68 lines
2.8 KiB
Docker
68 lines
2.8 KiB
Docker
FROM fedora:40
|
|
|
|
RUN dnf update -y --setopt install_weak_deps=False
|
|
|
|
RUN dnf install -y --setopt install_weak_deps=False git git-lfs git-ftp fuse-overlayfs
|
|
|
|
RUN dnf install -y --setopt install_weak_deps=False nodejs nodejs-npm python3-devel python3-pip pipx
|
|
|
|
RUN dnf install -y --setopt install_weak_deps=False perl perl-CPAN ruby rubygems
|
|
|
|
RUN dnf install -y --setopt install_weak_deps=False clang gcc
|
|
|
|
RUN dnf install -y --setopt install_weak_deps=False coreutils bash aria2 jq yq zstd brotli sqlite
|
|
|
|
RUN dnf install -y --setopt install_weak_deps=False buildah podman --exclude container-selinux
|
|
|
|
# We don't clean up dnf cache since user may want to install packages for their use
|
|
|
|
ADD containers.conf /etc/containers/
|
|
|
|
# Copy & modify the defaults to provide reference if runtime changes needed.
|
|
# Changes here are required for running with fuse-overlay storage inside container.
|
|
RUN sed -e 's|^#mount_program|mount_program|g' \
|
|
-e '/additionalimage.*/a "/var/lib/shared",' \
|
|
-e 's|^mountopt[[:space:]]*=.*$|mountopt = "nodev,fsync=0"|g' \
|
|
/usr/share/containers/storage.conf \
|
|
> /etc/containers/storage.conf && \
|
|
chmod 644 /etc/containers/storage.conf && \
|
|
chmod 644 /etc/containers/containers.conf
|
|
|
|
RUN mkdir -p /var/lib/shared/overlay-images \
|
|
/var/lib/shared/overlay-layers \
|
|
/var/lib/shared/vfs-images \
|
|
/var/lib/shared/vfs-layers && \
|
|
touch /var/lib/shared/overlay-images/images.lock && \
|
|
touch /var/lib/shared/overlay-layers/layers.lock && \
|
|
touch /var/lib/shared/vfs-images/images.lock && \
|
|
touch /var/lib/shared/vfs-layers/layers.lock
|
|
|
|
# Define uid/gid ranges for our user https://github.com/containers/buildah/issues/3053
|
|
RUN useradd action && \
|
|
echo -e "action:1:999\action:1001:64535" > /etc/subuid && \
|
|
echo -e "action:1:999\action:1001:64535" > /etc/subgid && \
|
|
mkdir -p /home/action/.local/share/containers && \
|
|
mkdir -p /home/action/.config/containers && \
|
|
chown -R action:action /home/action
|
|
|
|
# See: https://github.com/containers/buildah/issues/4669
|
|
# Copy & modify the config for the `action` user and remove the global
|
|
# `runroot` and `graphroot` which current `actuib` user cannot access,
|
|
# in such case storage will choose a runroot in `/var/tmp`.
|
|
RUN sed -e 's|^#mount_program|mount_program|g' \
|
|
-e 's|^graphroot|#graphroot|g' \
|
|
-e 's|^runroot|#runroot|g' \
|
|
/etc/containers/storage.conf \
|
|
> /home/action/.config/containers/storage.conf && \
|
|
chown action:action /home/action/.config/containers/storage.conf
|
|
|
|
|
|
VOLUME /var/lib/containers
|
|
VOLUME /home/action/.local/share/containers
|
|
|
|
# Set up environment variables to note that this is
|
|
# not starting with usernamespace and default to
|
|
# isolate the filesystem with chroot.
|
|
ENV _BUILDAH_STARTED_IN_USERNS="" BUILDAH_ISOLATION=chroot
|
|
|
|
ENTRYPOINT [ "/bin/bash" ]
|