Commit graph

9 commits

Author SHA1 Message Date
WofWca
37541868c5 Merge branch 'docker-nonroot' into 'main'
chore: Dockerfile: run proxy as non-root user

See merge request tpo/anti-censorship/pluggable-transports/snowflake!455
2025-07-24 16:25:49 +00:00
David Auer
1dc9947d2a Fix missing labels in Docker image
In a multi stage Docker build, the LABEL commands need to be applied in the final stage.
2025-07-08 20:58:09 +00:00
meskio
e345c3bac9
proxy: add country to prometheus metrics 2025-02-13 12:44:23 +01:00
WofWca
ee628c5df0 chore: Dockerfile: run proxy as non-root user
I believe this might have a potential to affect existing setups,
e.g. if they use a privileged port for `--metrics-port`
or `--ephemeral-ports-range`.

But it should work fine with our currently recommended
`docker-compose.yml`:
https://gitlab.torproject.org/tpo/anti-censorship/docker-snowflake-proxy/-/blob/main/docker-compose.yml

Related: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40328
2024-12-07 16:32:46 +04:00
Renovate Bot
f6320e42f0 chore(deps): update docker.io/library/golang docker tag to v1.23 2024-08-22 05:12:30 +00:00
Renovate Bot
52fcd3d58a chore(deps): update docker.io/library/golang docker tag to v1.22 2024-03-12 09:29:03 +00:00
Micah Anderson
9b689a105e Build multi-arch image.
This will build only those architectures that we have runners to build on
2024-03-03 14:07:33 +00:00
Micah Anderson
913732356a Build multi-arch image.
This will build only those architectures that we have runners to build on
2024-03-03 14:07:33 +00:00
Micah Anderson
9175e86321 Automatically build container on release and push to our registry.
Now that Tor's gitlab has the container registry enabled, we can build a
snowflake container on release, and push the built container to the snowflake
registry.

This is accomplished without using privileged gitlab runners, via kaniko.

This would speed up snowflake updates for people running the docker
container. It would also mean that the 'docker-snowflake-proxy' project would no
longer need to exist.

Fixes docker-snowflake-proxy#10
Fixes docker-snowflake-proxy#13
2024-03-03 14:07:33 +00:00