[PM-2242] Dockerfile and entrypoint changes for kerberos

[keithhubner]

Type of change

- [ ] Bug fix
- [ ] New feature development
- [ ] Tech debt (refactoring, code cleanup, dependency upgrades, etc)
- [ ] Build/deploy pipeline (DevOps)
- [X] Other

Objective

The purpose of this change is to allow the optional configuration of AD integrated authentication using Kerberos.

This involves the krb5-user package installation and the initialising kinit if the keytab file is present for services which require connection to the database:

Admin / API / Events / Identity / Scim / Sso

Code changes

Added:

...
krb5-user \
... 

to each of the following Dockerfiles:
/server/src/Admin/Dockerfile
/server/src/Api/Dockerfile
/server/src/Events/Dockerfile
/server/src/Identity/Dockerfile
/server/bitwarden_license/src/Scim/Dockerfile
/server/bitwarden_license/src/Sso/Dockerfile

Added:

...
if [ -f "/etc/krb5/bitwarden.keytab" ]; then
  gosu $USERNAME:$GROUPNAME kinit bitwarden -k -t /etc/krb5/bitwarden.keytab
fi
...

to each of the following entrypoint.sh files:
/server/src/Admin/entrypoint.sh
/server/src/Api/entrypoint.sh
/server/src/Events/entrypoint.sh
/server/src/Identity/entrypoint.sh
/server/bitwarden_license/src/Scim/entrypoint.sh
/server/bitwarden_license/src/Sso/entrypoint.sh

[bitwarden-bot]

Thank you for your contribution! We've added this to our internal Community PR board for review.
ID: PM-2242

[bitwarden-bot]

Checkmarx One – Scan Summary & Details – 0c7b562f-76aa-4bea-a6c3-07e967964b85

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Unpinned Actions Full Length Commit SHA	/version-bump.yml: 82	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Healthcheck Instruction Missing	/Dockerfile: 1	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working
	Healthcheck Instruction Missing	/Dockerfile: 1	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working
	Healthcheck Instruction Missing	/Dockerfile: 1	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

Fixed Issues

Severity	Issue	Source File / Package
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Reflected_XSS_All_Clients	/test/IntegrationTestCommon/Factories/IdentityApplicationFactory.cs: 38
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Unpinned Actions Full Length Commit SHA	/version-bump.yml: 91
	Healthcheck Instruction Missing	/Dockerfile: 1
	Healthcheck Instruction Missing	/Dockerfile: 1
	Healthcheck Instruction Missing	/Dockerfile: 1

[djsmith85]

@keithhubner Does this replace #3156