-
Notifications
You must be signed in to change notification settings - Fork 2
Expand file tree
/
Copy pathDockerfile.jenkins
More file actions
53 lines (41 loc) · 1.77 KB
/
Dockerfile.jenkins
File metadata and controls
53 lines (41 loc) · 1.77 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
FROM jenkins/jenkins:lts-jdk17
# Pass Host User, Group, and Docker Group IDs as build arguments
ARG UID=1000
ARG GID=1000
ARG DOCKER_GID=999
USER root
RUN apt-get update && apt-get install -y \
lsb-release \
sudo \
curl \
&& rm -rf /var/lib/apt/lists/*
# Add Docker's official GPG key and repository
RUN curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
RUN echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable" > /etc/apt/sources.list.d/docker.list
# Install Docker CLI
RUN apt-get update && apt-get install -y docker-ce-cli && rm -rf /var/lib/apt/lists/*
# Create docker group with host's docker group ID and add jenkins user to it
RUN if [ -n "$DOCKER_GID" ] && [ "$DOCKER_GID" != "0" ]; then \
if getent group $DOCKER_GID; then \
usermod -aG $(getent group $DOCKER_GID | cut -d: -f1) jenkins; \
else \
groupadd -g $DOCKER_GID docker && usermod -aG docker jenkins; \
fi; \
fi
# Adjust jenkins user/group IDs to match host
RUN if [ -n "$GID" ] && [ "$GID" != "0" ]; then \
existing_gid=$(getent group jenkins | cut -d: -f3); \
if [ "$existing_gid" != "$GID" ]; then \
groupmod -g $GID jenkins; \
fi; \
fi
RUN if [ -n "$UID" ] && [ "$UID" != "0" ]; then \
existing_uid=$(id -u jenkins); \
if [ "$existing_uid" != "$UID" ]; then \
usermod -u $UID jenkins; \
fi; \
fi
RUN echo "jenkins ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers
RUN mkdir -p /var/jenkins_home && chown jenkins:jenkins /var/jenkins_home
USER jenkins
ENV JAVA_OPTS="-Djenkins.install.runSetupWizard=false"