infisical-standalone (sath-redis)

Published 2026-05-18 21:11:22 +00:00 by teamcity

Pull the image from the command line:

docker pull forge.sath.com/apps/infisical-standalone:sath-redis

Digest

sha256:4a5c27456ef476286a3970891111779edb402bf3633925ded9939f71185834a9

For more information on the Container registry, see the documentation.

Open-source secret management platform

# debian.sh --arch 'amd64' out/ 'trixie' '@1771804800'

RUN /bin/sh -c groupadd --gid 1000 node && useradd --uid 1000 --gid node --shell /bin/bash --create-home node # buildkit

ENV NODE_VERSION=22.22.0

RUN /bin/sh -c ARCH= OPENSSL_ARCH= && dpkgArch="$(dpkg --print-architecture)" && case "${dpkgArch##*-}" in amd64) ARCH='x64' OPENSSL_ARCH='linux-x86_64';; ppc64el) ARCH='ppc64le' OPENSSL_ARCH='linux-ppc64le';; s390x) ARCH='s390x' OPENSSL_ARCH='linux*-s390x';; arm64) ARCH='arm64' OPENSSL_ARCH='linux-aarch64';; armhf) ARCH='armv7l' OPENSSL_ARCH='linux-armv4';; i386) ARCH='x86' OPENSSL_ARCH='linux-elf';; *) echo "unsupported architecture"; exit 1 ;; esac && set -ex && apt-get update && apt-get install -y ca-certificates curl wget gnupg dirmngr xz-utils libatomic1 --no-install-recommends && rm -rf /var/lib/apt/lists/* && export GNUPGHOME="$(mktemp -d)" && for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz" && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc && gpgconf --kill all && rm -rf "$GNUPGHOME" && grep " node-v$NODE_VERSION-linux-$ARCH.tar.xz\$" SHASUMS256.txt | sha256sum -c - && tar -xJf "node-v$NODE_VERSION-linux-$ARCH.tar.xz" -C /usr/local --strip-components=1 --no-same-owner && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt && find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name "$OPENSSL_ARCH" -exec rm -rf {} \; && apt-mark auto '.*' > /dev/null && find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false && ln -s /usr/local/bin/node /usr/local/bin/nodejs && node --version && npm --version && rm -rf /tmp/* # buildkit

ENV YARN_VERSION=1.22.22

RUN /bin/sh -c set -ex && savedAptMark="$(apt-mark showmanual)" && apt-get update && apt-get install -y ca-certificates curl wget gnupg dirmngr --no-install-recommends && rm -rf /var/lib/apt/lists/* && export GNUPGHOME="$(mktemp -d)" && for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && gpgconf --kill all && rm -rf "$GNUPGHOME" && mkdir -p /opt && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && apt-mark auto '.*' > /dev/null && { [ -z "$savedAptMark" ] || apt-mark manual $savedAptMark > /dev/null; } && find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false && yarn --version && rm -rf /tmp/* # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

CMD ["node"]

RUN /bin/sh -c npm install -g npm@10.9.0 # buildkit

RUN /bin/sh -c apt-get update && apt-get install -y ca-certificates bash curl git unixodbc freetds-bin wget perl build-essential libssl-dev openssh-client libaio1t64 smbclient && curl -1sLf 'https://artifacts-cli.infisical.com/setup.deb.sh' | bash && apt-get update && apt-get install -y infisical=0.43.79 && rm -rf /var/lib/apt/lists/* # buildkit

COPY /opt/oracle /opt/oracle # buildkit

RUN /bin/sh -c ARCH=$(dpkg --print-architecture) && if [ "$ARCH" = "amd64" ]; then ln -sf /lib/x86_64-linux-gnu/libaio.so.1t64 /lib/x86_64-linux-gnu/libaio.so.1; elif [ "$ARCH" = "arm64" ]; then ln -sf /lib/aarch64-linux-gnu/libaio.so.1t64 /lib/aarch64-linux-gnu/libaio.so.1; fi && echo /opt/oracle/instantclient_23_26 > /etc/ld.so.conf.d/oracle-instantclient.conf && ldconfig # buildkit

WORKDIR /tmp/openssl-build

RUN /bin/sh -c wget -q https://github.com/openssl/openssl/releases/download/openssl-3.5.6/openssl-3.5.6.tar.gz && echo "deae7c80cba99c4b4f940ecadb3c3338b13cb77418409238e57d7f31f2a3b736 openssl-3.5.6.tar.gz" | sha256sum -c - && tar -xf openssl-3.5.6.tar.gz && cd openssl-3.5.6 && ./Configure --prefix=/opt/openssl-pqc --openssldir=/opt/openssl-pqc/ssl no-docs && make -j"$(nproc)" && make install_sw && cd / && rm -rf /tmp/openssl-build # buildkit

WORKDIR /

RUN /bin/sh -c printf "[FreeTDS]\nDescription = FreeTDS Driver\nDriver = /usr/lib/x86_64-linux-gnu/odbc/libtdsodbc.so\nSetup = /usr/lib/x86_64-linux-gnu/odbc/libtdsS.so\nFileUsage = 1\n" > /etc/odbcinst.ini # buildkit

RUN /bin/sh -c groupadd --system --gid 1001 nodejs && useradd --system --uid 1001 --gid nodejs non-root-user # buildkit

RUN /bin/sh -c chown -R non-root-user /etc/ssl/certs && chmod -R u+rwx /etc/ssl/certs && chown non-root-user /usr/sbin/update-ca-certificates && chmod u+rx /usr/sbin/update-ca-certificates # buildkit

ARG POSTHOG_API_KEY=posthog-api-key

ENV POSTHOG_API_KEY=posthog-api-key

ARG INTERCOM_ID=intercom-id

ENV INTERCOM_ID=intercom-id

ARG CAPTCHA_SITE_KEY=captcha-site-key

ENV CAPTCHA_SITE_KEY=captcha-site-key

COPY /app /backend # buildkit

COPY /app ./backend/frontend-build # buildkit

RUN |3 POSTHOG_API_KEY=posthog-api-key INTERCOM_ID=intercom-id CAPTCHA_SITE_KEY=captcha-site-key /bin/sh -c chmod +x /backend/scripts/export-assets.sh # buildkit

ARG INFISICAL_PLATFORM_VERSION

ENV INFISICAL_PLATFORM_VERSION=

ARG DD_GIT_REPOSITORY_URL

ENV DD_GIT_REPOSITORY_URL=

ARG DD_GIT_COMMIT_SHA

ENV DD_GIT_COMMIT_SHA=

LABEL org.opencontainers.image.title=Infisical

LABEL org.opencontainers.image.description=Open-source secret management platform

LABEL org.opencontainers.image.url=https://infisical.com

LABEL org.opencontainers.image.documentation=https://infisical.com/docs

LABEL org.opencontainers.image.source=https://github.com/Infisical/infisical

LABEL org.opencontainers.image.vendor=Infisical

LABEL org.opencontainers.image.licenses=MIT

LABEL org.opencontainers.image.base.name=node:22.22.0-trixie-slim

LABEL org.opencontainers.image.version=

LABEL org.opencontainers.image.revision=

ENV PORT=8080

ENV HOST=0.0.0.0

ENV HTTPS_ENABLED=false

ENV NODE_ENV=production

ENV STANDALONE_BUILD=true

ENV STANDALONE_MODE=true

ENV NODE_OPTIONS=--max-old-space-size=2048

ENV ChrystokiConfigurationPath=/usr/safenet/lunaclient/

WORKDIR /backend

ENV TELEMETRY_ENABLED=true

EXPOSE [8080/tcp]

EXPOSE [443/tcp]

USER non-root-user

CMD ["./standalone-entrypoint.sh"]

Key	Value
org.opencontainers.image.base.name	node:22.22.0-trixie-slim
org.opencontainers.image.description	Open-source secret management platform
org.opencontainers.image.documentation	https://infisical.com/docs
org.opencontainers.image.licenses	MIT
org.opencontainers.image.revision
org.opencontainers.image.source	https://github.com/Infisical/infisical
org.opencontainers.image.title	Infisical
org.opencontainers.image.url	https://infisical.com
org.opencontainers.image.vendor	Infisical
org.opencontainers.image.version