/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:923fd04a317c8ab7292cc4c6490977e5f3d0a2e1ff9dc5a4ce7f5c95aef17062 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:dffe6ac0f40d1fc4397ba26e90223bac1cf14e7dcba262c2807afbcac45f5ea3 in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:dffe6ac0f40d1fc4397ba26e90223bac1cf14e7dcba262c2807afbcac45f5ea3 in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-06-23T05:12:36Z" "org.opencontainers.image.revision"="e834ed7be4fa69fe8faf5574157c5c65992ace09" "build-date"="2026-06-23T05:12:36Z" "architecture"="aarch64" "vcs-ref"="e834ed7be4fa69fe8faf5574157c5c65992ace09" "vcs-type"="git" "release"="1782191395"org.opencontainers.image.created=2026-06-23T05:12:36Z,org.opencontainers.image.revision=e834ed7be4fa69fe8faf5574157c5c65992ace09

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=10.6.27 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=10.6.27 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=10.6.27

ENV MARIADB_VERSION=10.6.27

RUN |1 MARIADB_VERSION=10.6.27 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=10.6.27 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]

/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:4d2a3ebfba3e6886b6504d8dd92beaac194e548e40aa4bca182adbaa9be02afc in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:b7827d131ad066b0f131c7ebfb16ff261b70c3cbb8cf357ab0913f8aa1eef055 in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:b7827d131ad066b0f131c7ebfb16ff261b70c3cbb8cf357ab0913f8aa1eef055 in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-06-23T05:12:46Z" "org.opencontainers.image.revision"="e834ed7be4fa69fe8faf5574157c5c65992ace09" "build-date"="2026-06-23T05:12:46Z" "architecture"="ppc64le" "vcs-ref"="e834ed7be4fa69fe8faf5574157c5c65992ace09" "vcs-type"="git" "release"="1782191395"org.opencontainers.image.created=2026-06-23T05:12:46Z,org.opencontainers.image.revision=e834ed7be4fa69fe8faf5574157c5c65992ace09

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=10.6.27 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=10.6.27 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=10.6.27

ENV MARIADB_VERSION=10.6.27

RUN |1 MARIADB_VERSION=10.6.27 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=10.6.27 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]

/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:27877c357368aea512a88a6f3ff986d2f2cae38facf5c958fc65210886393092 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:93599b4d15b0e179c067caa1878c815ffdcb1bde2382dffed0b86ba833b3047a in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:93599b4d15b0e179c067caa1878c815ffdcb1bde2382dffed0b86ba833b3047a in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-06-23T05:17:03Z" "org.opencontainers.image.revision"="e834ed7be4fa69fe8faf5574157c5c65992ace09" "build-date"="2026-06-23T05:17:03Z" "architecture"="s390x" "vcs-ref"="e834ed7be4fa69fe8faf5574157c5c65992ace09" "vcs-type"="git" "release"="1782191395"org.opencontainers.image.created=2026-06-23T05:17:03Z,org.opencontainers.image.revision=e834ed7be4fa69fe8faf5574157c5c65992ace09

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=10.6.27 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=10.6.27 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=10.6.27

ENV MARIADB_VERSION=10.6.27

RUN |1 MARIADB_VERSION=10.6.27 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=10.6.27 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]