Bicaws-3025: Add amazon linux 2023 image

.circleci/config.yml

@@ -5,7 +5,7 @@ version: 2.1
 jobs:
   test:
     machine:
-      image: ubuntu-2004:202104-01
+      image: ubuntu-2204:2023.07.2
       docker_layer_caching: true
     steps:
       - checkout

Amazon_Linux_2023_Base/Dockerfile

@@ -0,0 +1,19 @@
+ARG BUILD_IMAGE="amazonlinux:2023"
+
+FROM ${BUILD_IMAGE}
+
+LABEL maintainer="CJSE"
+ARG DNF_PACKAGES="pip gzip tar unzip openssl shadow-utils xz wget gnupg dirmngr"
+
+RUN dnf update -y &&\
+    dnf install -y ${DNF_PACKAGES} --allowerasing
+
+# https://github.com/aws/aws-cli/issues/8036
+RUN pip install wheel &&\
+    pip install "Cython<3.0" "pyyaml<6" --no-build-isolation 
+
+RUN rm -rf /var/log/* &&\
+    dnf clean all &&\
+    rm -rf /var/cache/dnf
+
+CMD ["tail", "-f", "/dev/null"]

Amazon_Linux_2023_Base/Makefile

@@ -0,0 +1,5 @@
+SHELL := /bin/bash # Use bash syntax
+.PHONY: build
+
+build:
+	bash build.sh

Amazon_Linux_2023_Base/build.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+
+set -e
+
+IMAGE="amazon-linux2023-base"
+
+docker build -t "${IMAGE}" . 
+
+if [ "$SKIP_GOSS" = "true" ]; then
+  echo "Skipping dgoss tests"
+else
+  GOSS_SLEEP=15 dgoss run $IMAGE
+fi

Amazon_Linux_2023_Base/buildspec.yml

@@ -0,0 +1,11 @@
+---
+
+version: 0.2
+phases:
+  build:
+    commands:
+      - set -ev
+      - cd ./Amazon_Linux_2023_Base
+      - /bin/bash ./scripts/build_docker.sh
+
+...

Amazon_Linux_2023_Base/goss.yaml

@@ -0,0 +1,18 @@
+file:
+  /etc/passwd:
+    exists: true
+    mode: "0644"
+    size: 839
+    owner: root
+    group: root
+    filetype: file
+    contains: []
+user:
+  nobody:
+    exists: true
+    uid: 65534
+    gid: 65534
+    groups:
+    - nobody
+    home: /
+    shell: /sbin/nologin

Amazon_Linux_2023_Base/scripts/build_docker.sh

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+
+set -e
+
+export readonly REPOSITORY_NAME="amazon-linux2023-base"
+export readonly SOURCE_REPOSITORY_NAME="amazon-linux-2023"
+
+/bin/bash ../scripts/build_and_push_image.sh
+
+aws codebuild start-build --project-name "build-openjdk-jre11-slim-docker" \
+  --environment-variables-override name=DOCKER_IMAGE_HASH,value="${DOCKER_IMAGE_PREFIX}@${SHA_HASH}",type=PLAINTEXT
+
+aws codebuild start-build --project-name "build-nodejs-16-docker" \
+  --environment-variables-override name=DOCKER_IMAGE_HASH,value="${DOCKER_IMAGE_PREFIX}@${SHA_HASH}",type=PLAINTEXT
+
+aws codebuild start-build --project-name "build-logstash-docker" \
+  --environment-variables-override name=DOCKER_IMAGE_HASH,value="${DOCKER_IMAGE_PREFIX}@${SHA_HASH}",type=PLAINTEXT
+
+aws codebuild start-build --project-name "build-grafana-ssl-docker"
+
+aws codebuild start-build --project-name "build-grafana-codebuild-ssl-docker"
+
+aws codebuild start-build --project-name "build-nginx-supervisord-docker"
+
+aws codebuild start-build --project-name "build-postfix-docker"

Makefile

@@ -1,4 +1,4 @@
-BASE_CONTAINERS:= Amazon_Linux_Base Openjdk_Jre11_Slim NodeJS Postfix Codebuild_Base
+BASE_CONTAINERS:= Amazon_Linux_Base Openjdk_Jre11_Slim NodeJS Postfix Codebuild_Base Amazon_Linux_2023_Base
 NGINX_CONTAINERS:= Nginx_NodeJS_Supervisord Nginx_Supervisord Nginx_Auth_Proxy Nginx_Java_Supervisord S3_Web_Proxy Scanning_Results_Portal Conductor
 MONITORING_CONTAINERS:= Grafana Grafana_Codebuild Prometheus Prometheus_Cloudwatch_Exporter Logstash Prometheus_BlackBox_Exporter