patronus (sha256:9601206bf2f0c8fe3864ea032041a63c2e216753adc01bd9525e8525f72a7b81)

Published 2026-10-18 16:40:34 -07:00 by CanuteTheGreat in CanuteTheGreat/patronus

Pull the image from the command line:

docker pull git.canutethegreat.com/canutethegreat/patronus@sha256:9601206bf2f0c8fe3864ea032041a63c2e216753adc01bd9525e8525f72a7b81

Digest

sha256:9601206bf2f0c8fe3864ea032041a63c2e216753adc01bd9525e8525f72a7b81

For more information on the Container registry, see the documentation.

WORKDIR /

COPY /gentoo/ / # buildkit

CMD ["/bin/bash"]

ARG PATRONUS_USE=web cli api dashboard nftables dhcp dns unbound vpn wireguard openvpn ipsec multiwan monitoring prometheus captive-portal vlan qos backup systemd

RUN |1 PATRONUS_USE=web cli api dashboard nftables dhcp dns unbound vpn wireguard openvpn ipsec multiwan monitoring prometheus captive-portal vlan qos backup systemd /bin/sh -c echo 'FEATURES="${FEATURES} -sandbox -usersandbox -ipc-sandbox -network-sandbox -pid-sandbox"' >> /etc/portage/make.conf # buildkit

COPY gentoo /var/db/repos/patronus-overlay # buildkit

RUN |1 PATRONUS_USE=web cli api dashboard nftables dhcp dns unbound vpn wireguard openvpn ipsec multiwan monitoring prometheus captive-portal vlan qos backup systemd /bin/sh -c mkdir -p /etc/portage/repos.conf && printf '[patronus]\nlocation = /var/db/repos/patronus-overlay\npriority = 50\n' > /etc/portage/repos.conf/patronus-overlay.conf # buildkit

RUN |1 PATRONUS_USE=web cli api dashboard nftables dhcp dns unbound vpn wireguard openvpn ipsec multiwan monitoring prometheus captive-portal vlan qos backup systemd /bin/sh -c echo "net-firewall/patronus ~amd64" > /etc/portage/package.accept_keywords/patronus && echo "=net-firewall/patronus-9999 **" >> /etc/portage/package.accept_keywords/patronus # buildkit

RUN |1 PATRONUS_USE=web cli api dashboard nftables dhcp dns unbound vpn wireguard openvpn ipsec multiwan monitoring prometheus captive-portal vlan qos backup systemd /bin/sh -c echo "dev-lang/rust-bin ~amd64" >> /etc/portage/package.accept_keywords/patronus && emerge --verbose dev-lang/rust-bin dev-util/cargo-c # buildkit

ARG PATRONUS_USE=web cli api dashboard nftables dhcp dns unbound vpn wireguard openvpn ipsec multiwan monitoring prometheus captive-portal vlan qos backup systemd

RUN |1 PATRONUS_USE=web cli api dashboard nftables dhcp dns unbound vpn wireguard openvpn ipsec multiwan monitoring prometheus captive-portal vlan qos backup systemd /bin/sh -c echo 'FEATURES="${FEATURES} -sandbox -usersandbox -ipc-sandbox -network-sandbox -pid-sandbox"' >> /etc/portage/make.conf # buildkit

COPY gentoo /var/db/repos/patronus-overlay # buildkit

RUN |1 PATRONUS_USE=web cli api dashboard nftables dhcp dns unbound vpn wireguard openvpn ipsec multiwan monitoring prometheus captive-portal vlan qos backup systemd /bin/sh -c mkdir -p /etc/portage/repos.conf && printf '[patronus]\nlocation = /var/db/repos/patronus-overlay\npriority = 50\n' > /etc/portage/repos.conf/patronus-overlay.conf # buildkit

RUN |1 PATRONUS_USE=web cli api dashboard nftables dhcp dns unbound vpn wireguard openvpn ipsec multiwan monitoring prometheus captive-portal vlan qos backup systemd /bin/sh -c echo "net-firewall/patronus ~amd64" > /etc/portage/package.accept_keywords/patronus && echo "=net-firewall/patronus-9999 **" >> /etc/portage/package.accept_keywords/patronus # buildkit

COPY . /usr/src/patronus # buildkit

ENV EGIT_OVERRIDE_REPO_PATRONUS=/usr/src/patronus

RUN |1 PATRONUS_USE=web cli api dashboard nftables dhcp dns unbound vpn wireguard openvpn ipsec multiwan monitoring prometheus captive-portal vlan qos backup systemd /bin/sh -c useradd -r -u 1000 -m -s /bin/bash patronus 2>/dev/null || true && chown -R patronus:patronus /etc/patronus /var/lib/patronus /var/log/patronus 2>/dev/null || true && mkdir -p /etc/patronus/tls && chown patronus:patronus /etc/patronus/tls && mkdir -p /data /app/static && chown patronus:patronus /data /app /app/static # buildkit

RUN |1 PATRONUS_USE=web cli api dashboard nftables dhcp dns unbound vpn wireguard openvpn ipsec multiwan monitoring prometheus captive-portal vlan qos backup systemd /bin/sh -c emerge --verbose sys-libs/libcap && setcap cap_net_admin,cap_net_raw+eip "$(command -v nft)" && setcap cap_net_admin+eip "$(command -v wg)" && if ct=$(command -v conntrack); then setcap cap_net_admin+eip "$ct" && getcap "$ct"; fi && getcap "$(command -v nft)" "$(command -v wg)" # buildkit

USER patronus

WORKDIR /home/patronus

EXPOSE [51820/udp 8443/tcp]

HEALTHCHECK {Test:[CMD-SHELL curl -kf https://localhost:8443/ || exit 1] Interval:30s Timeout:3s StartPeriod:5s StartInterval:0s Retries:3}

CMD ["patronus-web"]

COPY --chown=patronus:patronus static /app/static # buildkit

LABEL org.opencontainers.image.revision=a1ad046aacd15ea819cfb28ed11bdd19d76c621b