push to 26.1.0

.gitea/workflows/container.yaml

@@ -0,0 +1,12 @@
+name: Build Multiarch Container Image
+on: [push]
+jobs:
+  call-reusable-workflow:
+    uses: container/multiarch-build-workflow/.gitea/workflows/build.yaml@main
+    with:
+      repository: ${{ gitea.repository }}
+      ref_name: ${{ gitea.ref_name }}
+      sha: ${{ gitea.sha }}
+      registry_url: ${{ secrets.REGISTRY_URL }}
+      registry_user: ${{ secrets.REGISTRY_USER }}
+      registry_pw: ${{ secrets.REGISTRY_PW }}

.woodpecker.yml

@@ -1,11 +0,0 @@
-pipeline:
-  publish-docker-image:
-    image: plugins/kaniko
-    settings:
-      repo: docker.io/thallian/keycloak
-      tags: latest,${CI_COMMIT_SHA:0:8},${CI_COMMIT_TAG=pre}
-      dockerfile: Dockerfile
-      username:
-        from_secret: DOCKER_USER
-      password:
-        from_secret: DOCKER_PW

Containerfile

@@ -1,14 +1,14 @@
-FROM docker.io/alpine:3.18 AS builder
+FROM docker.io/alpine:3.21 AS builder
 
-ENV VERSION=22.0.3
-ENV SHA256_SUM=fe58029394c164042c5e50e59668eb6d0d9eaa564404522e07ac19f82b1a4d95
+ENV VERSION=26.1.0
+ENV SHA256_SUM=10df73d2b533c241c799a1fa8e0de731db9229a71c2c06390eb3e87f54de63c7
 
 RUN wget "https://github.com/keycloak/keycloak/releases/download/$VERSION/keycloak-$VERSION.tar.gz"
 RUN echo "$SHA256_SUM  keycloak-$VERSION.tar.gz" | sha256sum -c - || exit 1
 RUN mkdir -p /keycloak
 RUN tar xvf keycloak-$VERSION.tar.gz -C /keycloak --strip 1
 
-FROM docker.io/thallian/alpine-s6:3.18-3.1.5.0
+FROM docker.io/thallian/alpine-s6:3.21-3.2.0.2
 
 ENV JAVA_OPTS_APPEND="-Djava.net.preferIPv4Stack=false -Djava.net.preferIPv6Addresses=true"
 
@@ -16,7 +16,7 @@ RUN addgroup -g 2222 keycloak
 RUN adduser -h /home/keycloak -u 2222 -D -G keycloak keycloak
 
 RUN apk add --no-cache \
-	openjdk17-jre-headless \
+	openjdk21-jre-headless \
 	bash
 
 COPY --from=builder --chown=keycloak:keycloak /keycloak /home/keycloak/server

rootfs/etc/s6-overlay/s6-rc.d/keycloak/run

@@ -8,5 +8,4 @@ exec s6-setuidgid keycloak /home/keycloak/server/bin/kc.sh start \
 	--db-password "$DB_PASSWORD" \
 	--hostname "$HOSTNAME" \
 	--http-enabled true \
-	--hostname-strict-backchannel=true \
-	--proxy edge
+  --proxy-headers xforwarded