ADD alpine-minirootfs-3.21.2-x86_64.tar.gz / # buildkit

CMD ["/bin/sh"]

RUN /bin/sh -c set -eux; apk add --no-cache ca-certificates ; # buildkit

RUN /bin/sh -c set -eux; addgroup --gid 99 --system haproxy; adduser --disabled-password --home /var/lib/haproxy --ingroup haproxy --no-create-home --system --uid 99 haproxy ; mkdir /var/lib/haproxy; chown haproxy:haproxy /var/lib/haproxy # buildkit

ENV HAPROXY_VERSION=3.1.2

ENV HAPROXY_URL=https://www.haproxy.org/download/3.1/src/haproxy-3.1.2.tar.gz

ENV HAPROXY_SHA256=af35dc8bf3193870b72276a63920974bef1405fc41038d545b86b641aa59f400

RUN /bin/sh -c set -eux; apk add --no-cache --virtual .build-deps gcc libc-dev linux-headers lua5.4-dev make openssl openssl-dev pcre2-dev readline-dev tar ; wget -O haproxy.tar.gz "$HAPROXY_URL"; echo "$HAPROXY_SHA256 *haproxy.tar.gz" | sha256sum -c; mkdir -p /usr/src/haproxy; tar -xzf haproxy.tar.gz -C /usr/src/haproxy --strip-components=1; rm haproxy.tar.gz; makeOpts=' TARGET=linux-musl USE_GETADDRINFO=1 USE_LUA=1 LUA_INC=/usr/include/lua5.4 LUA_LIB=/usr/lib/lua5.4 USE_OPENSSL=1 USE_PCRE2=1 USE_PCRE2_JIT=1 USE_PROMEX=1 EXTRA_OBJS=" " '; nproc="$(getconf _NPROCESSORS_ONLN)"; eval "make -C /usr/src/haproxy -j '$nproc' all $makeOpts"; eval "make -C /usr/src/haproxy install-bin $makeOpts"; mkdir -p /usr/local/etc/haproxy; cp -R /usr/src/haproxy/examples/errorfiles /usr/local/etc/haproxy/errors; rm -rf /usr/src/haproxy; runDeps="$( scanelf --needed --nobanner --format '%n#p' --recursive /usr/local | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' )"; apk add --no-network --virtual .haproxy-rundeps $runDeps; apk del --no-network .build-deps; haproxy -v # buildkit

STOPSIGNAL SIGUSR1

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER haproxy

WORKDIR /var/lib/haproxy

CMD ["haproxy" "-f" "/usr/local/etc/haproxy/haproxy.cfg"]

USER root

ENV HP_EXAPPS_ADDRESS=0.0.0.0:8780 HP_EXAPPS_HTTPS_ADDRESS=0.0.0.0:8781 HP_FRP_ADDRESS=0.0.0.0:8782 HP_SPOA_ADDRESS=127.0.0.1:9600 HP_FRP_DISABLE_TLS=false HP_TIMEOUT_CONNECT=30s HP_TIMEOUT_CLIENT=30s HP_TIMEOUT_SERVER=1800s NC_INSTANCE_URL= HP_TRUSTED_PROXY_IPS= HP_LOG_LEVEL=warning

RUN /bin/sh -c set -ex; apk add --no-cache git ca-certificates tzdata bash curl openssl bind-tools nano vim envsubst frp python3 py3-pip py3-aiohttp wget tar netcat-openbsd; chmod -R 777 /tmp; # buildkit

RUN /bin/sh -c pip install --break-system-packages pydantic==2.10.6 git+https://github.com/cloud-py-api/haproxy-python-spoa.git # buildkit

COPY --chmod=755 healthcheck.sh /healthcheck.sh # buildkit

COPY --chmod=775 start.sh /usr/local/bin/start.sh # buildkit

COPY --chmod=664 haproxy.cfg.template /haproxy.cfg.template # buildkit

COPY --chmod=664 spoe-agent.conf /etc/haproxy/spoe-agent.conf # buildkit

COPY --chmod=755 haproxy_agent.py /usr/local/bin/haproxy_agent.py # buildkit

ENTRYPOINT ["start.sh"]

HEALTHCHECK &{["CMD-SHELL" "/healthcheck.sh"] "10s" "10s" "0s" "0s" '\t'}

LABEL com.centurylinklabs.watchtower.enable=false

COPY /opt/omd/versions/default/share/check_mk/agents/linux/* /usr/local/bin/ # buildkit

COPY /opt/omd/versions/default/share/check_mk/agents/mk-job /usr/local/bin/mk-job # buildkit

COPY /opt/omd/versions/default/share/check_mk/agents/check_mk_agent.linux /usr/local/bin/check_mk_agent # buildkit

USER root

RUN /bin/sh -c sed -i 's#Hostname: $(uname -n)#Hostname: ${SWARMIT_HOSTNAME}#g' /usr/local/bin/check_mk_agent # buildkit

RUN /bin/sh -c sed -i 's#if inpath timeout; then#if inpath timeoutXXXXX; then#g' /usr/local/bin/check_mk_agent # buildkit

RUN /bin/sh -c mkdir /etc/check_mk && mkdir -p /var/lib/check_mk_agent/spool && mkdir /var/lib/check_mk_agent/cache && mkdir -p /usr/lib/check_mk_agent/plugins && mkdir /usr/lib/check_mk_agent/local # buildkit

RUN /bin/sh -c echo "[DOCKER]\nskip_sections: docker_container_agent\ncontainer_id: name\nbase_url: unix://var/run/docker.sock\n" > /etc/check_mk/docker.cfg # buildkit