collect reusable code
This commit is contained in:
		
							parent
							
								
									efd52d057f
								
							
						
					
					
						commit
						bacbf7d67e
					
				
					 10 changed files with 290 additions and 63 deletions
				
			
		| 
						 | 
				
			
			@ -1,61 +1,12 @@
 | 
			
		|||
FROM fedora:40
 | 
			
		||||
 | 
			
		||||
RUN dnf update -y --setopt install_weak_deps=False
 | 
			
		||||
 | 
			
		||||
RUN dnf install -y --setopt install_weak_deps=False git git-lfs git-ftp fuse-overlayfs
 | 
			
		||||
 | 
			
		||||
RUN dnf install -y --setopt install_weak_deps=False nodejs nodejs-npm python3-devel python3-pip pipx
 | 
			
		||||
 | 
			
		||||
RUN dnf install -y --setopt install_weak_deps=False perl perl-CPAN ruby rubygems
 | 
			
		||||
 | 
			
		||||
RUN dnf install -y --setopt install_weak_deps=False clang gcc
 | 
			
		||||
 | 
			
		||||
RUN dnf install -y --setopt install_weak_deps=False coreutils bash aria2 jq yq zstd brotli sqlite
 | 
			
		||||
 | 
			
		||||
RUN dnf install -y --setopt install_weak_deps=False buildah podman --exclude container-selinux
 | 
			
		||||
RUN sh /imgbuild/fedora/instpkgs-minimal.sh
 | 
			
		||||
 | 
			
		||||
# We don't clean up dnf cache since user may want to install packages for their use
 | 
			
		||||
 | 
			
		||||
ADD containers.conf /etc/containers/
 | 
			
		||||
 | 
			
		||||
# Copy & modify the defaults to provide reference if runtime changes needed.
 | 
			
		||||
# Changes here are required for running with fuse-overlay storage inside container.
 | 
			
		||||
RUN sed -e 's|^#mount_program|mount_program|g' \
 | 
			
		||||
    -e '/additionalimage.*/a "/var/lib/shared",' \
 | 
			
		||||
    -e 's|^mountopt[[:space:]]*=.*$|mountopt = "nodev,fsync=0"|g' \
 | 
			
		||||
    /usr/share/containers/storage.conf \
 | 
			
		||||
    > /etc/containers/storage.conf && \
 | 
			
		||||
    chmod 644 /etc/containers/storage.conf && \
 | 
			
		||||
    chmod 644 /etc/containers/containers.conf
 | 
			
		||||
 | 
			
		||||
RUN mkdir -p /var/lib/shared/overlay-images \
 | 
			
		||||
    /var/lib/shared/overlay-layers \
 | 
			
		||||
    /var/lib/shared/vfs-images \
 | 
			
		||||
    /var/lib/shared/vfs-layers && \
 | 
			
		||||
    touch /var/lib/shared/overlay-images/images.lock && \
 | 
			
		||||
    touch /var/lib/shared/overlay-layers/layers.lock && \
 | 
			
		||||
    touch /var/lib/shared/vfs-images/images.lock && \
 | 
			
		||||
    touch /var/lib/shared/vfs-layers/layers.lock
 | 
			
		||||
 | 
			
		||||
# Define uid/gid ranges for our user https://github.com/containers/buildah/issues/3053
 | 
			
		||||
RUN useradd action && \
 | 
			
		||||
    echo -e "action:1:999\action:1001:64535" > /etc/subuid && \
 | 
			
		||||
    echo -e "action:1:999\action:1001:64535" > /etc/subgid && \
 | 
			
		||||
    mkdir -p /home/action/.local/share/containers && \
 | 
			
		||||
    mkdir -p /home/action/.config/containers && \
 | 
			
		||||
    chown -R action:action /home/action
 | 
			
		||||
 | 
			
		||||
# See:  https://github.com/containers/buildah/issues/4669
 | 
			
		||||
# Copy & modify the config for the `action` user and remove the global
 | 
			
		||||
# `runroot` and `graphroot` which current `actuib` user cannot access,
 | 
			
		||||
# in such case storage will choose a runroot in `/var/tmp`.
 | 
			
		||||
RUN sed -e 's|^#mount_program|mount_program|g' \
 | 
			
		||||
        -e 's|^graphroot|#graphroot|g' \
 | 
			
		||||
        -e 's|^runroot|#runroot|g' \
 | 
			
		||||
        /etc/containers/storage.conf \
 | 
			
		||||
        > /home/action/.config/containers/storage.conf && \
 | 
			
		||||
        chown action:action /home/action/.config/containers/storage.conf
 | 
			
		||||
 | 
			
		||||
RUN sh /imgbuild/configure-nested-container.sh
 | 
			
		||||
 | 
			
		||||
VOLUME /var/lib/containers
 | 
			
		||||
VOLUME /home/action/.local/share/containers
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue