fix: create container user home dir

Reviewed-on: #7
Co-authored-by: Renovator Bot <renovator@rknet.org>
Co-committed-by: Renovator Bot <renovator@rknet.org>

.woodpecker/build-container.yml

@@ -7,14 +7,15 @@ when:
 
 steps:
   - name: security-build
-    image: quay.io/thegeeklab/wp-docker-buildx:4
+    image: quay.io/thegeeklab/wp-docker-buildx:5
     settings:
       containerfile: Containerfile.multiarch
       output: type=oci,dest=oci/${CI_REPO_NAME},tar=false
       repo: thegeeklab/${CI_REPO_NAME}
 
   - name: security-scan
-    image: ghcr.io/aquasecurity/trivy
+    image: docker.io/aquasec/trivy
+    depends_on: security-build
     commands:
       - trivy -v
       - trivy image --input oci/${CI_REPO_NAME}
@@ -24,10 +25,11 @@ steps:
       TRIVY_NO_PROGRESS: "true"
       TRIVY_SEVERITY: HIGH,CRITICAL
       TRIVY_TIMEOUT: 1m
+      TRIVY_DB_REPOSITORY: docker.io/aquasec/trivy-db:2
 
   - name: publish-dockerhub
-    image: quay.io/thegeeklab/wp-docker-buildx:4
+    image: quay.io/thegeeklab/wp-docker-buildx:5
-    group: container
+    depends_on: security-scan
     settings:
       auto_tag: true
       containerfile: Containerfile.multiarch
@@ -47,8 +49,8 @@ steps:
           - ${CI_REPO_DEFAULT_BRANCH}
 
   - name: publish-quay
-    image: quay.io/thegeeklab/wp-docker-buildx:4
+    image: quay.io/thegeeklab/wp-docker-buildx:5
-    group: container
+    depends_on: security-scan
     settings:
       auto_tag: true
       containerfile: Containerfile.multiarch

.woodpecker/docs.yml

@@ -8,13 +8,11 @@ when:
 steps:
   - name: markdownlint
     image: quay.io/thegeeklab/markdownlint-cli
-    group: test
     commands:
       - markdownlint 'README.md'
 
   - name: spellcheck
     image: quay.io/thegeeklab/alpine-tools
-    group: test
     commands:
       - spellchecker --files '_docs/**/*.md' 'README.md' -d .dictionary -p spell indefinite-article syntax-urls
     environment:
@@ -22,18 +20,17 @@ steps:
 
   - name: link-validation
     image: docker.io/lycheeverse/lychee
-    group: test
     commands:
       - lychee --no-progress --format detailed README.md
 
   - name: pushrm-dockerhub
     image: docker.io/chko/docker-pushrm:1
-    secrets:
+    depends_on: [markdownlint, spellcheck, link-validation]
-      - source: docker_password
-        target: DOCKER_PASS
-      - source: docker_username
-        target: DOCKER_USER
     environment:
+      DOCKER_PASS:
+        from_secret: docker_password
+      DOCKER_USER:
+        from_secret: docker_username
       PUSHRM_FILE: README.md
       PUSHRM_SHORT: OpenLDAP server
       PUSHRM_TARGET: thegeeklab/${CI_REPO_NAME}
@@ -45,10 +42,10 @@ steps:
 
   - name: pushrm-quay
     image: docker.io/chko/docker-pushrm:1
-    secrets:
+    depends_on: [markdownlint, spellcheck, link-validation]
-      - source: quay_token
-        target: APIKEY__QUAY_IO
     environment:
+      APIKEY__QUAY_IO:
+        from_secret: quay_token
       PUSHRM_FILE: README.md
       PUSHRM_TARGET: quay.io/thegeeklab/${CI_REPO_NAME}
     when:

.woodpecker/notify.yml

@@ -13,12 +13,12 @@ steps:
     settings:
       homeserver:
         from_secret: matrix_homeserver
-      password:
+      room_id:
-        from_secret: matrix_password
+        from_secret: matrix_room_id
-      roomid:
+      user_id:
-        from_secret: matrix_roomid
+        from_secret: matrix_user_id
-      username:
+      access_token:
-        from_secret: matrix_username
+        from_secret: matrix_access_token
     when:
       - status: [success, failure]
 

Containerfile.multiarch

@@ -1,4 +1,4 @@
-FROM docker.io/alpine:3.20@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
+FROM docker.io/alpine:3.20@sha256:beefdbd8a1da6d2915566fde36db9db0b524eb737fc57cd1367effd16dc0d06d
 
 LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
 LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
@@ -11,20 +11,18 @@ ARG TARGETOS
 ARG TARGETARCH
 ARG TARGETVARIANT
 
-ARG CONTAINER_LIBRARY
-
 # renovate: datasource=repology depName=alpine_3_20/openldap versioning=loose
-ENV OPENLDAP_VERSION=2.6.7-r0
+ENV OPENLDAP_VERSION=2.6.8-r0
 
 RUN addgroup -g 1001 -S ldap && \
-    adduser -S -D -H -u 1001 -h /var/www -s /usr/lib/openldap -G ldap -g ldap ldap && \
+    adduser -S -D -H -u 1001 -h /openldap -G ldap -g ldap ldap && \
     apk --update add --virtual .build-deps curl && \
-    apk --update --no-cache add openldap=${OPENLDAP_VERSION} \
+    apk --update --no-cache add openldap \
-        openldap-back-ldap=${OPENLDAP_VERSION} \
+        openldap-back-ldap \
-        openldap-back-mdb=${OPENLDAP_VERSION} \
+        openldap-back-mdb \
-        openldap-overlay-rwm=${OPENLDAP_VERSION} \
+        openldap-overlay-rwm \
-        openldap-overlay-memberof=${OPENLDAP_VERSION} \
+        openldap-overlay-memberof \
-        openldap-clients=${OPENLDAP_VERSION} && \
+        openldap-clients && \
     mkdir -p /openldap/conf /openldap/data && \
     cp /etc/openldap/slapd.conf /openldap/conf/slapd.conf && \
     chown -R ldap:ldap /openldap && \
@@ -41,4 +39,4 @@ USER 1001
 STOPSIGNAL SIGTERM
 
 WORKDIR /openldap
-CMD ["/usr/sbin/slapd", "-d", "stats", "-u", "ldap", "-g", "ldap", "-f", "/openldap/conf/slapd.conf", "-h", "ldaps://", "ldap://"]
+CMD ["/usr/sbin/slapd", "-d", "stats", "-u", "ldap", "-g", "ldap", "-f", "/openldap/conf/slapd.conf", "-h", "ldaps:// ldap://"]