entrypoint.sh
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
---------
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-11-08 01:10:33 -08:00
Chris Lu
8a032bf57d
fix add user command ( #7406 )
...
* fix add user command
* add folder /etc/seaweedfs
2025-10-29 19:41:04 -07:00
Chris Lu
b8bef0328b
docker containers: add non-root user ( #7399 )
...
* add non-root user
* using -g more clearly expresses the intent of setting the primary group for the new user
* no cache
* read only
* specific perm
2025-10-28 14:58:10 -07:00
chrislu
bd4891a117
change version directory
2025-06-03 22:46:10 -07:00
Konstantin Lebedev
c8b0a04409
golang up version to 1.24 ( #6724 )
2025-04-23 15:49:28 -07:00
chrislu
5e46960651
use golang:1.23 image
go: build dev binaries / cleanup (push) Waiting to run
go: build dev binaries / build_dev_linux_windows (amd64, linux) (push) Blocked by required conditions
go: build dev binaries / build_dev_linux_windows (amd64, windows) (push) Blocked by required conditions
go: build dev binaries / build_dev_darwin (amd64, darwin) (push) Blocked by required conditions
go: build dev binaries / build_dev_darwin (arm64, darwin) (push) Blocked by required conditions
docker: build dev containers / build-dev-containers (push) Waiting to run
End to End / FUSE Mount (push) Waiting to run
go: build binary / Build (push) Waiting to run
Ceph S3 tests / Ceph S3 tests (push) Waiting to run
2025-02-04 09:01:44 -08:00
Chris Lu
2ad363d984
upgrade go, rocksdb
2024-02-07 00:41:03 -08:00
Konstantin Lebedev
ce9b822a8e
golang up version to 1.21.3 ( #4911 )
2023-10-13 05:31:43 -07:00
Chris Lu
bac45912e3
go 1.20 ( #4192 )
2023-02-08 16:41:23 -08:00
chrislu
466bbe4cdd
dockerfile fix directory
2022-09-01 09:43:41 -07:00
chrislu
8a61c124c7
go 1.19
2022-08-02 12:17:31 -07:00
chrislu
26dbc6c905
move to https://github.com/seaweedfs/seaweedfs
2022-07-29 00:17:28 -07:00
Konstantin Lebedev
8f762a1a06
build release containers for all tags
2022-05-14 18:40:32 +05:00
chrislu
8e98d7326b
docker move to go version 1.18
2022-04-18 02:34:03 -07:00
Chris Lu
947fe4cc97
docker: entry point change working directory from root to /data
2021-11-12 17:21:49 -08:00
Chris Lu
b485c905d4
docker image: build with arm also
...
fix https://github.com/chrislusf/seaweedfs/issues/2418
2021-11-04 08:57:24 -07:00
Chris Lu
7bf65c1e99
use go 1.17 for docker
2021-08-16 18:47:46 -07:00
Chris Lu
40945a60cf
use go 1.16.4 to build docker image
2021-05-10 00:13:36 -07:00
Chris Lu
216de41ed9
build static binary in docker images
...
fix https://github.com/chrislusf/seaweedfs/issues/1856
2021-03-10 12:17:31 -08:00
Chris Lu
9c56b46886
webdav: adds to docker file
2021-01-31 22:57:30 -08:00
Chris Lu
712563fbdd
dev cluster adds fuse mount
2020-12-31 19:54:33 -08:00
nivekuil
efd4253ab6
Add fuse to all dockerfiles
2020-12-28 13:54:02 -08:00
LazyDBA247-Anyvision
a37f069296
fix Argument Name, and use the correct one.
2020-12-17 19:41:33 +02:00
LazyDBA247-Anyvision
2ac31da89e
support build branches other than master
2020-12-15 14:07:13 +02:00
Chris Lu
b843358d65
adjust
2020-10-18 21:27:07 -07:00
Chris Lu
a47e8f4c06
adjust
2020-10-18 21:07:37 -07:00
Chris Lu
bff99ecc75
build add git version
2020-10-18 21:02:08 -07:00
Chris Lu
4dec5e0e4a
fix dockerhub build
2020-03-01 18:23:07 -08:00
Chris Lu
ca4ca1ae6f
update docker local dev env
2020-02-25 21:56:15 -08:00
Chris Lu
3f6e0e34cb
Revert "use docker built binaries for faster automated release"
...
This reverts commit 9863f51cc8 .
2020-01-25 08:17:59 -08:00
Chris Lu
9863f51cc8
use docker built binaries for faster automated release
2020-01-25 08:04:45 -08:00
Chris Lu
94526f8e10
2-stage docker dev image build
...
fix https://github.com/chrislusf/seaweedfs/issues/1047
2020-01-25 07:50:54 -08:00
Chris Lu
8e071c2fa6
docker: tweaking docker file
2020-01-24 17:56:46 -08:00
Chris Lu
2401168c13
fix dev build
2020-01-01 11:00:02 -08:00
Chris Lu
e40a051d4b
fix dev docker build
2020-01-01 09:47:25 -08:00
Chris Lu
15ecf4e3bf
filer: default to leveldb2
2019-06-30 00:44:57 -07:00
Chris Lu
5cbe7392a3
weed server: mkdir first
2019-03-15 00:33:51 -07:00
Chris Lu
023f447d56
add directory /data/filerdb
...
fix https://github.com/chrislusf/seaweedfs/issues/885
2019-03-14 23:48:53 -07:00
Chris Lu
2b3cef7780
fix docker to work with master grpc port
2019-01-18 14:32:02 -08:00
Chris Lu
68eacc2226
adjust local build
2018-12-27 16:41:22 -08:00
Chris Lu
39bf274a83
WIP
2018-12-16 22:39:39 -08:00