/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:1d4511abff0d0cabc191309fe39f03480b6374c9bc8873ac0c048d111c3a696b in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:ed9162b19cefc1e3d222d4f003eb91be76332500a704865cd7734be6ad4d448e in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:ed9162b19cefc1e3d222d4f003eb91be76332500a704865cd7734be6ad4d448e in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-10-06T09:42:00Z" "org.opencontainers.image.revision"="84687598811e20f52a46b476c889a722893da6fd" "build-date"="2026-10-06T09:42:00Z" "architecture"="aarch64" "vcs-ref"="84687598811e20f52a46b476c889a722893da6fd" "vcs-type"="git" "release"="1791279563"org.opencontainers.image.created=2026-10-06T09:42:00Z,org.opencontainers.image.revision=84687598811e20f52a46b476c889a722893da6fd

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=11.8.9 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=11.8.9 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=11.8.9

ENV MARIADB_VERSION=11.8.9

RUN |1 MARIADB_VERSION=11.8.9 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=11.8.9 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]

/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:d07f2b7b7fc0328aad01cfdaed182c175acb09c22d3d7ce49cc19c491698d5b0 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:774b92356406bfee1307af385a5d45b5beda7faea39e85ca4f3d6fbc56d40b00 in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:774b92356406bfee1307af385a5d45b5beda7faea39e85ca4f3d6fbc56d40b00 in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-10-06T09:42:23Z" "org.opencontainers.image.revision"="84687598811e20f52a46b476c889a722893da6fd" "build-date"="2026-10-06T09:42:23Z" "architecture"="ppc64le" "vcs-ref"="84687598811e20f52a46b476c889a722893da6fd" "vcs-type"="git" "release"="1791279563"org.opencontainers.image.created=2026-10-06T09:42:23Z,org.opencontainers.image.revision=84687598811e20f52a46b476c889a722893da6fd

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=11.8.9 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=11.8.9 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=11.8.9

ENV MARIADB_VERSION=11.8.9

RUN |1 MARIADB_VERSION=11.8.9 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=11.8.9 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]

/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.8" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:c58a4b8bf0196c807188ee6dea2fad088ed1bceedcd144c3af13a3b1c934b3cd in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:9d66497e256b1d273edc77a18f5fdc558aff480773821c3d11b7cd1cd7af99e7 in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:9d66497e256b1d273edc77a18f5fdc558aff480773821c3d11b7cd1cd7af99e7 in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-10-06T09:50:16Z" "org.opencontainers.image.revision"="84687598811e20f52a46b476c889a722893da6fd" "build-date"="2026-10-06T09:50:16Z" "architecture"="s390x" "vcs-ref"="84687598811e20f52a46b476c889a722893da6fd" "vcs-type"="git" "release"="1791279563"org.opencontainers.image.created=2026-10-06T09:50:16Z,org.opencontainers.image.revision=84687598811e20f52a46b476c889a722893da6fd

RUN /bin/sh -c sed -i -e '/\[ evp_properties \]/a default_properties = fips=yes' -e '/opensslcnf.config/a .include = /etc/crypto-policies/back-ends/openssl_fips.config' -e '/\[provider_sect\]/a fips = fips_sect' /etc/pki/tls/openssl.cnf # buildkit

RUN /bin/sh -c microdnf install -y shadow-utils && groupadd --gid 999 -r mysql && useradd -r -g mysql mysql --home-dir /var/lib/mysql --uid 999 && microdnf remove -y shadow-utils && microdnf clean all # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; rpmArch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "$rpmArch" in aarch64) dpkgArch='arm64' ;; armv7*) dpkgArch='armhf' ;; i686) dpkgArch='i386' ;; ppc64le) dpkgArch='ppc64el' ;; s390x|riscv64) dpkgArch=$rpmArch ;; x86_64) dpkgArch='amd64' ;; *) echo >&2 "error: unknown/unsupported architecture '$rpmArch'"; exit 1 ;; esac; curl --fail --location --output /usr/local/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch} ; curl --fail --location --output /usr/local/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; microdnf install -y gnupg2; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; chmod a+x /usr/local/bin/gosu; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; gosu --version; gosu nobody true # buildkit

COPY --chmod=0644 docker.cnf /etc/my.cnf.d/ # buildkit

COPY MariaDB.repo /etc/yum.repos.d/ # buildkit

LABEL name=MariaDB Server vendor=MariaDB Community version=11.8.9 release=Refer to Annotations org.opencontainers.image.{revision,source} summary=MariaDB Database description=MariaDB Database for relational SQL

LABEL org.opencontainers.image.authors=MariaDB Community org.opencontainers.image.title=MariaDB Database org.opencontainers.image.description=MariaDB Database for relational SQL org.opencontainers.image.documentation=https://hub.docker.com/_/mariadb/ org.opencontainers.image.base.name=docker.io/redhat/ubi9-minimal org.opencontainers.image.licenses=GPL-2.0 org.opencontainers.image.source=https://github.com/MariaDB/mariadb-docker org.opencontainers.image.vendor=MariaDB Community org.opencontainers.image.version=11.8.9 org.opencontainers.image.url=https://github.com/MariaDB/mariadb-docker

ARG MARIADB_VERSION=11.8.9

ENV MARIADB_VERSION=11.8.9

RUN |1 MARIADB_VERSION=11.8.9 /bin/sh -c set -eux ; curl --fail https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-9 --output /tmp/epelkey.txt ; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME ; gpg --batch --import /tmp/epelkey.txt ; gpg --batch --armor --export FF8AD1344597106ECE813B918A3872BF3228467C > /tmp/epelkey.txt ; rpmkeys --import /tmp/epelkey.txt ; curl --fail https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm --output /tmp/epel-release-latest-9.noarch.rpm ; rpm -K /tmp/epel-release-latest-9.noarch.rpm ; rpm -ivh /tmp/epel-release-latest-9.noarch.rpm ; rm /tmp/epelkey.txt /tmp/epel-release-latest-9.noarch.rpm ; curl --fail https://archive.mariadb.org/PublicKey --output /tmp/MariaDB-Server-GPG-KEY ; gpg --batch --import /tmp/MariaDB-Server-GPG-KEY; gpg --batch --armor --export 177F4010FE56CA3336300305F1656F24C74CD1D8 > /tmp/MariaDB-Server-GPG-KEY ; rpmkeys --import /tmp/MariaDB-Server-GPG-KEY ; rm -rf "$GNUPGHOME" /tmp/MariaDB-Server-GPG-KEY ; unset GNUPGHOME ; microdnf update -y ; microdnf reinstall -y tzdata ; microdnf install -y procps-ng zstd xz gzip tar jemalloc gperftools-libs pwgen pv util-linux-core ; mkdir -p /etc/mysql/conf.d /etc/mysql/mariadb.conf.d/ /var/lib/mysql/mysql /run/mariadb /usr/lib64/galera ; chmod ugo+rwx,o+t /run/mariadb ; microdnf install -y MariaDB-backup-${MARIADB_VERSION} MariaDB-server-${MARIADB_VERSION} ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib/libgalera_smm.so ; ln -s /usr/lib64/galera-4/libgalera_smm.so /usr/lib64/galera/libgalera_smm.so ; openssl list -providers | awk '/^\s*fips/{f=1} f && /status: active/{print "FIPS is active"; found=1; exit 0} END { if (!found) { print "FIPS is not active"; exit 1} }'; microdnf clean all ; rmdir /var/lib/mysql/mysql ; chown -R mysql:mysql /var/lib/mysql /run/mariadb ; mkdir /licenses ; ln -s /usr/share/doc/MariaDB-server-${MARIADB_VERSION}/COPYING /licenses/GPL-2 ; ln -s /usr/share/licenses /licenses/package-licenses ; ln -s Apache-2.0-license /licenses/gosu # buildkit

VOLUME [/var/lib/mysql]

RUN |1 MARIADB_VERSION=11.8.9 /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

COPY healthcheck.sh /usr/local/bin/healthcheck.sh # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

USER mysql

EXPOSE map[3306/tcp:{}]

CMD ["mariadbd"]