Test build for #2110

.obs/workflows.yml

@@ -237,6 +237,10 @@ staging_build:
         source_project: home:defolos:BCI:CR:Tumbleweed
         source_package: spack-image
         target_project: home:defolos:BCI:CR:Tumbleweed:Staging
+    - branch_package:
+        source_project: home:defolos:BCI:CR:Tumbleweed
+        source_package: stunnel-image
+        target_project: home:defolos:BCI:CR:Tumbleweed:Staging
     - branch_package:
         source_project: home:defolos:BCI:CR:Tumbleweed
         source_package: trivy-image
@@ -439,6 +443,9 @@ refresh_devel_BCI:
     - trigger_services:
         project: devel:BCI:Tumbleweed
         package: spack-image
+    - trigger_services:
+        project: devel:BCI:Tumbleweed
+        package: stunnel-image
     - trigger_services:
         project: devel:BCI:Tumbleweed
         package: trivy-image

stunnel-image/Dockerfile

@@ -0,0 +1,57 @@
+# SPDX-License-Identifier: MIT
+
+#     Copyright (c) 2024 SUSE LLC
+
+# All modifications and additions to the file contributed by third parties
+# remain the property of their copyright owners, unless otherwise agreed
+# upon.
+
+# The content of THIS FILE IS AUTOGENERATED and should not be manually modified.
+# It is maintained by the BCI team and generated by
+# https://github.com/SUSE/BCI-dockerfile-generator
+
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
+# You can contact the BCI team via https://github.com/SUSE/bci/discussions
+
+#!UseOBSRepositories
+
+#!BuildTag: opensuse/stunnel:%%stunnel_re%%-%RELEASE%
+#!BuildTag: opensuse/stunnel:%%stunnel_re%%
+#!BuildTag: opensuse/stunnel:5
+#!BuildTag: opensuse/stunnel:latest
+
+FROM opensuse/bci/bci-micro:latest AS target
+FROM opensuse/tumbleweed:latest AS builder
+COPY --from=target / /target
+
+RUN set -euo pipefail; \
+    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends stunnel; \
+    zypper -n clean; \
+    rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}
+# sanity check that the version from the tag is equal to the version of stunnel that we expect
+RUN set -euo pipefail; \
+    [ "$(rpm --root /target -q --qf '%{version}' stunnel | \
+    cut -d '.' -f -1)" = "5" ]
+FROM opensuse/bci/bci-micro:latest
+COPY --from=builder /target /
+# Define labels according to https://en.opensuse.org/Building_derived_containers
+# labelprefix=org.opensuse.application.stunnel
+LABEL org.opencontainers.image.title="openSUSE Tumbleweed Stunnel"
+LABEL org.opencontainers.image.description="Stunnel container based on the openSUSE Tumbleweed Base Container Image."
+LABEL org.opencontainers.image.version="%%stunnel_re%%"
+LABEL org.opencontainers.image.url="https://www.opensuse.org"
+LABEL org.opencontainers.image.created="%BUILDTIME%"
+LABEL org.opencontainers.image.vendor="openSUSE Project"
+LABEL org.opencontainers.image.source="%SOURCEURL%"
+LABEL org.opencontainers.image.ref.name="%%stunnel_re%%-%RELEASE%"
+LABEL org.opensuse.reference="registry.opensuse.org/opensuse/stunnel:%%stunnel_re%%-%RELEASE%"
+LABEL org.openbuildservice.disturl="%DISTURL%"
+LABEL org.opensuse.lifecycle-url="https://en.opensuse.org/Lifetime#openSUSE_BCI"
+LABEL org.opensuse.release-stage="released"
+# endlabelprefix
+LABEL io.artifacthub.package.readme-url="https://raw.githubusercontent.com/SUSE/BCI-dockerfile-generator/Tumbleweed/stunnel-image/README.md"
+COPY entrypoint.sh /usr/local/bin/
+RUN set -euo pipefail; chmod 0755 /usr/local/bin/entrypoint.sh;         chown --recursive stunnel /etc/stunnel
+ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
+CMD ["/usr/sbin/stunnel"]
+USER stunnel

stunnel-image/README.md

@@ -0,0 +1,60 @@
+# Stunnel Container Image
+
+![Redistributable](https://img.shields.io/badge/Redistributable-Yes-green)
+
+
+## Description
+
+Stunnel is an open-source multi-platform application used to provide a universal
+TLS/SSL tunneling service.
+
+
+## How to use this Image
+
+The Stunnel Container Image launches `stunnel` in its entrypoint using the
+default configuration shipped with the package. The container must be provided
+with a server certificate to establish TLS/SSL connections. It expects the
+server key in `/etc/stunnel/stunnel.key` and the certificate in
+`/etc/stunnel/stunnel.pem` or in the locations set in the environment variables
+`STUNNEL_KEY` and `STUNNEL_CERT`.
+
+The entrypoint can setup a single service via environment variables so that the
+user doesn't have to write and mount their own configuration file. This can be
+setup via the environment variables `STUNNEL_SERVICE_NAME`, `STUNNEL_ACCEPT` and
+`STUNNEL_CONNECT`:
+
+- `STUNNEL_SERVICE_NAME`: name or otherwise unique identifier of the service
+  (used for documentation purpose only)
+
+- `STUNNEL_ACCEPT`: address on which new connections should be accepted, can be
+  either a hostname + port number or just a port number (then localhost is
+  assumed as the host)
+
+- `STUNNEL_CONNECT`: address on which the un-encrypted service is listening and
+  to which stunnel connects, can be either a hostname + port number or just a
+  port number (then localhost is assumed as the host)
+
+
+For example to create an SSL endpoint for a webserver listening on port `8000`
+on localhost, execute:
+
+```bash
+podman run --rm -d \
+    -p 443:443 \
+    -e STUNNEL_SERVICE_NAME=webserver \
+    -e STUNNEL_ACCEPT=443 \
+    -e STUNNEL_CONNECT=8000 \
+    -v=path/to/server.pem:/etc/stunnel/stunnel.pem:Z \
+    -v=path/to/server.crt:/etc/stunnel/stunnel.crt:Z \
+    registry.opensuse.org/opensuse/stunnel:5
+```
+
+## Licensing
+
+`SPDX-License-Identifier: MIT`
+
+This documentation and the build recipe are licensed as MIT.
+The container itself contains various software components under various open source licenses listed in the associated
+Software Bill of Materials (SBOM).
+
+This image is based on [openSUSE Tumbleweed](https://get.opensuse.org/tumbleweed/).

stunnel-image/_service

@@ -0,0 +1,9 @@
+<services>
+  <service mode="buildtime" name="docker_label_helper"/>
+  <service mode="buildtime" name="kiwi_metainfo_helper"/>
+  <service mode="buildtime" name="replace_using_package_version">
+    <param name="file">Dockerfile</param>
+    <param name="regex">%%stunnel_re%%</param>
+    <param name="package">stunnel</param>
+  </service>
+</services>

stunnel-image/entrypoint.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+
+STUNNEL_CERT="${STUNNEL_CERT:-/etc/stunnel/stunnel.pem}"
+STUNNEL_KEY="${STUNNEL_KEY:-/etc/stunnel/stunnel.key}"
+
+conf="/etc/stunnel/conf.d/container-ssl.conf"
+echo "cert = ${STUNNEL_CERT}" > $conf
+echo "key = ${STUNNEL_KEY}" >> $conf
+
+
+if [[ -n "${STUNNEL_SERVICE_NAME}" ]] && [[ -n "${STUNNEL_ACCEPT}" ]] && [[ -n "${STUNNEL_CONNECT}" ]]; then
+    conf="/etc/stunnel/conf.d/container.conf"
+    echo "[${STUNNEL_SERVICE_NAME}]" > $conf
+    echo "accept = ${STUNNEL_ACCEPT}" >> $conf
+    echo "connect = ${STUNNEL_CONNECT}" >> $conf
+fi
+
+exec "$@"

stunnel-image/stunnel-image.changes

@@ -0,0 +1,4 @@
+-------------------------------------------------------------------
+Wed Dec 04 15:40:17 UTC 2024 - SUSE Update Bot <[email protected]>
+
+- First version of the Stunnel 5 BCI