Block a user
logshield-engine-control-plane (candidate-eb9e1a7936f3)
Published 2026-08-13 20:46:03 +03:00 by karasik
Installation
docker pull git.personal-system.ru/karasik/logshield-engine-control-plane:candidate-eb9e1a7936f3sha256:a41c9629d0212c7b93adbde00bc48e82414a743af44b3fa500abae92003bb6a4
Images
| Digest | OS / Arch | Size |
|---|---|---|
| 810c58cf92 | linux/amd64 | 30 MiB |
Image Layers ( linux/amd64)
| ADD alpine-minirootfs-3.24.1-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| RUN /bin/sh -c set -eux; apk add --no-cache ca-certificates tzdata ; # buildkit |
| ENV GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305 |
| ENV PYTHON_VERSION=3.13.14 |
| ENV PYTHON_SHA256=639e43243c620a308f968213df9e00f2f8f62332f7adbaa7a7eeb9783057c690 |
| RUN /bin/sh -c set -eux; apk add --no-cache --virtual .build-deps bluez-dev bzip2-dev dpkg-dev dpkg findutils gcc gdbm-dev gnupg libc-dev libffi-dev libnsl-dev libtirpc-dev linux-headers make ncurses-dev openssl-dev pax-utils readline-dev sqlite-dev tar tcl-dev tk tk-dev util-linux-dev xz xz-dev zlib-dev ; wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz"; echo "$PYTHON_SHA256 *python.tar.xz" | sha256sum -c -; wget -O python.tar.xz.asc "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc"; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$GPG_KEY"; gpg --batch --verify python.tar.xz.asc python.tar.xz; gpgconf --kill all; rm -rf "$GNUPGHOME" python.tar.xz.asc; mkdir -p /usr/src/python; tar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; rm python.tar.xz; cd /usr/src/python; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; ./configure --build="$gnuArch" --enable-loadable-sqlite-extensions --enable-option-checking=fatal --enable-shared $(test "${gnuArch%%-*}" != 'riscv64' && echo '--with-lto') --with-ensurepip ; nproc="$(nproc)"; EXTRA_CFLAGS="-DTHREAD_STACK_SIZE=0x100000"; LDFLAGS="${LDFLAGS:-} -Wl,--strip-all"; arch="$(apk --print-arch)"; case "$arch" in x86_64|aarch64) EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer"; ;; x86) ;; *) EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer"; ;; esac; make -j "$nproc" "EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" "LDFLAGS=${LDFLAGS:-}" ; rm python; make -j "$nproc" "EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" "LDFLAGS=${LDFLAGS:-} -Wl,-rpath='\$\$ORIGIN/../lib'" python ; make install; cd /; rm -rf /usr/src/python; find /usr/local -depth \( \( -type d -a \( -name test -o -name tests -o -name idle_test \) \) -o \( -type f -a \( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' \) \) \) -exec rm -rf '{}' + ; find /usr/local -type f -executable -not \( -name '*tkinter*' \) -exec scanelf --needed --nobanner --format '%n#p' '{}' ';' | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' | xargs -rt apk add --no-network --virtual .python-rundeps ; apk del --no-network .build-deps; export PYTHONDONTWRITEBYTECODE=1; python3 --version; pip3 --version # buildkit |
| RUN /bin/sh -c set -eux; for src in idle3 pip3 pydoc3 python3 python3-config; do dst="$(echo "$src" | tr -d 3)"; [ -s "/usr/local/bin/$src" ]; [ ! -e "/usr/local/bin/$dst" ]; ln -svT "$src" "/usr/local/bin/$dst"; done # buildkit |
| CMD ["python3"] |
| ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 PYTHONPATH=/opt/logshield/services/control-plane |
| WORKDIR /opt/logshield/services/control-plane |
| COPY services/control-plane/requirements.lock ./requirements.lock # buildkit |
| RUN /bin/sh -c python -m pip install --disable-pip-version-check --no-cache-dir --no-compile --require-hashes -r requirements.lock # buildkit |
| RUN /bin/sh -c rm -rf /root/.cache /var/cache/apt /var/lib/apt/lists /usr/local/lib/python*/site-packages/pip /usr/local/lib/python*/site-packages/pip-* /usr/local/lib/python*/site-packages/setuptools /usr/local/lib/python*/site-packages/setuptools-* /usr/local/bin/pip /usr/local/bin/pip3 /usr/local/bin/pip3.* /usr/bin/apt /usr/bin/apt-* /usr/bin/dpkg /usr/bin/dpkg-* /sbin/apk requirements.lock && find / -xdev -type f \( -perm -4000 -o -perm -2000 \) -delete # buildkit |
| COPY services/control-plane/app ./app # buildkit |
| COPY contracts /opt/logshield/contracts # buildkit |
| USER 65532:65532 |
| EXPOSE [8000/tcp] |
| HEALTHCHECK &{["CMD" "python" "-B" "-c" "import json,urllib.request; r=urllib.request.urlopen('http://127.0.0.1:8000/health/ready',timeout=2); raise SystemExit(0 if r.status==200 and json.load(r).get('status')=='ready' else 1)"] "10s" "3s" "10s" "0s" '\x06'} |
| ENTRYPOINT ["python" "-B" "-m" "uvicorn" "app.main:create_app" "--factory" "--host" "0.0.0.0" "--port" "8000" "--workers" "1" "--no-access-log" "--proxy-headers" "--forwarded-allow-ips" "*"] |
Labels
| Key | Value |
|---|---|
| com.logshield.component | control-plane |
| com.logshield.owner | logshield-engine |
| com.logshield.phase | P12 |
| com.logshield.scope | p12-release-build |
| org.opencontainers.image.revision | eb9e1a7936f3f9d1e4799879ab7c4db54fde9cb5 |
| org.opencontainers.image.version | v3.1.1-rc |
Details
2026-08-13 20:46:03 +03:00
Versions (1)
View all
Container
1
OCI / Docker
candidate-eb9e1a7936f3
2026-08-13