Dockerfile

# cesi/scm
FROM registry.cloudogu.com/official/java:17.0.12-4

LABEL NAME="official/jenkins" \
      VERSION="2.462.3-2" \
      maintainer="hello@cloudogu.com"

    # jenkins home configuration
ENV JENKINS_HOME=/var/lib/jenkins \
    # temporary directory for builds
    WORKSPACE_TMP=/tmp \
    # mark as webapp for nginx
    SERVICE_TAGS=webapp \
    # Only mark port 8080 as webapp
    SERVICE_8080_TAGS="webapp" \
    SERVICE_8080_NAME="jenkins" \
    # jenkins version
    JENKINS_VERSION=2.462.3 \
    # SHA as of https://updates.jenkins.io/download/war/ for JENKINS_VERSION
    SHA256_JENKINS_WAR="3e53b52a816405e3b10ad07f1c48cd0cb5cb3f893207ef7f9de28415806b93c1" \
    # glibc for alpine version
    GLIBC_VERSION=2.35-r1 \
    SHA256_GLIB_APK="276f43ce9b2d5878422bca94ca94e882a7eb263abe171d233ac037201ffcaf06" \
    SHA256_GLIB_BIN_APK="ee13b7e482f92142d2bec7c4cf09ca908e6913d4782fa35691cad1d9c23f179a" \
    SHA256_GLIB_I18N_APK="94c6f9ed13903b59d5c524c0c2ec9a24ef1a4c2aaa93a8a158465a9e819a8065" \
    # additional java version for legacy builds
    ADDITIONAL_OPENJDK11_VERSION="11.0.25_p9-r0"


# Jenkins is ran with user `jenkins`, uid = 1000
# If you bind mount a volume from host/volume from a data container,
# ensure you use same uid
RUN set -o errexit \
 && set -o nounset \
 && set -o pipefail \
 && apk update \
 && apk upgrade \
 && addgroup -S -g 1000 jenkins \
 && adduser -S -h "$JENKINS_HOME" -s /bin/bash -G jenkins -u 1000 jenkins \
 # install coreutils, ttf-dejavu, openssh and scm clients
 # coreutils and ttf-dejavu is required because of java.awt.headless problem:
 # - https://wiki.jenkins.io/display/JENKINS/Jenkins+got+java.awt.headless+problem
 && apk add --no-cache coreutils ttf-dejavu openssh-client git subversion mercurial curl gcompat \
 && apk add openjdk11="$ADDITIONAL_OPENJDK11_VERSION" \
 # could use ADD but this one does not check Last-Modified header
 # see https://github.com/docker/docker/issues/8331
 && curl -L https://mirrors.jenkins-ci.org/war-stable/${JENKINS_VERSION}/jenkins.war -o /jenkins.war \
 && echo "${SHA256_JENKINS_WAR} *jenkins.war" | sha256sum -c - \
 # set git system ca-certificates
 && git config --system http.sslCaInfo /var/lib/jenkins/ca-certificates.crt \
 # set mercurial system ca-certificates
 && mkdir /etc/mercurial \
 && printf "[web]\ncacerts = /var/lib/jenkins/ca-certificates.crt\n" > /etc/mercurial/hgrc \
 # set subversion system ca-certificates
 && mkdir /etc/subversion \
 && printf "[global]\nssl-authority-files=/var/lib/jenkins/ca-certificates.crt\n" > /etc/subversion/server \
 # install glibc for alpine
 # make sure that jenkins is able to execute Oracle JDK, which can be installed over the global tool installer
 && apk add --no-cache libstdc++ gcompat

 RUN (/usr/glibc-compat/bin/localedef --force --inputfile POSIX --charmap UTF-8 C.UTF-8 || true )

 RUN set -o errexit \
  && set -o nounset \
  && set -o pipefail \
   echo "export LANG=C.UTF-8" > /etc/profile.d/locale.sh \
  # cleanup
 && apk del curl \
 && rm -rf /tmp/* /var/cache/apk/*

# Jenkins home directoy is a volume, so configuration and build history
# can be persisted and survive image upgrades
VOLUME /var/lib/jenkins

# add jenkins config file template, including changes for cas plugin and mailConfiguration
COPY ./resources /

# switch to jenkins user
USER jenkins

# for main web interface:
EXPOSE 8080 50000

HEALTHCHECK --interval=5s CMD doguctl healthy jenkins || exit 1

# start jenkins
CMD ["/startup.sh"]