Chris Lu
caca3bf427
Enable FIPS 140-3 compliant crypto by default ( #7590 )
* Enable FIPS 140-3 compliant crypto by default
Addresses #6889
- Enable GOEXPERIMENT=systemcrypto by default in all Makefiles
- Enable GOEXPERIMENT=systemcrypto by default in all Dockerfiles
- Go 1.24+ has native FIPS 140-3 support via this setting
- Users can disable by setting GOEXPERIMENT= (empty)
Algorithms used (all FIPS approved):
- AES-256-GCM for data encryption
- AES-256-CTR for SSE-C
- HMAC-SHA256 for S3 signatures
- TLS 1.2/1.3 for transport encryption
* Fix: Remove invalid GOEXPERIMENT=systemcrypto
Go 1.24 uses GODEBUG=fips140=on at runtime, not GOEXPERIMENT at build time.
- Remove GOEXPERIMENT=systemcrypto from all Makefiles
- Remove GOEXPERIMENT=systemcrypto from all Dockerfiles
FIPS 140-3 mode can be enabled at runtime:
GODEBUG=fips140=on ./weed server ...
* Add FIPS 140-3 support enabled by default
Addresses #6889
- FIPS 140-3 mode is ON by default in Docker containers
- Sets GODEBUG=fips140=on via entrypoint.sh
- To disable: docker run -e GODEBUG=fips140=off ...
3 days ago
chrislu
626954b76c
unified builds
6 days ago
chrislu
5734223b2b
fix git checkout
6 days ago
Chris Lu
2a05af2e14
docker: fix /data ownership and permission ( #7451 )
* docker: fix /data ownership and permission
* chown if not owned by seaweed user
* fix github tests
* comments
* fix the unquoted variables in the case pattern matching
* Update docker/entrypoint.sh
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* Update docker/entrypoint.sh
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* Update entrypoint.sh
* Update entrypoint.sh
* Update docker/entrypoint.sh
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
---------
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
4 weeks ago
Chris Lu
8a032bf57d
fix add user command ( #7406 )
* fix add user command
* add folder /etc/seaweedfs
1 month ago
Chris Lu
b8bef0328b
docker containers: add non-root user ( #7399 )
* add non-root user
* using -g more clearly expresses the intent of setting the primary group for the new user
* no cache
* read only
* specific perm
1 month ago
chrislu
bd4891a117
change version directory
6 months ago
Konstantin Lebedev
c8b0a04409
golang up version to 1.24 ( #6724 )
7 months ago
chrislu
5e46960651
use golang:1.23 image
10 months ago
Chris Lu
2ad363d984
upgrade go, rocksdb
2 years ago
Konstantin Lebedev
ce9b822a8e
golang up version to 1.21.3 ( #4911 )
2 years ago
Chris Lu
bac45912e3
go 1.20 ( #4192 )
3 years ago
chrislu
466bbe4cdd
dockerfile fix directory
3 years ago
chrislu
8a61c124c7
go 1.19
3 years ago
chrislu
26dbc6c905
move to https://github.com/seaweedfs/seaweedfs
3 years ago
Konstantin Lebedev
8f762a1a06
build release containers for all tags
4 years ago
chrislu
8e98d7326b
docker move to go version 1.18
4 years ago
Chris Lu
947fe4cc97
docker: entry point change working directory from root to /data
4 years ago
Chris Lu
b485c905d4
docker image: build with arm also
fix https://github.com/chrislusf/seaweedfs/issues/2418
4 years ago
Chris Lu
7bf65c1e99
use go 1.17 for docker
4 years ago
Chris Lu
40945a60cf
use go 1.16.4 to build docker image
5 years ago
Chris Lu
216de41ed9
build static binary in docker images
fix https://github.com/chrislusf/seaweedfs/issues/1856
5 years ago
Chris Lu
9c56b46886
webdav: adds to docker file
5 years ago
Chris Lu
712563fbdd
dev cluster adds fuse mount
5 years ago
nivekuil
efd4253ab6
Add fuse to all dockerfiles
5 years ago
LazyDBA247-Anyvision
a37f069296
fix Argument Name, and use the correct one.
5 years ago
LazyDBA247-Anyvision
2ac31da89e
support build branches other than master
5 years ago
Chris Lu
b843358d65
adjust
5 years ago
Chris Lu
a47e8f4c06
adjust
5 years ago
Chris Lu
bff99ecc75
build add git version
5 years ago
Chris Lu
4dec5e0e4a
fix dockerhub build
6 years ago
Chris Lu
ca4ca1ae6f
update docker local dev env
6 years ago
Chris Lu
3f6e0e34cb
Revert "use docker built binaries for faster automated release"
This reverts commit 9863f51cc8 .
6 years ago
Chris Lu
9863f51cc8
use docker built binaries for faster automated release
6 years ago
Chris Lu
15ecf4e3bf
filer: default to leveldb2
7 years ago
Zicklag
3895c86812
Add cronjob Mode For The Docker Container
fixes #907
7 years ago
Chris Lu
a4e8aa98a0
weed server: mkdir first, and set the master ip address
fix https://github.com/chrislusf/seaweedfs/issues/885
7 years ago
Chris Lu
023f447d56
add directory /data/filerdb
fix https://github.com/chrislusf/seaweedfs/issues/885
7 years ago
Chris Lu
2b3cef7780
fix docker to work with master grpc port
7 years ago
Chris Lu
4b444d58ee
create filerdb folder
7 years ago
Chris Lu
13715fb851
adjust docker builds
7 years ago
Chris Lu
069c641d7c
use latest frolvlad/alpine-glibc
7 years ago
Chris Lu
3e899bfc68
add s3 for docker
7 years ago
Chris Lu
556382ff5f
adding basic grpc to volume server
7 years ago
jenkins.ow
bc025d5305
add filer to docker-compose and entrypoint, build from local Dockerfile
7 years ago
BruceWangNo1
7c1008e5e5
some minor fixes to docker/Dockerfile
8 years ago
vancepym
543476cba1
Update Dockerfile
Bump docker base image version to alpine 3.5
9 years ago
vancepym
4f28876c8d
Update Dockerfile
Replace with Alpine Linux based image
9 years ago
Chris Lu
47b6ce93f8
download from github release page
9 years ago
Amin Cheloh
54bd1c406a
Update Dockerfile
Move COPY /entrypoint.sh to bottom and make sure entrypoint.sh have execute permission
9 years ago