PIE installable in a Dockerfile?

[asgrim]

Relates to existing PR #122

Should PIE be installable in a Dockerfile?

COPY --from=ghcr.io/php/pie:latest /pie /usr/bin/pie

Points to note:

• This is NOT an executable image (i.e. you would not be able to run docker run --rm ghcr.io/php/pie:latest) - this is only publishing the PHAR but contained within the Dockerfile.
• Alternate approaches would be using ADD , for example (note; untested) ADD https://github.com/php/pie/releases/latest/download/pie.phar /usr/bin/pie
• There is an open question about attestation; how to guarantee the image. One approach could be to use gh attestation verify (recent example for the PHAR itself in Add build provenance attestation to the release workflow #128 )

Currently the only supported distribution mechanism is downloading the PHAR from the https://github.com/php/pie/releases page. Other distribution mechanisms should be carefully evaluated on a case-by-case basis.