Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 2 additions & 14 deletions Changelog
Original file line number Diff line number Diff line change
@@ -1,16 +1,4 @@
Version 3.10.2, 2025-01-30
Version 3.11dev3, 2025-02-20

Enhancements:
* Removed bash scripting including shaky logic
* NGINX Template including landing site if container is not ready yet
* More values for pi.cfg
* Removed unecessary binds
* New persistent logic, file location inside container (app, configuration,...)

Changed:
* Using entrypoint.py instead of bash script
* Using privacyIDEA application context calls for entrypoint.py (create_db...)

Fixes:
* Fix some minor problems
Release for testing

11 changes: 6 additions & 5 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,8 @@
FROM cgr.dev/chainguard/wolfi-base AS builder

ARG PYVERSION=3.12
ARG PI_VERSION=3.10.2
ARG PI_REQUIREMENTS=3.10.2
ARG PI_VERSION=3.11dev3
ARG PI_REQUIREMENTS=3.11dev3
ARG GUNICORN==23.0.0
ARG PSYCOPG2==2.9.10
ARG PYKCS11==1.5.14
Expand All @@ -23,14 +23,15 @@ RUN apk add python-${PYVERSION} py${PYVERSION}-pip python3-dev && \

USER nonroot
RUN python -m venv /privacyidea/venv
RUN pip install -r https://raw.githubusercontent.com/privacyidea/privacyidea/v${PI_REQUIREMENTS}/requirements.txt
RUN pip install psycopg2-binary==${PSYCOPG2} privacyidea==${PI_VERSION} gunicorn==${GUNICORN}
RUN pip install -r https://raw.githubusercontent.com/privacyidea/privacyidea/refs/tags/v${PI_REQUIREMENTS}/requirements.txt
RUN pip install psycopg2-binary==${PSYCOPG2} gunicorn==${GUNICORN}
RUN pip install -i https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple privacyIDEA==${PI_VERSION}
#RUN pip install -r https://raw.githubusercontent.com/privacyidea/privacyidea/v${PI_REQUIREMENTS}/requirements-kerberos.txt
# Workaroud for https://github.com/privacyidea/privacyidea/issues/4127
#RUN pip install -r https://raw.githubusercontent.com/privacyidea/privacyidea/v${PI_REQUIREMENTS}/requirements-hsm.txt
#RUN pip install pykcs11==${PYKCS11}

ADD https://raw.githubusercontent.com/privacyidea/privacyidea/v${PI_REQUIREMENTS}/deploy/privacyidea/NetKnights.pem /privacyidea/etc/persistent/
ADD https://raw.githubusercontent.com/privacyidea/privacyidea/refs/tags/v${PI_REQUIREMENTS}/deploy/privacyidea/NetKnights.pem /privacyidea/etc/persistent/

COPY conf/pi.cfg /privacyidea/etc/
COPY conf/logging.cfg /privacyidea/etc/
Expand Down
4 changes: 2 additions & 2 deletions Makefile
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
PI_VERSION := 3.10.2
PI_VERSION_BUILD := 3.10.2
PI_VERSION := "3.11dev3"
PI_VERSION_BUILD := "3.11dev3"
IMAGE_NAME := privacyidea-docker:${PI_VERSION}

BUILDER := docker build
Expand Down
8 changes: 4 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -66,7 +66,7 @@ Sample images from this project can be found here:
| [ghcr.io](https://github.com/gpappsoft/privacyidea-docker/pkgs/container/privacyidea-docker)| ```docker pull ghcr.io/gpappsoft/privacyidea-docker:latest```|

> [!Note]
> ```latest``` tagged image is maybe a pre- or development-release. Please use always a release number (like ```3.11```)
> ```latest``` tagged image is maybe a pre- or development-release. Please use always a release number (like ```3.11dev3```)

## Quickstart

Expand Down Expand Up @@ -119,7 +119,7 @@ You can use *Makefile* targets to build different images with different privacyI

#### Build a specific privacyIDEA version
```
make build PI_VERSION=3.11 PI_VERSION_BUILD=3.11
make build PI_VERSION=3.11dev3 PI_VERSION_BUILD=3.11dev3
```

#### Push to a registry
Expand All @@ -146,7 +146,7 @@ make distclean

| target | optional ARGS | description | example
---------|----------|---|---------
| ```build ``` | ```PI_VERSION```<br> ```IMAGE_NAME```|Build an image. Optional: specify the version, requirements version and image name| ```make build PI_VERSION=3.11 PI_VERSION_BUILD=3.11```|
| ```build ``` | ```PI_VERSION```<br> ```IMAGE_NAME```|Build an image. Optional: specify the version, requirements version and image name| ```make build PI_VERSION=3.11dev3 PI_VERSION_BUILD=3.11dev3```|
| ```push``` | ```REGISTRY```|Tag and push the image to the registry. Optional: specify the registry URI. Defaults to *localhost:5000*| ```make push REGISTRY=docker.io/gpappsoft/privacyidea-docker```|
| ```run``` | ```PORT``` <br> ```TAG``` |Run a standalone container with gunicorn and sqlite. Optional: specify the prefix tag of the container name and listen port. Defaults to *pi* and port *8080*| ```make run TAG=prod PORT=8888```|
| ```secret``` | |Generate secrets to use in an environment file | ```make secret```|
Expand Down Expand Up @@ -270,7 +270,7 @@ You can start the stack in the background with console detached using the **-d**

Full example including build with ```make```targets:
```
make cert build push stack PI_VERSION=3.11 PI_VERSION_BUILD=3.11 TAG=pidev
make cert build push stack PI_VERSION=3.11dev3 PI_VERSION_BUILD=3.11dev3 TAG=pidev
```
---
Now you can deploy additional containers like OpenLDAP for user realms or Owncloud as a client to test 2FA authentication.
Expand Down
2 changes: 1 addition & 1 deletion environment/application-dev.env
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
ENVIRONMENT="environment/application-dev.env"

# PrivacyIDEA
PI_VERSION=3.11
PI_VERSION=3.11dev3
PI_ADMIN=admin
PI_ADMIN_PASS=admin
PI_PORT=8080
Expand Down
2 changes: 1 addition & 1 deletion environment/application-prod.env
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
ENVIRONMENT="environment/application-prod.env"

# PrivacyIDEA
PI_VERSION=3.10.2
PI_VERSION=3.11dev3
PI_ADMIN=admin
PI_ADMIN_PASS=admin
PI_ADDRESS=0.0.0.0
Expand Down
2 changes: 1 addition & 1 deletion podman-run.sh
Original file line number Diff line number Diff line change
Expand Up @@ -65,7 +65,7 @@ podman run --pod pi -dt --name=privacyidea \
-e PI_PEPPER=/var/run/PI_PEPPER \
-e DB_HOST="localhost" \
-e DB_EXTRA_PARAMS="?charset=utf8" \
--restart=always gpappsoft/privacyidea-docker:3.11
--restart=always gpappsoft/privacyidea-docker:3.11dev3

# start reverse_proxy
podman run --pod pi -dt --name=reverse_proxy \
Expand Down