add system users

please work

.gitea/workflows/build-docker-images.yml

@@ -0,0 +1,90 @@
+name: Docker Image CI
+
+on:
+  workflow_dispatch:
+    branches: [ master ]
+  push:
+    branches: [ master ]
+  pull_request:
+    branches: [ master ]
+  schedule:
+    - cron: '0 5 * * 3'
+  
+jobs:
+
+  build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 90
+    strategy:
+      fail-fast: true
+      matrix:
+        images:
+          [
+            base-devel,
+            base-openrc,
+            base-runit,
+            base-s6,
+            base-dinit,
+            base
+          ]
+    env:
+      REGISTRY: gitea.artixlinux.org
+      DH_REGISTRY: docker.io
+      REPO_ORG: ${{ gitea.repository_owner }}
+      IMAGE_NAME: artixlinux
+      ABSOLUTE_IMAGE: ${{ env.REGISTRY }}/${{ env.REPO_ORG }}/${{ env.IMAGE_NAME }}
+      ABSOLUTE_DH_IMAGE: ${{ env.DH_REGISTRY }}/artixlinux/${{ env.IMAGE_NAME }}
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+    - name: Checkout repository
+      uses: https://github.com/actions/checkout@v4
+    - name: Set up docker
+      run: curl -fsSL https://get.docker.com | sh
+    # - name: Set up Docker Buildx
+    #   id: buildx
+    #   uses: docker/setup-buildx-action@v2
+    #   with:
+    #     install: true
+    - name: Define metadata variables
+      run: |
+        sed -i "s/ARG version=.*/ARG version=$(date +'%Y%m%d').0.${{ gitea.sha }}/" Dockerfile
+        sed -i "s/ARG githash=.*/ARG githash=${{ gitea.sha }}/" Dockerfile
+        sed -i "s/ARG created=.*/ARG created=$(date -u +'%Y-%m-%dT%H:%M:%S%:z')/" Dockerfile
+        cat Dockerfile
+    - name: Build Docker image
+      uses: https://github.com/docker/build-push-action@v5
+      with:
+        push: false
+        pull: true
+        no-cache: true
+        context: .
+        build-args:  |
+          img=${{ matrix.images }}
+        tags: "${{ env.ABSOLUTE_IMAGE }}:${{ matrix.images }},${{ env.ABSOLUTE_DH_IMAGE }}:${{ matrix.images }},${{ env.ABSOLUTE_IMAGE }}:latest,${{ env.ABSOLUTE_DH_IMAGE }}:latest"
+    - name: Log in to the Container registry
+      uses: https://github.com/docker/login-action@v2
+      with:
+        registry: ${{ env.REGISTRY }}
+        username: ${{ gitea.actor }}
+        password: ${{ secrets.PAT }}
+    - name: Push to Gitea
+      if: github.ref == 'refs/heads/master' && ( gitea.event_name == 'push' || gitea.event_name == 'schedule' )
+      run: docker push "${{ env.ABSOLUTE_IMAGE }}:${{ matrix.images }}"
+    - name: Push latest tag
+      if: ( github.ref == 'refs/heads/master' && ( gitea.event_name == 'push' || gitea.event_name == 'schedule' ) ) && matrix.images == 'base'
+      run: docker push "${{ env.ABSOLUTE_IMAGE }}:latest"
+    - name: Log in to the Docker Hub
+      uses: https://github.com/docker/login-action@v2
+      with:
+        registry: ${{ env.DH_REGISTRY }}
+        username: ${{ secrets.DOCKERHUB_USER }}
+        password: ${{ secrets.DOCKERHUB }}
+    - name: Push to Docker Hub
+      if: github.ref == 'refs/heads/master' && ( gitea.event_name == 'push' || gitea.event_name == 'schedule' )
+      run: docker push "${{ env.ABSOLUTE_DH_IMAGE }}:${{ matrix.images }}"
+    - name: Push latest tag
+      if: ( github.ref == 'refs/heads/master' && ( gitea.event_name == 'push' || gitea.event_name == 'schedule' ) ) && matrix.images == 'base'
+      run: docker push "${{ env.ABSOLUTE_DH_IMAGE }}:latest"

.gitea/workflows/push-docker-description.yml

@@ -0,0 +1,25 @@
+name: Docker Hub Description
+
+on:
+  push:
+    branches: [ master ]
+    paths: [ dockerhub-readme.md ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 90
+  
+    steps:
+    - name: Checkout repository
+      uses: https://github.com/actions/checkout@v4
+    - name: Push Docker Hub description
+      uses: https://github.com/christian-korneck/update-container-description-action@v1
+      env:
+        DOCKER_USER: ${{ secrets.DOCKERHUB_USER }}
+        DOCKER_PASS: ${{ secrets.DOCKERHUB }}
+      with:
+        destination_container_repo: artixlinux/artixlinux
+        provider: dockerhub
+        short_description: 'Artix Linux is a fork of Arch Linux that respects init freedom.'
+        readme_file: 'dockerhub-readme.md'

Dockerfile

@@ -0,0 +1,39 @@
+FROM artixlinux/artixlinux:latest AS build
+
+WORKDIR /usr/artixlinux-docker
+RUN pacman -Syu --noconfirm && \
+  pacman -Sy --noconfirm artools curl make fakechroot fakeroot
+ARG img=base-devel
+COPY . .
+RUN make "dockerfile-${img}"
+WORKDIR /usr/artixlinux-docker/output
+COPY . .
+RUN ROOTFS=${img}.tar.zst && \
+    sha256sum -c ${img}.tar.zst.SHA256 && \
+    mkdir /rootfs && \
+    tar -C /rootfs --extract --file "${ROOTFS}"
+
+FROM scratch AS root
+ARG img=base-devel
+ARG version=VERSION
+ARG githash=REVISION
+ARG created=CREATED
+LABEL org.opencontainers.image.title="Artix Linux ${img} Image"
+LABEL org.opencontainers.image.description="Official containerd image of Artix Linux, a fork of Arch Linux that respects init freedom."
+LABEL org.opencontainers.image.vendor="Artix Linux"
+LABEL org.opencontainers.image.authors="Cory Sanin <corysanin@artixlinux.org>, artoo <artoo@artixlinux.org>, Chris Cromer <cromer@artixlinux.org>"
+LABEL org.opencontainers.image.url="https://gitea.artixlinux.org/artixdocker"
+LABEL org.opencontainers.image.documentation="https://wiki.artixlinux.org/"
+LABEL org.opencontainers.image.source="https://gitea.artixlinux.org/artixdocker/artixlinux-docker"
+LABEL org.opencontainers.image.licenses="GPL-3.0-or-later"
+LABEL org.opencontainers.image.version="${version}"
+LABEL org.opencontainers.image.revision="${githash}"
+LABEL org.opencontainers.image.created="${created}"
+
+COPY --from=build /rootfs/ /
+
+RUN ldconfig && \
+    sed -i "/BUILD_ID/a VERSION_ID=${version}" /etc/os-release
+
+ENV LANG=C.UTF-8
+CMD ["/usr/bin/bash"]

Makefile

@@ -9,7 +9,7 @@ define rootfs
 	find /usr/share/libalpm/hooks -exec ln -sf /dev/null $(BUILDDIR)/alpm-hooks{} \;
 
 	mkdir -vp $(BUILDDIR)/var/lib/pacman/ $(OUTPUTDIR)
-	install -Dm644 /usr/share/artools/pacman-default.conf $(BUILDDIR)/etc/pacman.conf
+	install -Dm644 /usr/share/artools/pacman.conf.d/galaxy-x86_64.conf $(BUILDDIR)/etc/pacman.conf
 	cat pacman-conf.d-noextract.conf >> $(BUILDDIR)/etc/pacman.conf
 
 	fakechroot fakeroot pacman -Sy -r $(BUILDDIR) \
@@ -25,10 +25,12 @@ define rootfs
 
 	fakechroot fakeroot chroot $(BUILDDIR) sh -c 'pacman-key --init && pacman-key --populate && rm -rf etc/pacman.d/gnupg/{openpgp-revocs.d/,private-keys-v1.d/,pubring.gpg~,gnupg.S.}*'
 
+	fakechroot fakeroot chroot $(BUILDDIR) /usr/bin/esysusers --root "/"
+
 	ln -fs /usr/lib/os-release $(BUILDDIR)/etc/os-release
 
 	# add system users
-	fakechroot fakeroot chroot $(BUILDDIR) /usr/bin/sysusers --root "/"
+	#fakechroot fakeroot chroot $(BUILDDIR) /usr/bin/sysusers --root "/"
 
 	# remove passwordless login for root (see CVE-2019-5021 for reference)
 	sed -i -e 's/^root::/root:!:/' "$(BUILDDIR)/etc/shadow"
@@ -53,6 +55,9 @@ endef
 clean:
 	rm -rf $(BUILDDIR) $(OUTPUTDIR)
 
+$(OUTPUTDIR)/base.tar.zst:
+	$(call rootfs,base,base)
+
 $(OUTPUTDIR)/base-openrc.tar.zst:
 	$(call rootfs,base-openrc,base,elogind-openrc)
 
@@ -65,6 +70,9 @@ $(OUTPUTDIR)/base-s6.tar.zst:
 $(OUTPUTDIR)/base-dinit.tar.zst:
 	$(call rootfs,base-dinit,base,elogind-dinit)
 
+$(OUTPUTDIR)/Dockerfile.base: $(OUTPUTDIR)/base.tar.zst
+	$(call dockerfile,base)
+
 $(OUTPUTDIR)/Dockerfile.base-openrc: $(OUTPUTDIR)/base-openrc.tar.zst
 	$(call dockerfile,base-openrc)
 
@@ -95,6 +103,9 @@ dockerfile-base-s6: $(OUTPUTDIR)/Dockerfile.base-s6
 .PHONY: docker-file-base-dinit
 dockerfile-base-dinit: $(OUTPUTDIR)/Dockerfile.base-dinit
 
+.PHONY: docker-file-base
+dockerfile-base: $(OUTPUTDIR)/Dockerfile.base
+
 .PHONY: docker-file-base-devel
 dockerfile-base-devel: $(OUTPUTDIR)/Dockerfile.base-devel
 
@@ -114,6 +125,10 @@ image-base-s6: $(OUTPUTDIR)/Dockerfile.base-s6
 image-base-dinit: $(OUTPUTDIR)/Dockerfile.base-dinit
 	${DOCKER} build -f $(OUTPUTDIR)/Dockerfile.base-dinit -t $(REGISTRY)/$(OWNER)/artixlinux:base-dinit $(OUTPUTDIR)
 
+.PHONY: docker-image-base
+image-base: $(OUTPUTDIR)/Dockerfile.base
+	${DOCKER} build -f $(OUTPUTDIR)/Dockerfile.base -t $(REGISTRY)/$(OWNER)/artixlinux:base $(OUTPUTDIR)
+
 .PHONY: docker-image-base-devel
 image-base-devel: $(OUTPUTDIR)/Dockerfile.base-devel
 	${DOCKER} build -f $(OUTPUTDIR)/Dockerfile.base-devel -t $(REGISTRY)/$(OWNER)/artixlinux:base-devel $(OUTPUTDIR)

README.md

@@ -6,16 +6,35 @@ This repository contains all scripts and files needed to create a Docker images
 
 Install the following Artix Linux packages:
 * make
-* artools
+* fakechroot
 * docker
+* fakeroot
+* artools
 
 ## Usage
 
-Run `make docker-image` to build the base image.
+Run `make image-base-devel` to build the base devel image.
 
-Run `make docker-image-openrc` to build the openrc image.
+Run `make image-base-openrc` to build the openrc base image.
 
-Run `make docker-image-runit` to build the runit image.
+Run `make image-base-runit` to build the runit base image.
+
+Run `make image-base-s6` to build the s6 base image.
+
+Run `make image-base-dinit` to build the dinit base image.
+
+
+Alternatively:
+
+Run `make dockerfile-base-devel` to build the base devel dockerfile.
+
+Run `make dockerfile-base-openrc` to build the openrc base dockerfile.
+
+Run `make dockerfile-base-runit` to build the runit base dockerfile.
+
+Run `make dockerfile-base-s6` to build the s6 base dockerfile.
+
+Run `make dockerfile-base-dinit` to build the dinit base dockerfile.
 
 ## Purpose
 

dockerhub-readme.md

@@ -0,0 +1,39 @@
+# Quick reference
+
+* **Maintained by**:
+
+  [Cory Sanin](https://artixlinux.org/kotnr.php#Cory%20Sanin), [artoo](https://artixlinux.org/kotor.php#Marcus%20von%20Ditfurth), [Chris Cromer](https://artixlinux.org/kotor.php#Chris%20Cromer)
+
+* **Where to get help**:
+
+  [Artix Wiki](https://wiki.artixlinux.org/), [Artix Linux Forum](https://forum.artixlinux.org/)
+
+# Supported tags
+
+* latest, base
+* base-devel
+* base-dinit
+* base-openrc
+* base-runit
+* base-s6
+
+## Dockerfile repo
+
+[artixlinux-docker](https://gitea.artixlinux.org/artixdocker/artixlinux-docker)
+
+# Purpose
+
+* Provide Artix Linux in a Docker Image
+* Provide the most simple but complete image to base every other upon
+* `pacman` needs to work out of the box
+* All installed packages have to be kept unmodified
+
+
+# How to run
+
+```
+docker pull artixlinux/artixlinux:base
+docker run -it --rm artixlinux/artixlinux:base /bin/bash
+```
+
+Note that `--rm` removes the container on exit.