sonarqube:2025.4.11-developer

LABEL io.k8s.description=SonarQube Server is a self-managed, automatic code review tool that systematically helps you deliver Clean Code.

0 B

LABEL io.openshift.min-cpu=400m

0 B

LABEL io.openshift.min-memory=2048M

0 B

LABEL io.openshift.non-scalable=true

0 B

LABEL io.openshift.tags=sonarqube,static-code-analysis,code-quality,clean-code

0 B

LABEL org.opencontainers.image.url=https://github.com/SonarSource/docker-sonarqube

0 B

ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8

0 B

ARG SONARQUBE_VERSION=2025.4.11.134147

0 B

ARG SONARQUBE_ZIP_URL=https://binaries.sonarsource.com/CommercialDistribution/sonarqube-developer/sonarqube-developer-2025.4.11.134147.zip

0 B

ENV DOCKER_RUNNING=true JAVA_HOME=/opt/java/openjdk SONARQUBE_HOME=/opt/sonarqube SONAR_VERSION=2025.4.11.134147 SQ_DATA_DIR=/opt/sonarqube/data SQ_EXTENSIONS_DIR=/opt/sonarqube/extensions SQ_LOGS_DIR=/opt/sonarqube/logs SQ_TEMP_DIR=/opt/sonarqube/temp

0 B

ENV ES_TMPDIR=/opt/sonarqube/temp

0 B

RUN |2 SONARQUBE_VERSION=2025.4.11.134147 SONARQUBE_ZIP_URL=https://binaries.sonarsource.com/CommercialDistribution/sonarqube-developer/sonarqube-developer-2025.4.11.134147.zip /bin/sh -c set -eux; deluser ubuntu; useradd --system --uid 1000 --gid 0 sonarqube; apt-get update; apt-get --no-install-recommends -y install bash ca-certificates curl fonts-dejavu gnupg unzip; echo "networkaddress.cache.ttl=5" >> "${JAVA_HOME}/conf/security/java.security"; sed --in-place --expression="s?securerandom.source=file:/dev/random?securerandom.source=file:/dev/urandom?g" "${JAVA_HOME}/conf/security/java.security"; emsign_g3_alias='cn_emsign_ecc_root_ca__g3,o_emudhra_technologies_limited,ou_emsign_pki,c_in [jdk]'; emsign_g3_sha256='86:A1:EC:BA:08:9C:4A:8D:3B:BE:27:34:C6:12:BA:34:1D:81:3E:04:3C:F9:E8:A8:62:CD:5C:57:A3:6B:BE:6B'; if keytool -list -cacerts -storepass changeit -alias "${emsign_g3_alias}" > /dev/null 2>&1; then keytool -delete -cacerts -storepass changeit -alias "${emsign_g3_alias}"; fi; keytool -list -cacerts -storepass changeit > /tmp/cacerts.txt; if grep -q "${emsign_g3_sha256}" /tmp/cacerts.txt; then echo "emSign ECC Root CA - G3 is still trusted by the JDK" >&2; exit 1; fi; rm /tmp/cacerts.txt; if [ -e /etc/ssl/certs/emSign_ECC_Root_CA_-_G3.pem ]; then echo "emSign ECC Root CA - G3 is still trusted by the OS" "(ca-certificates $(dpkg-query -W -f='${Version}' ca-certificates))" >&2; exit 1; fi; for server in $(shuf -e hkps://keyserver.ubuntu.com) ; do gpg --batch --keyserver "${server}" --recv-keys 679F1EE92B19609DE816FDE81DB198F93525EC1A && break || : ; done; mkdir --parents /opt; cd /opt; curl --fail --location --output sonarqube.zip --silent --show-error "${SONARQUBE_ZIP_URL}"; curl --fail --location --output sonarqube.zip.asc --silent --show-error "${SONARQUBE_ZIP_URL}.asc"; gpg --batch --verify sonarqube.zip.asc sonarqube.zip; unzip -q sonarqube.zip; mv "sonarqube-${SONARQUBE_VERSION}" sonarqube; rm sonarqube.zip*; rm -rf ${SONARQUBE_HOME}/bin/*; ln -s "${SONARQUBE_HOME}/lib/sonar-application-${SONARQUBE_VERSION}.jar" "${SONARQUBE_HOME}/lib/sonarqube.jar"; chown -R sonarqube:root ${SONARQUBE_HOME}; chown -R sonarqube:root "${SQ_DATA_DIR}" "${SQ_EXTENSIONS_DIR}" "${SQ_LOGS_DIR}" "${SQ_TEMP_DIR}"; chmod -R 550 ${SONARQUBE_HOME}; chmod -R 770 "${SQ_DATA_DIR}" "${SQ_EXTENSIONS_DIR}" "${SQ_LOGS_DIR}" "${SQ_TEMP_DIR}"; apt-get remove -y gnupg unzip; rm -rf /var/lib/apt/lists/*; # buildkit

1.17 GB

VOLUME [/opt/sonarqube/data /opt/sonarqube/extensions /opt/sonarqube/logs /opt/sonarqube/temp]

0 B

COPY --chown=root:root --chmod=555 entrypoint.sh /opt/sonarqube/docker/ # buildkit

457 B

WORKDIR /opt/sonarqube

32 B

EXPOSE map[9000/tcp:{}]

0 B

USER sonarqube

0 B

STOPSIGNAL SIGINT

0 B

ENTRYPOINT ["/opt/sonarqube/docker/entrypoint.sh"]

0 B