/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:4514a7c12566dae98fd88118fcb921951dfe1c5fb68bcd967fa7403f502ed7b3 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:c38a861e2747d356888cd619d2f45be75d2e7b4ef861b9622c424d2044b8abe0 in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:c38a861e2747d356888cd619d2f45be75d2e7b4ef861b9622c424d2044b8abe0 in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-10-26T21:35:14Z" "org.opencontainers.image.revision"="8b3700629f01b12b6b7b939daabd7c1a5c7026bb" "build-date"="2026-10-26T21:35:14Z" "architecture"="aarch64" "vcs-ref"="8b3700629f01b12b6b7b939daabd7c1a5c7026bb" "vcs-type"="git" "release"="1793050346"org.opencontainers.image.created=2026-10-26T21:35:14Z,org.opencontainers.image.revision=8b3700629f01b12b6b7b939daabd7c1a5c7026bb

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=10.6.28 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=10.6.28 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=10.6.28

ENV MARIADB_VERSION=10.6.28

RUN |1 MARIADB_VERSION=10.6.28 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=10.6.28 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]

/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:76f9a4094e45eeb39a4e9a27fa5c3380093f5b1c6dddfc5065a7d1e628d2df65 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:d2aab5f21efbeeabc1e68bae811e08acdbc33a24cb3ee190740e8cc094a3866f in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:d2aab5f21efbeeabc1e68bae811e08acdbc33a24cb3ee190740e8cc094a3866f in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-10-26T21:35:01Z" "org.opencontainers.image.revision"="8b3700629f01b12b6b7b939daabd7c1a5c7026bb" "build-date"="2026-10-26T21:35:01Z" "architecture"="ppc64le" "vcs-ref"="8b3700629f01b12b6b7b939daabd7c1a5c7026bb" "vcs-type"="git" "release"="1793050346"org.opencontainers.image.created=2026-10-26T21:35:01Z,org.opencontainers.image.revision=8b3700629f01b12b6b7b939daabd7c1a5c7026bb

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=10.6.28 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=10.6.28 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=10.6.28

ENV MARIADB_VERSION=10.6.28

RUN |1 MARIADB_VERSION=10.6.28 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=10.6.28 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]

/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:1dac919f1bf5b343236885ff2de48e257ce8783faf66e9f128de106823a37030 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:c970f44a4ef8b7dc687a5ddaab387bdc7bd37aace4cf925370b091145f1d2192 in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:c970f44a4ef8b7dc687a5ddaab387bdc7bd37aace4cf925370b091145f1d2192 in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-10-26T21:47:28Z" "org.opencontainers.image.revision"="8b3700629f01b12b6b7b939daabd7c1a5c7026bb" "build-date"="2026-10-26T21:47:28Z" "architecture"="s390x" "vcs-ref"="8b3700629f01b12b6b7b939daabd7c1a5c7026bb" "vcs-type"="git" "release"="1793050346"org.opencontainers.image.created=2026-10-26T21:47:28Z,org.opencontainers.image.revision=8b3700629f01b12b6b7b939daabd7c1a5c7026bb

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=10.6.28 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=10.6.28 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=10.6.28

ENV MARIADB_VERSION=10.6.28

RUN |1 MARIADB_VERSION=10.6.28 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=10.6.28 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]