3 Commits

Author	SHA1	Message	Date
Jeremy Lin	a2162f4d69	Allow listening on privileged ports (below 1024) as non-root ... This is done by running `setcap cap_net_bind_service=+ep` on the executable in the build stage (doing it in the runtime stage creates an extra copy of the executable that bloats the image). This only works when using the BuildKit-based builder, since the `COPY` instruction doesn't copy capabilities on the legacy builder.	2023-02-01 00:35:33 -08:00
Jeremy Lin	686474f815	Disable Hadolint check for consecutive RUN instructions (DL3059) ... This check doesn't seem to add enough value to justify the difficulties it tends to create when generating `RUN` instructions from a template.	2023-01-24 13:11:13 -08:00
Jeremy Lin	2c6bd8c9dc	Rename .buildx Dockerfiles to .buildkit ... This is a more accurate name, since these Dockerfiles require BuildKit, not Buildx.	2023-01-24 13:11:12 -08:00