Compare commits
1 Commits
Author | SHA1 | Date | |
---|---|---|---|
55a26456fc |
@@ -1,90 +0,0 @@
|
|||||||
name: Docker Image CI
|
|
||||||
|
|
||||||
on:
|
|
||||||
workflow_dispatch:
|
|
||||||
branches: [ master ]
|
|
||||||
push:
|
|
||||||
branches: [ master ]
|
|
||||||
pull_request:
|
|
||||||
branches: [ master ]
|
|
||||||
schedule:
|
|
||||||
- cron: '0 5 * * 3'
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
|
|
||||||
build:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
timeout-minutes: 90
|
|
||||||
strategy:
|
|
||||||
fail-fast: true
|
|
||||||
matrix:
|
|
||||||
images:
|
|
||||||
[
|
|
||||||
base-devel,
|
|
||||||
base-openrc,
|
|
||||||
base-runit,
|
|
||||||
base-s6,
|
|
||||||
base-dinit,
|
|
||||||
base
|
|
||||||
]
|
|
||||||
env:
|
|
||||||
REGISTRY: gitea.artixlinux.org
|
|
||||||
DH_REGISTRY: docker.io
|
|
||||||
REPO_ORG: ${{ gitea.repository_owner }}
|
|
||||||
IMAGE_NAME: artixlinux
|
|
||||||
ABSOLUTE_IMAGE: ${{ env.REGISTRY }}/${{ env.REPO_ORG }}/${{ env.IMAGE_NAME }}
|
|
||||||
ABSOLUTE_DH_IMAGE: ${{ env.DH_REGISTRY }}/artixlinux/${{ env.IMAGE_NAME }}
|
|
||||||
permissions:
|
|
||||||
contents: read
|
|
||||||
packages: write
|
|
||||||
|
|
||||||
steps:
|
|
||||||
- name: Checkout repository
|
|
||||||
uses: https://github.com/actions/checkout@v4
|
|
||||||
- name: Set up docker
|
|
||||||
run: curl -fsSL https://get.docker.com | sh
|
|
||||||
# - name: Set up Docker Buildx
|
|
||||||
# id: buildx
|
|
||||||
# uses: docker/setup-buildx-action@v2
|
|
||||||
# with:
|
|
||||||
# install: true
|
|
||||||
- name: Define metadata variables
|
|
||||||
run: |
|
|
||||||
sed -i "s/ARG version=.*/ARG version=$(date +'%Y%m%d').0.${{ gitea.sha }}/" Dockerfile
|
|
||||||
sed -i "s/ARG githash=.*/ARG githash=${{ gitea.sha }}/" Dockerfile
|
|
||||||
sed -i "s/ARG created=.*/ARG created=$(date -u +'%Y-%m-%dT%H:%M:%S%:z')/" Dockerfile
|
|
||||||
cat Dockerfile
|
|
||||||
- name: Build Docker image
|
|
||||||
uses: https://github.com/docker/build-push-action@v5
|
|
||||||
with:
|
|
||||||
push: false
|
|
||||||
pull: true
|
|
||||||
no-cache: true
|
|
||||||
context: .
|
|
||||||
build-args: |
|
|
||||||
img=${{ matrix.images }}
|
|
||||||
tags: "${{ env.ABSOLUTE_IMAGE }}:${{ matrix.images }},${{ env.ABSOLUTE_DH_IMAGE }}:${{ matrix.images }},${{ env.ABSOLUTE_IMAGE }}:latest,${{ env.ABSOLUTE_DH_IMAGE }}:latest"
|
|
||||||
- name: Log in to the Container registry
|
|
||||||
uses: https://github.com/docker/login-action@v2
|
|
||||||
with:
|
|
||||||
registry: ${{ env.REGISTRY }}
|
|
||||||
username: ${{ gitea.actor }}
|
|
||||||
password: ${{ secrets.PAT }}
|
|
||||||
- name: Push to Gitea
|
|
||||||
if: github.ref == 'refs/heads/master' && ( gitea.event_name == 'push' || gitea.event_name == 'schedule' )
|
|
||||||
run: docker push "${{ env.ABSOLUTE_IMAGE }}:${{ matrix.images }}"
|
|
||||||
- name: Push latest tag
|
|
||||||
if: ( github.ref == 'refs/heads/master' && ( gitea.event_name == 'push' || gitea.event_name == 'schedule' ) ) && matrix.images == 'base'
|
|
||||||
run: docker push "${{ env.ABSOLUTE_IMAGE }}:latest"
|
|
||||||
- name: Log in to the Docker Hub
|
|
||||||
uses: https://github.com/docker/login-action@v2
|
|
||||||
with:
|
|
||||||
registry: ${{ env.DH_REGISTRY }}
|
|
||||||
username: ${{ secrets.DOCKERHUB_USER }}
|
|
||||||
password: ${{ secrets.DOCKERHUB }}
|
|
||||||
- name: Push to Docker Hub
|
|
||||||
if: github.ref == 'refs/heads/master' && ( gitea.event_name == 'push' || gitea.event_name == 'schedule' )
|
|
||||||
run: docker push "${{ env.ABSOLUTE_DH_IMAGE }}:${{ matrix.images }}"
|
|
||||||
- name: Push latest tag
|
|
||||||
if: ( github.ref == 'refs/heads/master' && ( gitea.event_name == 'push' || gitea.event_name == 'schedule' ) ) && matrix.images == 'base'
|
|
||||||
run: docker push "${{ env.ABSOLUTE_DH_IMAGE }}:latest"
|
|
@@ -1,25 +0,0 @@
|
|||||||
name: Docker Hub Description
|
|
||||||
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
branches: [ master ]
|
|
||||||
paths: [ dockerhub-readme.md ]
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
build:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
timeout-minutes: 90
|
|
||||||
|
|
||||||
steps:
|
|
||||||
- name: Checkout repository
|
|
||||||
uses: https://github.com/actions/checkout@v4
|
|
||||||
- name: Push Docker Hub description
|
|
||||||
uses: https://github.com/christian-korneck/update-container-description-action@v1
|
|
||||||
env:
|
|
||||||
DOCKER_USER: ${{ secrets.DOCKERHUB_USER }}
|
|
||||||
DOCKER_PASS: ${{ secrets.DOCKERHUB }}
|
|
||||||
with:
|
|
||||||
destination_container_repo: artixlinux/artixlinux
|
|
||||||
provider: dockerhub
|
|
||||||
short_description: 'Artix Linux is a fork of Arch Linux that respects init freedom.'
|
|
||||||
readme_file: 'dockerhub-readme.md'
|
|
39
Dockerfile
39
Dockerfile
@@ -1,39 +0,0 @@
|
|||||||
FROM artixlinux/artixlinux:latest AS build
|
|
||||||
|
|
||||||
WORKDIR /usr/artixlinux-docker
|
|
||||||
RUN pacman -Syu --noconfirm && \
|
|
||||||
pacman -Sy --noconfirm artools curl make fakechroot fakeroot
|
|
||||||
ARG img=base-devel
|
|
||||||
COPY . .
|
|
||||||
RUN make "dockerfile-${img}"
|
|
||||||
WORKDIR /usr/artixlinux-docker/output
|
|
||||||
COPY . .
|
|
||||||
RUN ROOTFS=${img}.tar.zst && \
|
|
||||||
sha256sum -c ${img}.tar.zst.SHA256 && \
|
|
||||||
mkdir /rootfs && \
|
|
||||||
tar -C /rootfs --extract --file "${ROOTFS}"
|
|
||||||
|
|
||||||
FROM scratch AS root
|
|
||||||
ARG img=base-devel
|
|
||||||
ARG version=VERSION
|
|
||||||
ARG githash=REVISION
|
|
||||||
ARG created=CREATED
|
|
||||||
LABEL org.opencontainers.image.title="Artix Linux ${img} Image"
|
|
||||||
LABEL org.opencontainers.image.description="Official containerd image of Artix Linux, a fork of Arch Linux that respects init freedom."
|
|
||||||
LABEL org.opencontainers.image.vendor="Artix Linux"
|
|
||||||
LABEL org.opencontainers.image.authors="Cory Sanin <corysanin@artixlinux.org>, artoo <artoo@artixlinux.org>, Chris Cromer <cromer@artixlinux.org>"
|
|
||||||
LABEL org.opencontainers.image.url="https://gitea.artixlinux.org/artixdocker"
|
|
||||||
LABEL org.opencontainers.image.documentation="https://wiki.artixlinux.org/"
|
|
||||||
LABEL org.opencontainers.image.source="https://gitea.artixlinux.org/artixdocker/artixlinux-docker"
|
|
||||||
LABEL org.opencontainers.image.licenses="GPL-3.0-or-later"
|
|
||||||
LABEL org.opencontainers.image.version="${version}"
|
|
||||||
LABEL org.opencontainers.image.revision="${githash}"
|
|
||||||
LABEL org.opencontainers.image.created="${created}"
|
|
||||||
|
|
||||||
COPY --from=build /rootfs/ /
|
|
||||||
|
|
||||||
RUN ldconfig && \
|
|
||||||
sed -i "/BUILD_ID/a VERSION_ID=${version}" /etc/os-release
|
|
||||||
|
|
||||||
ENV LANG=C.UTF-8
|
|
||||||
CMD ["/usr/bin/bash"]
|
|
2
Jenkinsfile
vendored
2
Jenkinsfile
vendored
@@ -1,3 +1,3 @@
|
|||||||
@Library('docker-ci') import org.artixlinux.DockerImage
|
@Library('docker-ci@base-openrc') import org.artixlinux.DockerImage
|
||||||
|
|
||||||
ImagePipeline(new DockerImage(this))
|
ImagePipeline(new DockerImage(this))
|
||||||
|
19
Makefile
19
Makefile
@@ -9,7 +9,7 @@ define rootfs
|
|||||||
find /usr/share/libalpm/hooks -exec ln -sf /dev/null $(BUILDDIR)/alpm-hooks{} \;
|
find /usr/share/libalpm/hooks -exec ln -sf /dev/null $(BUILDDIR)/alpm-hooks{} \;
|
||||||
|
|
||||||
mkdir -vp $(BUILDDIR)/var/lib/pacman/ $(OUTPUTDIR)
|
mkdir -vp $(BUILDDIR)/var/lib/pacman/ $(OUTPUTDIR)
|
||||||
install -Dm644 /usr/share/artools/pacman.conf.d/galaxy-x86_64.conf $(BUILDDIR)/etc/pacman.conf
|
install -Dm644 /usr/share/artools/pacman-default.conf $(BUILDDIR)/etc/pacman.conf
|
||||||
cat pacman-conf.d-noextract.conf >> $(BUILDDIR)/etc/pacman.conf
|
cat pacman-conf.d-noextract.conf >> $(BUILDDIR)/etc/pacman.conf
|
||||||
|
|
||||||
fakechroot fakeroot pacman -Sy -r $(BUILDDIR) \
|
fakechroot fakeroot pacman -Sy -r $(BUILDDIR) \
|
||||||
@@ -25,12 +25,10 @@ define rootfs
|
|||||||
|
|
||||||
fakechroot fakeroot chroot $(BUILDDIR) sh -c 'pacman-key --init && pacman-key --populate && rm -rf etc/pacman.d/gnupg/{openpgp-revocs.d/,private-keys-v1.d/,pubring.gpg~,gnupg.S.}*'
|
fakechroot fakeroot chroot $(BUILDDIR) sh -c 'pacman-key --init && pacman-key --populate && rm -rf etc/pacman.d/gnupg/{openpgp-revocs.d/,private-keys-v1.d/,pubring.gpg~,gnupg.S.}*'
|
||||||
|
|
||||||
fakechroot fakeroot chroot $(BUILDDIR) /usr/bin/esysusers --root "/"
|
|
||||||
|
|
||||||
ln -fs /usr/lib/os-release $(BUILDDIR)/etc/os-release
|
ln -fs /usr/lib/os-release $(BUILDDIR)/etc/os-release
|
||||||
|
|
||||||
# add system users
|
# add system users
|
||||||
#fakechroot fakeroot chroot $(BUILDDIR) /usr/bin/sysusers --root "/"
|
fakechroot fakeroot chroot $(BUILDDIR) /usr/bin/sysusers --root "/"
|
||||||
|
|
||||||
# remove passwordless login for root (see CVE-2019-5021 for reference)
|
# remove passwordless login for root (see CVE-2019-5021 for reference)
|
||||||
sed -i -e 's/^root::/root:!:/' "$(BUILDDIR)/etc/shadow"
|
sed -i -e 's/^root::/root:!:/' "$(BUILDDIR)/etc/shadow"
|
||||||
@@ -55,9 +53,6 @@ endef
|
|||||||
clean:
|
clean:
|
||||||
rm -rf $(BUILDDIR) $(OUTPUTDIR)
|
rm -rf $(BUILDDIR) $(OUTPUTDIR)
|
||||||
|
|
||||||
$(OUTPUTDIR)/base.tar.zst:
|
|
||||||
$(call rootfs,base,base)
|
|
||||||
|
|
||||||
$(OUTPUTDIR)/base-openrc.tar.zst:
|
$(OUTPUTDIR)/base-openrc.tar.zst:
|
||||||
$(call rootfs,base-openrc,base,elogind-openrc)
|
$(call rootfs,base-openrc,base,elogind-openrc)
|
||||||
|
|
||||||
@@ -70,9 +65,6 @@ $(OUTPUTDIR)/base-s6.tar.zst:
|
|||||||
$(OUTPUTDIR)/base-dinit.tar.zst:
|
$(OUTPUTDIR)/base-dinit.tar.zst:
|
||||||
$(call rootfs,base-dinit,base,elogind-dinit)
|
$(call rootfs,base-dinit,base,elogind-dinit)
|
||||||
|
|
||||||
$(OUTPUTDIR)/Dockerfile.base: $(OUTPUTDIR)/base.tar.zst
|
|
||||||
$(call dockerfile,base)
|
|
||||||
|
|
||||||
$(OUTPUTDIR)/Dockerfile.base-openrc: $(OUTPUTDIR)/base-openrc.tar.zst
|
$(OUTPUTDIR)/Dockerfile.base-openrc: $(OUTPUTDIR)/base-openrc.tar.zst
|
||||||
$(call dockerfile,base-openrc)
|
$(call dockerfile,base-openrc)
|
||||||
|
|
||||||
@@ -103,9 +95,6 @@ dockerfile-base-s6: $(OUTPUTDIR)/Dockerfile.base-s6
|
|||||||
.PHONY: docker-file-base-dinit
|
.PHONY: docker-file-base-dinit
|
||||||
dockerfile-base-dinit: $(OUTPUTDIR)/Dockerfile.base-dinit
|
dockerfile-base-dinit: $(OUTPUTDIR)/Dockerfile.base-dinit
|
||||||
|
|
||||||
.PHONY: docker-file-base
|
|
||||||
dockerfile-base: $(OUTPUTDIR)/Dockerfile.base
|
|
||||||
|
|
||||||
.PHONY: docker-file-base-devel
|
.PHONY: docker-file-base-devel
|
||||||
dockerfile-base-devel: $(OUTPUTDIR)/Dockerfile.base-devel
|
dockerfile-base-devel: $(OUTPUTDIR)/Dockerfile.base-devel
|
||||||
|
|
||||||
@@ -125,10 +114,6 @@ image-base-s6: $(OUTPUTDIR)/Dockerfile.base-s6
|
|||||||
image-base-dinit: $(OUTPUTDIR)/Dockerfile.base-dinit
|
image-base-dinit: $(OUTPUTDIR)/Dockerfile.base-dinit
|
||||||
${DOCKER} build -f $(OUTPUTDIR)/Dockerfile.base-dinit -t $(REGISTRY)/$(OWNER)/artixlinux:base-dinit $(OUTPUTDIR)
|
${DOCKER} build -f $(OUTPUTDIR)/Dockerfile.base-dinit -t $(REGISTRY)/$(OWNER)/artixlinux:base-dinit $(OUTPUTDIR)
|
||||||
|
|
||||||
.PHONY: docker-image-base
|
|
||||||
image-base: $(OUTPUTDIR)/Dockerfile.base
|
|
||||||
${DOCKER} build -f $(OUTPUTDIR)/Dockerfile.base -t $(REGISTRY)/$(OWNER)/artixlinux:base $(OUTPUTDIR)
|
|
||||||
|
|
||||||
.PHONY: docker-image-base-devel
|
.PHONY: docker-image-base-devel
|
||||||
image-base-devel: $(OUTPUTDIR)/Dockerfile.base-devel
|
image-base-devel: $(OUTPUTDIR)/Dockerfile.base-devel
|
||||||
${DOCKER} build -f $(OUTPUTDIR)/Dockerfile.base-devel -t $(REGISTRY)/$(OWNER)/artixlinux:base-devel $(OUTPUTDIR)
|
${DOCKER} build -f $(OUTPUTDIR)/Dockerfile.base-devel -t $(REGISTRY)/$(OWNER)/artixlinux:base-devel $(OUTPUTDIR)
|
||||||
|
27
README.md
27
README.md
@@ -6,35 +6,16 @@ This repository contains all scripts and files needed to create a Docker images
|
|||||||
|
|
||||||
Install the following Artix Linux packages:
|
Install the following Artix Linux packages:
|
||||||
* make
|
* make
|
||||||
* fakechroot
|
|
||||||
* docker
|
|
||||||
* fakeroot
|
|
||||||
* artools
|
* artools
|
||||||
|
* docker
|
||||||
|
|
||||||
## Usage
|
## Usage
|
||||||
|
|
||||||
Run `make image-base-devel` to build the base devel image.
|
Run `make docker-image` to build the base image.
|
||||||
|
|
||||||
Run `make image-base-openrc` to build the openrc base image.
|
Run `make docker-image-openrc` to build the openrc image.
|
||||||
|
|
||||||
Run `make image-base-runit` to build the runit base image.
|
Run `make docker-image-runit` to build the runit image.
|
||||||
|
|
||||||
Run `make image-base-s6` to build the s6 base image.
|
|
||||||
|
|
||||||
Run `make image-base-dinit` to build the dinit base image.
|
|
||||||
|
|
||||||
|
|
||||||
Alternatively:
|
|
||||||
|
|
||||||
Run `make dockerfile-base-devel` to build the base devel dockerfile.
|
|
||||||
|
|
||||||
Run `make dockerfile-base-openrc` to build the openrc base dockerfile.
|
|
||||||
|
|
||||||
Run `make dockerfile-base-runit` to build the runit base dockerfile.
|
|
||||||
|
|
||||||
Run `make dockerfile-base-s6` to build the s6 base dockerfile.
|
|
||||||
|
|
||||||
Run `make dockerfile-base-dinit` to build the dinit base dockerfile.
|
|
||||||
|
|
||||||
## Purpose
|
## Purpose
|
||||||
|
|
||||||
|
@@ -1,39 +0,0 @@
|
|||||||
# Quick reference
|
|
||||||
|
|
||||||
* **Maintained by**:
|
|
||||||
|
|
||||||
[Cory Sanin](https://artixlinux.org/kotnr.php#Cory%20Sanin), [artoo](https://artixlinux.org/kotor.php#Marcus%20von%20Ditfurth), [Chris Cromer](https://artixlinux.org/kotor.php#Chris%20Cromer)
|
|
||||||
|
|
||||||
* **Where to get help**:
|
|
||||||
|
|
||||||
[Artix Wiki](https://wiki.artixlinux.org/), [Artix Linux Forum](https://forum.artixlinux.org/)
|
|
||||||
|
|
||||||
# Supported tags
|
|
||||||
|
|
||||||
* latest, base
|
|
||||||
* base-devel
|
|
||||||
* base-dinit
|
|
||||||
* base-openrc
|
|
||||||
* base-runit
|
|
||||||
* base-s6
|
|
||||||
|
|
||||||
## Dockerfile repo
|
|
||||||
|
|
||||||
[artixlinux-docker](https://gitea.artixlinux.org/artixdocker/artixlinux-docker)
|
|
||||||
|
|
||||||
# Purpose
|
|
||||||
|
|
||||||
* Provide Artix Linux in a Docker Image
|
|
||||||
* Provide the most simple but complete image to base every other upon
|
|
||||||
* `pacman` needs to work out of the box
|
|
||||||
* All installed packages have to be kept unmodified
|
|
||||||
|
|
||||||
|
|
||||||
# How to run
|
|
||||||
|
|
||||||
```
|
|
||||||
docker pull artixlinux/artixlinux:base
|
|
||||||
docker run -it --rm artixlinux/artixlinux:base /bin/bash
|
|
||||||
```
|
|
||||||
|
|
||||||
Note that `--rm` removes the container on exit.
|
|
Reference in New Issue
Block a user