sonar-scanner-cli (latest)
Published 2026-10-24 22:22:44 +02:00 by chris
Installation
docker pull git.wagner.org.za/homelab/sonar-scanner-cli:latestsha256:23ca0f137965d9dff2198074043fd48d386280bc5d0ccac8c8349cea4cf096a9Image layers
| COPY /rootfs/ / # buildkit |
| CMD ["/bin/bash"] |
| ARG version=21.0.11.10-1 |
| ARG package_version=1 |
| RUN |2 version=21.0.11.10-1 package_version=1 /bin/sh -c set -eux && ARCH="$(rpm --query --queryformat='%{ARCH}' rpm)" && rpm --import file:///etc/pki/rpm-gpg/RPM-GPG-KEY-amazon-linux-2023 && echo "localpkg_gpgcheck=1" >> /etc/dnf/dnf.conf && CORRETO_TEMP=$(mktemp -d) && pushd ${CORRETO_TEMP} && RPM_LIST=("java-21-amazon-corretto-headless-$version.amzn2023.${package_version}.${ARCH}.rpm" "java-21-amazon-corretto-$version.amzn2023.${package_version}.${ARCH}.rpm" "java-21-amazon-corretto-devel-$version.amzn2023.${package_version}.${ARCH}.rpm" "java-21-amazon-corretto-jmods-$version.amzn2023.${package_version}.${ARCH}.rpm") && for rpm in ${RPM_LIST[@]}; do curl --fail -O https://corretto.aws/downloads/resources/$(echo $version | tr '-' '.')/${rpm} && rpm -K "${CORRETO_TEMP}/${rpm}" | grep -F "${CORRETO_TEMP}/${rpm}: digests signatures OK" || exit 1; done && dnf install -y ${CORRETO_TEMP}/*.rpm && popd && rm -rf /usr/lib/jvm/java-21-amazon-corretto.${ARCH}/lib/src.zip && rm -rf ${CORRETO_TEMP} && dnf clean all && sed -i '/localpkg_gpgcheck=1/d' /etc/dnf/dnf.conf # buildkit |
| ENV LANG=C.UTF-8 |
| ENV JAVA_HOME=/usr/lib/jvm/java-21-amazon-corretto |
| ARG SONAR_SCANNER_HOME=/opt/sonar-scanner |
| ENV HOME=/tmp XDG_CONFIG_HOME=/tmp SONAR_SCANNER_HOME=/opt/sonar-scanner SONAR_USER_HOME=/opt/sonar-scanner/.sonar PATH=/opt/sonar-scanner/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin SRC_PATH=/usr/src SCANNER_WORKDIR_PATH=/tmp/.scannerwork POETRY_CACHE_DIR=/opt/poetry/cache POETRY_VIRTUALENVS_PATH=/opt/poetry/virtualenvs LANG=C.UTF-8 LC_ALL=C.UTF-8 |
| COPY /opt/sonar-scanner /opt/sonar-scanner # buildkit |
| RUN |1 SONAR_SCANNER_HOME=/opt/sonar-scanner /bin/sh -c dnf install -y git && dnf install -y tar && dnf install -y nodejs22 && alternatives --set node /usr/bin/node-22 && dnf install -y python3.13 && ln -s /usr/bin/python3.13 /usr/local/bin/python3 && python3 -m ensurepip --upgrade && pip3 install --no-cache-dir poetry==2.3.2 && pip3 cache purge && dnf clean all && set -eux && groupadd --system --gid 1000 scanner-cli && useradd --system -d "${HOME}" --uid 1000 --gid scanner-cli scanner-cli && chown -R scanner-cli:scanner-cli "${SONAR_SCANNER_HOME}" "${SRC_PATH}" && mkdir -p "${SRC_PATH}" "${SONAR_USER_HOME}" "${SONAR_USER_HOME}/cache" "${SCANNER_WORKDIR_PATH}" "${POETRY_CACHE_DIR}" "${POETRY_VIRTUALENVS_PATH}" && chown -R scanner-cli:scanner-cli "${SONAR_SCANNER_HOME}" "${SRC_PATH}" "${SCANNER_WORKDIR_PATH}" "${POETRY_CACHE_DIR}" "${POETRY_VIRTUALENVS_PATH}" && chmod -R 555 "${SONAR_SCANNER_HOME}" && chmod -R 754 "${SRC_PATH}" "${SONAR_USER_HOME}" "${SCANNER_WORKDIR_PATH}" "${POETRY_CACHE_DIR}" "${POETRY_VIRTUALENVS_PATH}" && dnf upgrade -y --releasever=latest --security # buildkit |
| COPY --chown=scanner-cli:scanner-cli bin /usr/bin/ # buildkit |
| USER scanner-cli |
| WORKDIR /usr/src |
| ENTRYPOINT ["/usr/bin/entrypoint.sh"] |
| CMD ["sonar-scanner"] |