Update docker.io/codercom/enterprise-base:ubuntu Docker digest to 5abfb83

.gitea/workflows/build-base.yml

@@ -5,7 +5,7 @@ on:
     branches:
       - main
     paths:
-      - 'Dockerfile'
+      - 'Dockerfile.base'
   schedule:
     - cron: "@monthly"
   workflow_dispatch:
@@ -32,6 +32,6 @@ jobs:
         uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
         with:
           context: .
-          file: ./Dockerfile
+          file: ./Dockerfile.base
           push: true
           tags: ${{ vars.REGISTRY_URL }}/${{ secrets.REGISTRY_USER }}/coder-base:latest

.gitea/workflows/build-cli.yml

@@ -0,0 +1,40 @@
+name: Build CLI Image
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'tools/coder-cli/**'
+  schedule:
+    - cron: "@monthly"
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: Build CLI Image
+    runs-on: ubuntu-latest
+    concurrency:
+      group: cli
+      cancel-in-progress: false
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
+
+      - name: Login to registry
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
+        with:
+          registry: ${{ vars.REGISTRY_URL }}
+          username: ${{ secrets.REGISTRY_USER }}
+          password: ${{ secrets.REGISTRY_PASSWORD }}
+
+      - name: Build and push CLI image
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
+        with:
+          context: .
+          file: ./tools/coder-cli/Dockerfile
+          push: true
+          tags: ${{ vars.REGISTRY_URL }}/${{ secrets.REGISTRY_USER }}/coder-base:cli

.gitea/workflows/build-terraform-shell.yml

@@ -0,0 +1,40 @@
+name: Build Terraform Shell Image
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - "tools/terraform-shell/**"
+  schedule:
+    - cron: "@monthly"
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: Build Terraform Shell Image
+    runs-on: ubuntu-latest
+    concurrency:
+      group: terraform
+      cancel-in-progress: false
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
+
+      - name: Login to registry
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
+        with:
+          registry: ${{ vars.REGISTRY_URL }}
+          username: ${{ secrets.REGISTRY_USER }}
+          password: ${{ secrets.REGISTRY_PASSWORD }}
+
+      - name: Build and push shell image
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
+        with:
+          context: .
+          file: ./tools/terraform-shell/Dockerfile
+          push: true
+          tags: ${{ vars.REGISTRY_URL }}/${{ secrets.REGISTRY_USER }}/coder-base:terraform

Dockerfile.base

@@ -1,4 +1,4 @@
-FROM docker.io/codercom/enterprise-base:ubuntu@sha256:f67716f8d4324625b3821482f44f7fff54a29c4204aa768e481d4fd19af8a742
+FROM docker.io/codercom/enterprise-base:ubuntu@sha256:5abfb835c2421f89d5a30fe42bfa369de91222f3e13145172448d9fd173676de
 
 USER root
 

renovate.json

@@ -2,5 +2,13 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "local>renovate/renovate-config"
+  ],
+  "packageRules": [
+    {
+      "matchPackageNames": [
+        "quay.io/buildah/stable"
+      ],
+      "enabled": false
+    }
   ]
 }

tools/coder-cli/Dockerfile

@@ -0,0 +1,6 @@
+FROM alpine:latest@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
+
+RUN apk add --no-cache curl sed
+RUN curl -fsSL https://coder.com/install.sh | sh
+
+ENTRYPOINT []

tools/terraform-shell/Dockerfile

@@ -0,0 +1,2 @@
+FROM docker.io/hashicorp/terraform:1.14.1@sha256:1de2a42a99e36490585dcb60c43daf9f11381b10f40a0c7ddfd1e03733009aec
+ENTRYPOINT []