blob: 28008f16d37d3299c17e7c15d9dce24c16016082 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
FROM {{ namespace }}/{{ image_prefix }}prometheus-base:{{ tag }}
LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build_date }}"
{% block prometheus_mtail_header %}{% endblock %}
{% if base_arch not in ['x86_64'] %}
RUN echo 'There are no mtail binaries for {{ base_arch }}' \
&& /bin/false
{% endif %}
{% block prometheus_mtail_version %}
ARG prometheus_mtail_version=v3.0.0-rc24
ARG prometheus_mtail_url=https://github.com/google/mtail/releases/download/${prometheus_mtail_version}/mtail_${prometheus_mtail_version}_linux_amd64
{% endblock %}
{% block prometheus_mtail_install %}
RUN curl -sSL -o /opt/mtail ${prometheus_mtail_url} \
&& chmod +x /opt/mtail
{% endblock %}
{% block prometheus_mtail_footer %}{% endblock %}
{% block footer %}{% endblock %}
# NOTE(dszumski): We run as root so that mtail can scrape root owned logs
# such as /var/log/secure which are mounted into the container as read only
# for auditing purposes. Longer term we should use a more secure mechanism
# for tailing these logs.
USER root
|