2026-10-22 19:27:08 UTC
445 MB
airbyte-container-orchestrator
HOME/home/airbyte
JAVA_HOME/usr/lib/jvm/java-21-amazon-corretto
LANGC.UTF-8
PATH/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
VERSIONdev-e86a616ed0
[#000] sha256:7234d0a9b6ba1270c7bb653ee62a443a1dbb6fdfa833336edd3c0691c2524d1f - 11.71% (52.1 MB)
[#001] sha256:0f45e4391e22f1759d68e1a3a7a295d0366f595ceb417fa62afc5870b3aa4d56 - 36.54% (163 MB)
[#002] sha256:68b5d76fc51fbfccce88b9d0d0b46dc9b208e595a1cbce8469f47a175fe880aa - 0.0% (93 Bytes)
[#003] sha256:eb2d3d86f1e473d02bd059fd4ea649cfe45abf9fce9e9005b127e4b42e00b464 - 1.55% (6.88 MB)
[#004] sha256:24dd44c7eb5388e8391cc1bac06af9136b8854500cc597d49018b13161ee3b51 - 6.7% (29.8 MB)
[#005] sha256:7ca5ae4cddce81449a1784f141a5d3fd35a96065229e54896890cd9440fa8a82 - 0.0% (679 Bytes)
[#006] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#007] sha256:412aff8e600347fd5262fdf6f4577cb72698aa72048239eb35a84cdd0eb6f461 - 0.0% (909 Bytes)
[#008] sha256:6d6a511e3bb15758369c38ce66a4f9f710d3bcd6672adb4be6908cbccbc9ec3d - 43.5% (194 MB)
COPY /rootfs/ / # buildkit
2026-10-05 18:29:04 UTC (buildkit.dockerfile.v0)CMD ["/bin/bash"]
2026-10-05 18:44:10 UTC (buildkit.dockerfile.v0)ARG version=21.0.12.12-1
2026-10-05 18:44:10 UTC (buildkit.dockerfile.v0)ARG package_version=1
2026-10-05 18:44:10 UTC (buildkit.dockerfile.v0)RUN |2 version=21.0.12.12-1 package_version=1 /bin/sh -c set -eux && ARCH="$(rpm --query --queryformat='%{ARCH}' rpm)" && rpm --import file:///etc/pki/rpm-gpg/RPM-GPG-KEY-amazon-linux-2023 && echo "localpkg_gpgcheck=1" >> /etc/dnf/dnf.conf && CORRETO_TEMP=$(mktemp -d) && pushd ${CORRETO_TEMP} && RPM_LIST=("java-21-amazon-corretto-headless-$version.amzn2023.${package_version}.${ARCH}.rpm" "java-21-amazon-corretto-$version.amzn2023.${package_version}.${ARCH}.rpm" "java-21-amazon-corretto-devel-$version.amzn2023.${package_version}.${ARCH}.rpm" "java-21-amazon-corretto-jmods-$version.amzn2023.${package_version}.${ARCH}.rpm") && for rpm in ${RPM_LIST[@]}; do curl --fail -O https://corretto.aws/downloads/resources/$(echo $version | tr '-' '.')/${rpm} && rpm -K "${CORRETO_TEMP}/${rpm}" | grep -F "${CORRETO_TEMP}/${rpm}: digests signatures OK" || exit 1; done && dnf install -y ${CORRETO_TEMP}/*.rpm && popd && rm -rf /usr/lib/jvm/java-21-amazon-corretto.${ARCH}/lib/src.zip && rm -rf ${CORRETO_TEMP} && dnf clean all && sed -i '/localpkg_gpgcheck=1/d' /etc/dnf/dnf.conf # buildkit
2026-10-05 18:44:10 UTC (buildkit.dockerfile.v0)ENV LANG=C.UTF-8
2026-10-05 18:44:10 UTC (buildkit.dockerfile.v0)ENV JAVA_HOME=/usr/lib/jvm/java-21-amazon-corretto
2026-10-06 18:43:44 UTC (buildkit.dockerfile.v0)WORKDIR /app
2026-10-06 18:44:00 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c # Amazon Linux 2023 locks yum (an alias for dnf) to the release the upstream image was built from; # --releasever=latest moves to the newest release so security fixes published since then are installed. yum update -y --releasever=latest yum install -y --releasever=latest tar shadow-utils findutils yum clean all rm -rf /var/cache/dnf /var/cache/yum groupadd --gid 1000 airbyte useradd --uid 1000 --gid airbyte --shell /bin/bash --create-home airbyte # Create mount point for secrets mkdir /secrets mkdir -p /tmp/workspace mkdir -p /tmp/airbyte_local # These are the directories the entrypoint or the application writes to. The trust store under # /etc/pki/ca-trust is included because the entrypoint regenerates it at startup to pick up CA # certificates customers mount into /usr/share/pki/ca-trust-source/anchors. # # Normally the container runs as the airbyte user (UID 1000), which owns these files and can # write to them. OpenShift instead runs the container as an arbitrary UID that is not the owner # but is always a member of group 0. For that UID to write here, two things must be true: # 1. group 0 must be the files' group -> chown airbyte:0 (owner stays airbyte) # 2. the group must be allowed to write -> chmod g=u (give the group the owner's permissions) # u+w is needed first because some trust store files ship read-only even for the owner, and # g=u can only copy a write bit that exists. for dir in /app /secrets /tmp/workspace /tmp/airbyte_local /home/airbyte /usr/share/pki/ca-trust-source /etc/pki/ca-trust; do chown -R airbyte:0 "$dir" chmod -R u+w,g=u "$dir" done # buildkit
2026-10-06 18:44:00 UTC (buildkit.dockerfile.v0)ADD --chown=airbyte:0 --chmod=644 https://dtdg.co/latest-java-tracer dd-java-agent.jar # buildkit
2026-10-06 18:44:00 UTC (buildkit.dockerfile.v0)ADD --chown=airbyte:0 entrypoint.sh /entrypoint.sh # buildkit
2026-10-06 18:44:00 UTC (buildkit.dockerfile.v0)ENV HOME=/home/airbyte
2026-10-06 18:44:00 UTC (buildkit.dockerfile.v0)USER airbyte:airbyte
2026-10-06 18:44:00 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/entrypoint.sh"]
2026-10-22 19:27:01 UTC (buildkit.dockerfile.v0)EXPOSE [5005/tcp 8085/tcp]
2026-10-22 19:27:01 UTC (buildkit.dockerfile.v0)ARG VERSION=dev-e86a616ed0
2026-10-22 19:27:01 UTC (buildkit.dockerfile.v0)ENV APPLICATION=airbyte-container-orchestrator
2026-10-22 19:27:01 UTC (buildkit.dockerfile.v0)ENV VERSION=dev-e86a616ed0
2026-10-22 19:27:01 UTC (buildkit.dockerfile.v0)WORKDIR /app
2026-10-22 19:27:05 UTC (buildkit.dockerfile.v0)COPY --chown=airbyte:airbyte WellKnownTypes.json /app # buildkit
2026-10-22 19:27:08 UTC (buildkit.dockerfile.v0)COPY --chown=airbyte:airbyte /app /app # buildkit
2026-10-22 19:27:08 UTC (buildkit.dockerfile.v0)USER airbyte:airbyte
2026-10-22 19:27:08 UTC (buildkit.dockerfile.v0)CMD ["/bin/bash" "-c" "/app/airbyte-app/bin/${APPLICATION}"]
Please be careful as this will not just delete the reference but also the actual content!
For example when you have latest and v1.2.3 both pointing to the same image
the deletion of latest will also permanently remove v1.2.3.