/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:bc0c34c3de4568914cc6d0ce9e475804776b9932a837352e0a0b8eaeec65f0ab in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:75017821d3d7ffd12376ef094bfe2a63592d7cc455658a85911fc189573e02d7 in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:75017821d3d7ffd12376ef094bfe2a63592d7cc455658a85911fc189573e02d7 in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-08-17T17:29:16Z" "org.opencontainers.image.revision"="6bb838e7904a1c68094d157a898fff623ad3fcb9" "build-date"="2026-08-17T17:29:16Z" "architecture"="aarch64" "vcs-ref"="6bb838e7904a1c68094d157a898fff623ad3fcb9" "vcs-type"="git" "release"="1786987521"org.opencontainers.image.created=2026-08-17T17:29:16Z,org.opencontainers.image.revision=6bb838e7904a1c68094d157a898fff623ad3fcb9

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=11.4.12 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=11.4.12 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=11.4.12

ENV MARIADB_VERSION=11.4.12

RUN |1 MARIADB_VERSION=11.4.12 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=11.4.12 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]

/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:fd02ee61f18b6a9a0841859445fda5f8ab05c6927edd49e303b6a533755bd4a4 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:b25d5255b5edbca8e555492c2c12dd22f04038385b82b65469d49226dd8af92b in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:b25d5255b5edbca8e555492c2c12dd22f04038385b82b65469d49226dd8af92b in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-08-17T17:29:13Z" "org.opencontainers.image.revision"="6bb838e7904a1c68094d157a898fff623ad3fcb9" "build-date"="2026-08-17T17:29:13Z" "architecture"="ppc64le" "vcs-ref"="6bb838e7904a1c68094d157a898fff623ad3fcb9" "vcs-type"="git" "release"="1786987521"org.opencontainers.image.created=2026-08-17T17:29:13Z,org.opencontainers.image.revision=6bb838e7904a1c68094d157a898fff623ad3fcb9

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=11.4.12 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=11.4.12 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=11.4.12

ENV MARIADB_VERSION=11.4.12

RUN |1 MARIADB_VERSION=11.4.12 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=11.4.12 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]

/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:a2e3d060074baf6a1ce466af357ef8f4623efc7743f778c40c2690a830b3eeb5 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:09dfcb31876dcac8b685641ef35dd5af7cd6e623eafef72ebe6363230974ae53 in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:09dfcb31876dcac8b685641ef35dd5af7cd6e623eafef72ebe6363230974ae53 in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-08-17T17:34:22Z" "org.opencontainers.image.revision"="6bb838e7904a1c68094d157a898fff623ad3fcb9" "build-date"="2026-08-17T17:34:22Z" "architecture"="s390x" "vcs-ref"="6bb838e7904a1c68094d157a898fff623ad3fcb9" "vcs-type"="git" "release"="1786987521"org.opencontainers.image.created=2026-08-17T17:34:22Z,org.opencontainers.image.revision=6bb838e7904a1c68094d157a898fff623ad3fcb9

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=11.4.12 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=11.4.12 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=11.4.12

ENV MARIADB_VERSION=11.4.12

RUN |1 MARIADB_VERSION=11.4.12 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=11.4.12 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]