kolla/docker/grafana/Dockerfile.j2
Marcin Juszkiewicz 542bbcdb6b grafana: ignore SHA1 gpg key on CentOS Stream 9 (and family)
RHEL 9 refuses to use SHA1 gpg keys. Grafana team still did not handled
key upgrade:

https://github.com/grafana/grafana/issues/41036

Change-Id: Id963271103ce1397b7a5498d032e8f797edfcc70
2022-09-27 08:17:15 +00:00

43 lines
1.2 KiB
Django/Jinja

FROM {{ namespace }}/{{ image_prefix }}base:{{ tag }}
{% block labels %}
LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build_date }}"
{% endblock %}
{% block grafana_header %}{% endblock %}
{% import "macros.j2" as macros with context %}
{{ macros.enable_extra_repos(['grafana']) }}
{% set grafana_packages = ['grafana'] %}
{{ macros.configure_user(name='grafana', homedir='/usr/share/grafana') }}
{# NOTE(hrw): RHEL 9 disallows SHA1 gpg keys but grafana still not updated #}
{% if base_package_type == 'rpm' %}
RUN update-crypto-policies --set DEFAULT:SHA1
{% endif %}
{{ macros.install_packages(grafana_packages | customizable("packages")) }}
WORKDIR /usr/share/grafana
COPY grafana_sudoers /etc/sudoers.d/kolla_grafana_sudoers
COPY extend_start.sh /usr/local/bin/kolla_extend_start
{% block grafana_plugins_install %}
RUN grafana-cli plugins install gnocchixyz-gnocchi-datasource \
&& grafana-cli plugins install monasca-datasource
{% endblock %}
RUN chmod 750 /etc/sudoers.d \
&& chmod 440 /etc/sudoers.d/kolla_grafana_sudoers \
&& chmod 644 /usr/local/bin/kolla_extend_start
{% block grafana_footer %}{% endblock %}
{% block footer %}{% endblock %}
USER grafana