/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:a29571d1d7f0219756ea4cbeea7cbd2d7c70f920d886563530efb6b5f51db754 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:affb4b0d326dc89d183bd019c6447bd9c3122f330427c74027adfef3eaf39c3c in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:affb4b0d326dc89d183bd019c6447bd9c3122f330427c74027adfef3eaf39c3c in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-08-10T16:58:14Z" "org.opencontainers.image.revision"="905bde9da31110a4bb776761a921a6b4e6b12a93" "build-date"="2026-08-10T16:58:14Z" "architecture"="aarch64" "vcs-ref"="905bde9da31110a4bb776761a921a6b4e6b12a93" "vcs-type"="git" "release"="1786380870"org.opencontainers.image.created=2026-08-10T16:58:14Z,org.opencontainers.image.revision=905bde9da31110a4bb776761a921a6b4e6b12a93

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=10.6.27 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=10.6.27 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=10.6.27

ENV MARIADB_VERSION=10.6.27

RUN |1 MARIADB_VERSION=10.6.27 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=10.6.27 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]

/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:85a7cc9a737af83f9f0b55b944a98b9bd0f889ce12a8553376788b64bd64c755 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:b9addac3b82321b9a6f2a734577859fae2c7ad85bbd75c02b04992802ccf1cf8 in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:b9addac3b82321b9a6f2a734577859fae2c7ad85bbd75c02b04992802ccf1cf8 in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-08-10T16:59:14Z" "org.opencontainers.image.revision"="905bde9da31110a4bb776761a921a6b4e6b12a93" "build-date"="2026-08-10T16:59:14Z" "architecture"="ppc64le" "vcs-ref"="905bde9da31110a4bb776761a921a6b4e6b12a93" "vcs-type"="git" "release"="1786380870"org.opencontainers.image.created=2026-08-10T16:59:14Z,org.opencontainers.image.revision=905bde9da31110a4bb776761a921a6b4e6b12a93

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=10.6.27 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=10.6.27 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=10.6.27

ENV MARIADB_VERSION=10.6.27

RUN |1 MARIADB_VERSION=10.6.27 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=10.6.27 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]

/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:8a660edaa14a265302db24f21a2623345e34e48847b8e3f9a3f0b023bbfa731f in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:528d8b085204197bd0fe3f329af3d3ea22469dc77cc7ab43d690f26565a2ece6 in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:528d8b085204197bd0fe3f329af3d3ea22469dc77cc7ab43d690f26565a2ece6 in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-08-10T17:16:58Z" "org.opencontainers.image.revision"="905bde9da31110a4bb776761a921a6b4e6b12a93" "build-date"="2026-08-10T17:16:58Z" "architecture"="s390x" "vcs-ref"="905bde9da31110a4bb776761a921a6b4e6b12a93" "vcs-type"="git" "release"="1786380870"org.opencontainers.image.created=2026-08-10T17:16:58Z,org.opencontainers.image.revision=905bde9da31110a4bb776761a921a6b4e6b12a93

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=10.6.27 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=10.6.27 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=10.6.27

ENV MARIADB_VERSION=10.6.27

RUN |1 MARIADB_VERSION=10.6.27 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=10.6.27 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]