56 lines
2.5 KiB
Docker
56 lines
2.5 KiB
Docker
FROM fedora:40
|
|
|
|
RUN dnf update -y --setopt install_weak_deps=False && \
|
|
dnf install -y --setopt install_weak_deps=False \
|
|
git git-lfs git-ftp \
|
|
jq yq sqlite sqlite-devel coreutils brotli zstd binutils aria2 bash \
|
|
fuse-overlayfs \
|
|
bison flex \
|
|
nodejs nodejs-devel nodejs-npm \
|
|
julia \
|
|
python3-devel python3-pip pipx poetry \
|
|
perl perl-devel perl-CPAN \
|
|
ruby ruby-devel rubygems \
|
|
php php-devel composer \
|
|
java-1.8.0-openjdk java-1.8.0-openjdk-devel maven-openjdk8 \
|
|
java-11-openjdk java-11-openjdk-devel \
|
|
java-17-openjdk java-17-openjdk-devel \
|
|
java-21-openjdk java-21-openjdk-devel \
|
|
qemu-user-static qemu-user-binfmt && \
|
|
dnf group install -y --setopt install_weak_deps=False "C Development Tools and Libraries" && \
|
|
dnf group install -y --setopt install_weak_deps=False "Container Management" --exclude container-selinux &&\
|
|
dnf clean all -y
|
|
|
|
ADD containers.conf /etc/containers/
|
|
|
|
# Adjust storage.conf to enable Fuse storage.
|
|
RUN sed -i -e 's|^#mount_program|mount_program|g' -e '/additionalimage.*/a "/var/lib/shared",' /etc/containers/storage.conf
|
|
RUN mkdir -p /var/lib/shared/overlay-images /var/lib/shared/overlay-layers; touch /var/lib/shared/overlay-images/images.lock; touch /var/lib/shared/overlay-layers/layers.lock
|
|
|
|
# Define uid/gid ranges for our user https://github.com/containers/buildah/issues/3053
|
|
RUN useradd action && \
|
|
echo -e "act:1:999\act:1001:64535" > /etc/subuid && \
|
|
echo -e "act:1:999\act:1001:64535" > /etc/subgid && \
|
|
mkdir -p /home/action/.local/share/containers && \
|
|
mkdir -p /home/action/.config/containers && \
|
|
chown -R action:action /home/action
|
|
# See: https://github.com/containers/buildah/issues/4669
|
|
# Copy & modify the config for the `build` user and remove the global
|
|
# `runroot` and `graphroot` which current `build` user cannot access,
|
|
# in such case storage will choose a runroot in `/var/tmp`.
|
|
RUN sed -e 's|^#mount_program|mount_program|g' \
|
|
-e 's|^graphroot|#graphroot|g' \
|
|
-e 's|^runroot|#runroot|g' \
|
|
/etc/containers/storage.conf \
|
|
> /home/build/.config/containers/storage.conf && \
|
|
chown build:build /home/build/.config/containers/storage.conf
|
|
|
|
VOLUME /var/lib/containers
|
|
VOLUME /home/action/.local/share/containers
|
|
|
|
# Set up environment variables to note that this is
|
|
# not starting with usernamespace and default to
|
|
# isolate the filesystem with chroot.
|
|
ENV _BUILDAH_STARTED_IN_USERNS="" BUILDAH_ISOLATION=chroot
|
|
|
|
ENTRYPOINT [ "/bin/bash" ]
|