VP TechOpsandvptechops
01b0eed9fc
Adds the dockerized bw deployment in production use on the TSGCOO orchestration host since 2026-08-13: pinned debian-slim image carrying the pre-compiled bw binary, an in-container auth lifecycle entrypoint (config, API-key login, unlock, sync), a transparent host wrapper, and a one-command installer. ADR-002 records the decision and supersedes ADR-001 for BW CLI purposes: hosts keep zero language runtimes. Known caveat documented: the upstream "native" binary is a Node.js SEA, so Node is embedded in the image though absent from all hosts. Shellcheck clean (zero warnings incl. info-level).
24 lines
853 B
Docker
24 lines
853 B
Docker
# Dockerfile — Native Bitwarden CLI (Rust binary, no Node.js)
|
|
#
|
|
# Builds a minimal container image around the pre-compiled native bw CLI
|
|
# binary from the official Bitwarden GitHub releases. The binary is a
|
|
# Rust executable with glibc dependencies. No Node.js runtime is
|
|
# included or required.
|
|
#
|
|
# Build prerequisites:
|
|
# 1. Download the native binary:
|
|
# https://github.com/bitwarden/clients/releases/download/cli-v2026.7.0/bw-linux-2026.7.0.zip
|
|
# 2. Unzip and place the `bw` executable next to this Dockerfile.
|
|
# 3. Build: docker build -t reachableceo-bw-native:2026.7.0 .
|
|
#
|
|
# Or use the installer: scripts/bw-install.sh
|
|
|
|
FROM debian:bookworm-slim
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates && rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY bw /usr/local/bin/bw
|
|
RUN chmod +x /usr/local/bin/bw
|
|
|
|
ENTRYPOINT ["bw"]
|