mattgruter / dockerfile-artifactory Goto Github PK

For security reasons its best not to run apps in containers as root.

This image seems to be the most popular and active image for artifactory. However it installs artifactory version 3.9.2 which is far behind the current version 5.5.2.

Is there any reason not to upgrade to artifactory version 5.5.2?

Hi,

It's possible to change the war name for ROOT.war?

with that, no more http://repo.myserver.com/artifactory but more http://repo.myserver.com

more clean, no?

I assume I need to add a private CA to the java keystore, to avoid this error when adding a remote repository (https://www.jfrog.com/confluence/display/RTF/Configuring+Repositories) like https://private.example.com/maven/repository/snapshots/.

Connection failed with exception: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I tried creating a Dockerfile FROM mattgruter/artifactory with these additional steps:

ENV JAVA_CACERTS /usr/lib/jvm/java-7-openjdk-amd64/jre/lib/security/cacerts 
ADD MYCOMPANY_CA.pem ./ 
RUN keytool -noprompt -storepass changeit -keystore ${JAVA_CACERTS} -import -file MYCOMPANY_CA.pem -alias MYCOMPANY_CA 

but that didn't work because the ONBUILD step failed.
So, I just copied your Dockerfile and commented out the ONBUILD. Don't know of a better solution, maybe the ability to pass extra CA's via env var?

Unfortunately, artifactory still doesn't accept my private repo. I verified a simple java URL() request to https://private.example.com/maven/repository/snapshots/ fails before adding the private CA, and works after, so I guess I don't understand what cacerts artifactory is using. Anybody know?

Recently upgraded to 3.9.2 and noticed that artifactory expects an etc directory now. This is a very minor update: the readme and docker help page should indicate that you need to also mount /artifactory/etc onto a volume of some sort. Otherwise you get odd errors (failure to backup logback.xml on startup, only visible in tomcat's localhost logs), then the artifcatory webapp is not running and you get an infinite redirect to /artifcatory/artifactory/... :)

Hope this helps!