Skip to content

docs: Add F5 WAF for NGINX 5.14 release notes and OS support #2150

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
ohad-perets wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

docs: Add F5 WAF for NGINX 5.14 release notes and OS support #2150

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions content/includes/waf/dockerfiles/debian-oss.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ f5-files:
```dockerfile
# syntax=docker/dockerfile:1

# Supported OS_CODENAME's are: bullseye/bookworm
# Supported OS_CODENAME's are: bullseye/bookworm/trixie
ARG OS_CODENAME=bookworm

# Base image
Expand Down Expand Up @@ -39,7 +39,7 @@ RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644
tee /etc/apt/sources.list.d/nginx-app-protect.list \
&& wget -P /etc/apt/apt.conf.d https://cs.nginx.com/static/files/90pkgs-nginx \
&& apt-get update \
&& DEBIAN_FRONTEND="noninteractive" apt-get install -y nginx=1.25.5-1~`lsb_release -cs` app-protect-module-oss \
&& DEBIAN_FRONTEND="noninteractive" apt-get install -y nginx=1.31.3-1~`lsb_release -cs` app-protect-module-oss \
&& ln -sf /dev/stdout /var/log/nginx/access.log \
&& ln -sf /dev/stderr /var/log/nginx/error.log \
&& apt-get clean \
Expand Down
2 changes: 1 addition & 1 deletion content/includes/waf/dockerfiles/debian-plus.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ f5-files:
```dockerfile
# syntax=docker/dockerfile:1

# Supported OS_CODENAME's are: bullseye/bookworm
# Supported OS_CODENAME's are: bullseye/bookworm/trixie
ARG OS_CODENAME=bookworm

# Base image
Expand Down
2 changes: 1 addition & 1 deletion content/includes/waf/dockerfiles/nginx-plus-without-jwt-mount/debian-plus.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ f5-files:
```dockerfile
# syntax=docker/dockerfile:1

# Supported OS_CODENAME's are: bullseye/bookworm
# Supported OS_CODENAME's are: bullseye/bookworm/trixie
ARG OS_CODENAME=bookworm

# Base image
Expand Down
20 changes: 13 additions & 7 deletions ...t/includes/waf/dockerfiles/rocky9-plus.md → ...nginx-plus-without-jwt-mount/rhel-plus.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,4 @@
---
f5-product: F5 WAF for NGINX
f5-files:
- content/waf/install/docker.md
- content/waf/install/kubernetes.md
Expand All @@ -8,13 +7,24 @@ f5-files:
```dockerfile
# syntax=docker/dockerfile:1

# Supported UBI_VERSION's are 8/9/10
ARG UBI_VERSION=9

# Base Image
FROM rockylinux:9
FROM registry.access.redhat.com/ubi${UBI_VERSION}/ubi

# Define the ARG again after FROM to use it in this stage
ARG UBI_VERSION

# Install NGINX Plus and F5 WAF for NGINX v5 module
RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
--mount=type=secret,id=nginx-key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
dnf -y install wget ca-certificates \
if [ "${UBI_VERSION}" = "8" ]; then \
NGINX_PLUS_REPO="nginx-plus-${UBI_VERSION}.repo"; \
else \
NGINX_PLUS_REPO="plus-${UBI_VERSION}.repo"; \
fi \
&& dnf -y install wget ca-certificates \
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/dependencies.repo \
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/${NGINX_PLUS_REPO} \
&& echo "[app-protect-x-plus]" > /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
Expand All @@ -31,10 +41,6 @@ RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644
&& ln -sf /dev/stdout /var/log/nginx/access.log \
&& ln -sf /dev/stderr /var/log/nginx/error.log

# Securely copy the JWT license:
RUN --mount=type=secret,id=license-jwt,dst=license.jwt \
cp license.jwt /etc/nginx/license.jwt

# Expose port
EXPOSE 80

Expand Down
56 changes: 0 additions & 56 deletions content/includes/waf/dockerfiles/nginx-plus-without-jwt-mount/rhel8-plus.md
View file
Open in desktop

This file was deleted.

29 changes: 20 additions & 9 deletions ...ginx-plus-without-jwt-mount/rhel9-plus.md → ...ginx-plus-without-jwt-mount/rocky-plus.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,22 +7,33 @@ f5-files:
```dockerfile
# syntax=docker/dockerfile:1

# Supported ROCKY_VERSION's are 8/9/10
ARG ROCKY_VERSION=9

# Base Image
FROM rockylinux:9
FROM rockylinux/rockylinux:${ROCKY_VERSION}

# Define the ARG again after FROM to use it in this stage
ARG ROCKY_VERSION

# Install NGINX Plus and F5 WAF for NGINX v5 module
RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
--mount=type=secret,id=nginx-key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
dnf -y install wget ca-certificates \
if [ "${ROCKY_VERSION}" = "8" ]; then \
NGINX_PLUS_REPO="nginx-plus-${ROCKY_VERSION}.repo"; \
else \
NGINX_PLUS_REPO="plus-${ROCKY_VERSION}.repo"; \
fi \
&& dnf -y install wget ca-certificates \
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/dependencies.repo \
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/${NGINX_PLUS_REPO} \
&& echo "[app-protect-x-plus]" > /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
&& echo "name=nginx-app-protect repo" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
&& echo "baseurl=https://pkgs.nginx.com/app-protect-x-plus/centos/${UBI_VERSION}/\$basearch/" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
&& echo "sslclientcert=/etc/ssl/nginx/nginx-repo.crt" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
&& echo "sslclientkey=/etc/ssl/nginx/nginx-repo.key" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
&& echo "gpgcheck=0" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
&& echo "enabled=1" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
&& echo "[app-protect-x-plus]" > /etc/yum.repos.d/app-protect-${ROCKY_VERSION}-x-plus.repo \
&& echo "name=nginx-app-protect repo" >> /etc/yum.repos.d/app-protect-${ROCKY_VERSION}-x-plus.repo \
&& echo "baseurl=https://pkgs.nginx.com/app-protect-x-plus/centos/${ROCKY_VERSION}/\$basearch/" >> /etc/yum.repos.d/app-protect-${ROCKY_VERSION}-x-plus.repo \
&& echo "sslclientcert=/etc/ssl/nginx/nginx-repo.crt" >> /etc/yum.repos.d/app-protect-${ROCKY_VERSION}-x-plus.repo \
&& echo "sslclientkey=/etc/ssl/nginx/nginx-repo.key" >> /etc/yum.repos.d/app-protect-${ROCKY_VERSION}-x-plus.repo \
&& echo "gpgcheck=0" >> /etc/yum.repos.d/app-protect-${ROCKY_VERSION}-x-plus.repo \
&& echo "enabled=1" >> /etc/yum.repos.d/app-protect-${ROCKY_VERSION}-x-plus.repo \
&& dnf clean all \
&& dnf install -y app-protect-module-plus \
&& dnf clean all \
Expand Down
41 changes: 0 additions & 41 deletions content/includes/waf/dockerfiles/nginx-plus-without-jwt-mount/rocky9-plus.md
View file
Open in desktop

This file was deleted.

2 changes: 1 addition & 1 deletion content/includes/waf/dockerfiles/nginx-plus-without-jwt-mount/ubuntu-plus.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ f5-files:
```dockerfile
# syntax=docker/dockerfile:1

# Supported OS_CODENAME's are: focal/jammy
# Supported OS_CODENAME's are: jammy/noble/resolute
ARG OS_CODENAME=jammy

# Base image
Expand Down
10 changes: 8 additions & 2 deletions ...nt/includes/waf/dockerfiles/rocky9-oss.md → content/includes/waf/dockerfiles/rhel-oss.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,8 +8,14 @@ f5-files:
```dockerfile
# syntax=docker/dockerfile:1

# Supported UBI_VERSION's are 8/9/10
ARG UBI_VERSION=9

# Base Image
FROM rockylinux:9
FROM registry.access.redhat.com/ubi${UBI_VERSION}/ubi

# Define the ARG again after FROM to use it in this stage
ARG UBI_VERSION

# Install NGINX OSS and F5 WAF for NGINX v5 module
RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
Expand Down Expand Up @@ -45,4 +51,4 @@ STOPSIGNAL SIGQUIT

# Set default command
CMD ["nginx", "-g", "daemon off;"]
```
```
15 changes: 13 additions & 2 deletions ...nt/includes/waf/dockerfiles/rhel9-plus.md → ...ent/includes/waf/dockerfiles/rhel-plus.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,13 +8,24 @@ f5-files:
```dockerfile
# syntax=docker/dockerfile:1

# Supported UBI_VERSION's are 8/9/10
ARG UBI_VERSION=9

# Base Image
FROM rockylinux:9
FROM registry.access.redhat.com/ubi${UBI_VERSION}/ubi

# Define the ARG again after FROM to use it in this stage
ARG UBI_VERSION

# Install NGINX Plus and F5 WAF for NGINX v5 module
RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
--mount=type=secret,id=nginx-key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
dnf -y install wget ca-certificates \
if [ "${UBI_VERSION}" = "8" ]; then \
NGINX_PLUS_REPO="nginx-plus-${UBI_VERSION}.repo"; \
else \
NGINX_PLUS_REPO="plus-${UBI_VERSION}.repo"; \
fi \
&& dnf -y install wget ca-certificates \
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/dependencies.repo \
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/${NGINX_PLUS_REPO} \
&& echo "[app-protect-x-plus]" > /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
Expand Down
58 changes: 0 additions & 58 deletions content/includes/waf/dockerfiles/rhel8-oss.md
View file
Open in desktop

This file was deleted.

Loading
Loading