waf (latest)

2025-01-15T19:48:25+03:00

Pull the image from the command line:

docker pull git.stit.tech/yarkylz/waf:latest

Digest:

sha256:e1955119b7fd2bce001f556feb247f7960b1e402d434a388c16712975826defe

For more information on the Container registry, see the documentation.

apko

ENV DEBIAN_FRONTEND=noninteractive

RUN /bin/sh -c apk update # buildkit

WORKDIR /tmp/pcre

ARG VERSION_PCRE=8.45

RUN |1 VERSION_PCRE=8.45 /bin/sh -c apk add --no-cache wget curl make file zlib-dev bzip2-dev readline-dev clang # buildkit

RUN |1 VERSION_PCRE=8.45 /bin/sh -c wget https://downloads.sourceforge.net/pcre/pcre-$VERSION_PCRE.tar.bz2 -q && tar xf pcre-$VERSION_PCRE.tar.bz2 && rm pcre-$VERSION_PCRE.tar.bz2 && cd pcre-$VERSION_PCRE && (CXX=/usr/bin/clang++ ./configure --enable-utf --enable-unicode-properties --enable-pcre16 --enable-pcre32 --enable-pcregrep-libz --enable-pcregrep-libbz2 --enable-pcretest-libreadline > /dev/null || cat config.log) && make -j$(nproc) > /dev/null && make install # buildkit

RUN |1 VERSION_PCRE=8.45 /bin/sh -c ldconfig # buildkit

WORKDIR /tmp/openresty

ARG VERSION_OPENRESTY=1.25.3.2

RUN |2 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 /bin/sh -c apk add --no-cache perl git openssl-dev # buildkit

RUN |2 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 /bin/sh -c wget -q -O openresty-source.tar.gz https://github.com/openresty/openresty/releases/download/v$VERSION_OPENRESTY/openresty-$VERSION_OPENRESTY.tar.gz && tar -xf openresty-source.tar.gz && rm openresty-source.tar.gz && cd /tmp/openresty/openresty-$VERSION_OPENRESTY && (./configure --with-pcre-jit --with-ipv6 --with-http_ssl_module > /dev/null || cat config.log) && make -j $(nproc) > /dev/null && make install # buildkit

ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/openresty/bin:/usr/local/openresty/nginx/sbin

RUN |2 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 /bin/sh -c echo 'export "PATH=$PATH:/usr/local/openresty/bin:/usr/local/openresty/nginx/sbin"' >> /etc/profile # buildkit

WORKDIR /tmp/luarocks

RUN |2 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 /bin/sh -c apk add --no-cache automake libtool autoconf # buildkit

RUN |2 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 /bin/sh -c curl -s https://luarocks.github.io/luarocks/releases/ | grep -Eo ".*luarocks-.*.tar.gz" | head -n1 | cut -d \" -f 2 | xargs -I {} curl -O https://luarocks.github.io/luarocks/releases/{} && tar zxpf luarocks-*.tar.gz && rm luarocks-*.tar.gz && cd luarocks-* && (./configure --prefix=/usr/local/openresty/luajit --with-lua=/usr/local/openresty/luajit/ --lua-suffix=jit --with-lua-include=/usr/local/openresty/luajit/include/luajit-2.1 > /dev/null || cat config.log) && make -j$(nproc) > /dev/null && make install # buildkit

WORKDIR /tmp/go

ARG VERSION_GO=1.23.0

RUN |3 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 /bin/sh -c apk add --no-cache pkgconf # buildkit

RUN |3 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 /bin/sh -c wget https://dl.google.com/go/go$VERSION_GO.linux-amd64.tar.gz -q && tar -C /usr/local -xzf go$VERSION_GO.linux-amd64.tar.gz && rm go$VERSION_GO.linux-amd64.tar.gz # buildkit

ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/openresty/bin:/usr/local/openresty/nginx/sbin:/usr/local/go/bin

RUN |3 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 /bin/sh -c echo 'export "PATH=$PATH:/usr/local/go/bin"' >> /etc/profile # buildkit

WORKDIR /tmp/coraza

RUN |3 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 /bin/sh -c git clone https://github.com/potats0/coraza.git . && ./build.sh && (CC=/usr/bin/clang ./configure CFLAGS="-Wno-error=incompatible-function-pointer-types $CFLAGS" > /dev/null || cat config.log) && make -j$(nproc) > /dev/null && make install # buildkit

WORKDIR /tmp/openappsec

ENV PYTHONUNBUFFERED=1

ARG VERSION_PYTHON=3.12

RUN |4 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 /bin/sh -c apk add --no-cache cmake python3=~$VERSION_PYTHON bison flex libmaxminddb-dev pcre2-dev curl-dev boost-dev gtest-dev hiredis-dev libxml2-dev util-linux-misc grep procps # buildkit

RUN |4 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 /bin/sh -c python -m ensurepip --upgrade # buildkit

ARG VERSION_YQ=4.45.1

RUN |5 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 /bin/sh -c mkdir -p /etc/cp/bin && wget -q https://github.com/mikefarah/yq/releases/download/v$VERSION_YQ/yq_linux_amd64 -O /etc/cp/bin/yq && chmod +x /etc/cp/bin/yq && cp /etc/cp/bin/yq /usr/bin/yq # buildkit

ARG VERSION_OPENAPPSEC=1.1.20

RUN |6 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 /bin/sh -c wget -q -O openappsec.zip https://github.com/openappsec/openappsec/archive/refs/tags/$VERSION_OPENAPPSEC.zip && unzip openappsec.zip && rm openappsec.zip && mv openappsec-$VERSION_OPENAPPSEC openappsec && cd openappsec && find . -type f -exec grep -q "boost::uuids::entropy_error" {} \; -exec sed -i '1i#include <boost/uuid/entropy_error.hpp>' {} \; && cmake -DCMAKE_INSTALL_PREFIX=build_out . && sed -i 's/\%require "3"/\%require "3.0"/g' external/graphqlparser/parser.ypp && make install && make package # buildkit

RUN |6 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 /bin/sh -c cd openappsec/build_out && cp lib/libshmem_ipc.so /usr/lib/ && cp lib/libshmem_ipc.so /usr/lib/ && cp lib/libcompression_utils.so /usr/lib/ && cp lib/libnginx_attachment_util.so /usr/lib/ && script -qfc "/bin/sh -xv ./install-cp-nano-agent.sh --install --hybrid_mode" /dev/null && ./install-cp-nano-service-http-transaction-handler.sh --install && ./install-cp-nano-attachment-registration-manager.sh --install # buildkit

WORKDIR /tmp/attachment

ARG COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c

RUN |7 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c /bin/sh -c script -c "/usr/local/openresty/nginx/sbin/nginx -V" -f /tmp/attachment/nginx.ver && git clone https://github.com/openappsec/attachment.git && cd attachment && git reset --hard $COMMIT_OAS_ATTACHMENT && ./attachments/nginx/ngx_module/nginx_version_configuration.sh --conf /tmp/attachment/nginx.ver build_out && cmake -DCMAKE_INSTALL_PREFIX=build_out . && make install && make package # buildkit

RUN |7 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c /bin/sh -c cd attachment/build_out && cp nginx_attachment/lib/libosrc_shmem_ipc.so /usr/lib/ && cp nginx_attachment/lib/libosrc_compression_utils.so /usr/lib/ && cp nginx_attachment/lib/libosrc_nginx_attachment_util.so /usr/lib/ && cp nginx_attachment/lib/libngx_module.so /usr/local/openresty/nginx/ # buildkit

RUN |7 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c /bin/sh -c /usr/local/openresty/luajit/bin/luarocks install luasocket --force && /usr/local/openresty/bin/opm get thibaultcha/lua-resty-mlcache && /usr/local/openresty/bin/opm get fffonion/lua-resty-worker-events && /usr/local/openresty/bin/opm get xiangnanscu/lua-resty-ipmatcher && /usr/local/openresty/bin/opm get anjia0532/lua-resty-maxminddb && /usr/local/openresty/bin/opm get cdbattags/lua-resty-jwt && /usr/local/openresty/bin/opm get valdemaras-pipiras/lua-resty-cookie && /usr/local/openresty/luajit/bin/luarocks install lua-resty-ngxvar && /usr/local/openresty/luajit/bin/luarocks install yyjson && /usr/local/openresty/luajit/bin/luarocks install regkex # buildkit

RUN |7 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c /bin/sh -c apk add ninja-build ragel coreutils sed # buildkit

ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/openresty/bin:/usr/local/openresty/nginx/sbin:/usr/local/go/bin:/usr/lib/ninja-build/bin

RUN |7 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c /bin/sh -c echo 'export "PATH=$PATH:/usr/lib/ninja-build/bin"' >> /etc/profile # buildkit

RUN |7 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c /bin/sh -c /usr/local/openresty/luajit/bin/luarocks install lua-resty-hs # buildkit

RUN |7 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c /bin/sh -c mkdir -p /etc/openresty/conf /etc/openresty/certs /etc/openresty/auth /etc/openresty/custom_rules /etc/openresty/custom_rules_compiled /etc/openresty/ipwhiteblacklist /etc/openresty/geowhiteblacklist # buildkit

RUN |7 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c /bin/sh -c rm -rf /tmp/* # buildkit

ARG VERSION_POSTGRESQL=17

RUN |8 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c VERSION_POSTGRESQL=17 /bin/sh -c apk add --no-cache openrc postgresql-17-client # buildkit

RUN |8 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c VERSION_POSTGRESQL=17 /bin/sh -c apk add --no-cache --allow-untrusted --repository=https://dl-cdn.alpinelinux.org/alpine/edge/main postgresql17-openrc # buildkit

RUN |8 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c VERSION_POSTGRESQL=17 /bin/sh -c apk add --no-cache --allow-untrusted --repository=https://dl-cdn.alpinelinux.org/alpine/edge/testing crowdsec-openrc # buildkit

COPY os_files/ / # buildkit

RUN |8 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c VERSION_POSTGRESQL=17 /bin/sh -c mkdir -p /opt/app # buildkit

COPY src/ /opt/app/ # buildkit

COPY requirements.txt /opt/app/requirements.txt # buildkit

WORKDIR /opt/app

RUN |8 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c VERSION_POSTGRESQL=17 /bin/sh -c python -m pip install -r requirements.txt # buildkit

COPY entrypoint.sh /entrypoint.sh # buildkit

RUN |8 VERSION_PCRE=8.45 VERSION_OPENRESTY=1.25.3.2 VERSION_GO=1.23.0 VERSION_PYTHON=3.12 VERSION_YQ=4.45.1 VERSION_OPENAPPSEC=1.1.20 COMMIT_OAS_ATTACHMENT=3c614f385a3e6e359d187b80c0e8bd6004210e0c VERSION_POSTGRESQL=17 /bin/sh -c chmod +x /entrypoint.sh # buildkit

ENTRYPOINT ["/entrypoint.sh"]

Key	Value
dev.chainguard.package.main
org.opencontainers.image.authors	Chainguard Team https://www.chainguard.dev/
org.opencontainers.image.created	2025-01-14T20:05:31Z
org.opencontainers.image.source	https://github.com/chainguard-images/images/tree/main/images/gcc-glibc
org.opencontainers.image.url	https://images.chainguard.dev/directory/image/gcc-glibc/overview
org.opencontainers.image.vendor	Chainguard