Compare commits
No commits in common. "4c348ca0f640eabd9c8625af43e37ae55152b470" and "004e408e286981ce7fd985c28527fe6b140e5f54" have entirely different histories.
4c348ca0f6
...
004e408e28
3 changed files with 1 additions and 28 deletions
|
@ -32,8 +32,6 @@ jobs:
|
||||||
buildah --storage-opt mount_program=/usr/bin/fuse-overlayfs --cgroup-manager=cgroupfs build --arch aarch64 \
|
buildah --storage-opt mount_program=/usr/bin/fuse-overlayfs --cgroup-manager=cgroupfs build --arch aarch64 \
|
||||||
--pid=host --ipc=host --network=host --userns=host --uts=host --squash \
|
--pid=host --ipc=host --network=host --userns=host --uts=host --squash \
|
||||||
--manifest code.lightstands.xyz/standcoded/fedora:40 .
|
--manifest code.lightstands.xyz/standcoded/fedora:40 .
|
||||||
env:
|
|
||||||
BUILDAH_ISOLATION=chroot
|
|
||||||
- name: Push Images
|
- name: Push Images
|
||||||
run: |
|
run: |
|
||||||
buildah login code.lightstands.xyz \
|
buildah login code.lightstands.xyz \
|
||||||
|
|
|
@ -16,38 +16,15 @@ RUN dnf update -y --setopt install_weak_deps=False && \
|
||||||
java-11-openjdk java-11-openjdk-devel \
|
java-11-openjdk java-11-openjdk-devel \
|
||||||
java-17-openjdk java-17-openjdk-devel \
|
java-17-openjdk java-17-openjdk-devel \
|
||||||
java-21-openjdk java-21-openjdk-devel \
|
java-21-openjdk java-21-openjdk-devel \
|
||||||
qemu-user-static && \
|
&& \
|
||||||
dnf group install -y --setopt install_weak_deps=False "C Development Tools and Libraries" && \
|
dnf group install -y --setopt install_weak_deps=False "C Development Tools and Libraries" && \
|
||||||
dnf group install -y --setopt install_weak_deps=False "Container Management" --exclude container-selinux &&\
|
dnf group install -y --setopt install_weak_deps=False "Container Management" --exclude container-selinux &&\
|
||||||
dnf clean all -y
|
dnf clean all -y
|
||||||
|
|
||||||
ADD containers.conf /etc/containers/
|
|
||||||
|
|
||||||
# Adjust storage.conf to enable Fuse storage.
|
# Adjust storage.conf to enable Fuse storage.
|
||||||
RUN sed -i -e 's|^#mount_program|mount_program|g' -e '/additionalimage.*/a "/var/lib/shared",' /etc/containers/storage.conf
|
RUN sed -i -e 's|^#mount_program|mount_program|g' -e '/additionalimage.*/a "/var/lib/shared",' /etc/containers/storage.conf
|
||||||
RUN mkdir -p /var/lib/shared/overlay-images /var/lib/shared/overlay-layers; touch /var/lib/shared/overlay-images/images.lock; touch /var/lib/shared/overlay-layers/layers.lock
|
RUN mkdir -p /var/lib/shared/overlay-images /var/lib/shared/overlay-layers; touch /var/lib/shared/overlay-images/images.lock; touch /var/lib/shared/overlay-layers/layers.lock
|
||||||
|
|
||||||
# Define uid/gid ranges for our user https://github.com/containers/buildah/issues/3053
|
|
||||||
RUN useradd action && \
|
|
||||||
echo -e "act:1:999\act:1001:64535" > /etc/subuid && \
|
|
||||||
echo -e "act:1:999\act:1001:64535" > /etc/subgid && \
|
|
||||||
mkdir -p /home/action/.local/share/containers && \
|
|
||||||
mkdir -p /home/action/.config/containers && \
|
|
||||||
chown -R action:action /home/action
|
|
||||||
# See: https://github.com/containers/buildah/issues/4669
|
|
||||||
# Copy & modify the config for the `build` user and remove the global
|
|
||||||
# `runroot` and `graphroot` which current `build` user cannot access,
|
|
||||||
# in such case storage will choose a runroot in `/var/tmp`.
|
|
||||||
RUN sed -e 's|^#mount_program|mount_program|g' \
|
|
||||||
-e 's|^graphroot|#graphroot|g' \
|
|
||||||
-e 's|^runroot|#runroot|g' \
|
|
||||||
/etc/containers/storage.conf \
|
|
||||||
> /home/build/.config/containers/storage.conf && \
|
|
||||||
chown build:build /home/build/.config/containers/storage.conf
|
|
||||||
|
|
||||||
VOLUME /var/lib/containers
|
|
||||||
VOLUME /home/action/.local/share/containers
|
|
||||||
|
|
||||||
# Set up environment variables to note that this is
|
# Set up environment variables to note that this is
|
||||||
# not starting with usernamespace and default to
|
# not starting with usernamespace and default to
|
||||||
# isolate the filesystem with chroot.
|
# isolate the filesystem with chroot.
|
||||||
|
|
|
@ -1,2 +0,0 @@
|
||||||
[engine]
|
|
||||||
cgroup_manager = "cgroupfs"
|
|
Loading…
Reference in a new issue