mirror of
https://github.com/lukaszraczylo/kubernetes-images-sync-operator.git
synced 2026-10-12 00:45:27 +00:00
lukaszraczylo
1a3a24a3f1
The libc-bin post-install step segfaults intermittently under QEMU arm64 emulation. Install packages through a small retry helper that reruns dpkg --configure after a failure.
47 lines
1.7 KiB
Docker
47 lines
1.7 KiB
Docker
FROM ubuntu:22.04
|
|
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
ARG TARGETPLATFORM
|
|
ARG TARGETARCH
|
|
|
|
# ldconfig can segfault intermittently under QEMU arm64 emulation; retry and reconfigure.
|
|
RUN printf '%s\n' '#!/bin/sh' \
|
|
'for i in 1 2 3 4 5; do' \
|
|
' apt-get update && apt-get install -y --no-install-recommends "$@" && rm -rf /var/lib/apt/lists/* && exit 0' \
|
|
' dpkg --configure -a || true' \
|
|
' sleep 3' \
|
|
'done' \
|
|
'exit 1' > /usr/local/bin/apt-retry \
|
|
&& chmod +x /usr/local/bin/apt-retry
|
|
|
|
RUN apt-retry ca-certificates curl gnupg2 sudo jq
|
|
|
|
RUN echo "deb [arch=${TARGETARCH}] https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/unstable/xUbuntu_22.04/ /" | tee /etc/apt/sources.list.d/devel:kubic:libcontainers:unstable.list \
|
|
&& curl -fsSL "https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/unstable/xUbuntu_22.04/Release.key" | apt-key add -
|
|
|
|
RUN apt-retry uidmap fuse-overlayfs podman netavark
|
|
|
|
RUN adduser --disabled-password --gecos "" --uid 1001 runner \
|
|
&& groupadd docker --gid 123 \
|
|
&& usermod -aG sudo,docker runner \
|
|
&& echo "%sudo ALL=(ALL:ALL) NOPASSWD:ALL" > /etc/sudoers \
|
|
&& echo "Defaults env_keep += \"DEBIAN_FRONTEND\"" >> /etc/sudoers
|
|
|
|
WORKDIR /home/runner
|
|
|
|
# Copy container configuration files
|
|
COPY docker-image-worker/storage.conf docker-image-worker/containers.conf docker-image-worker/registries.conf /home/runner/.config/containers/
|
|
|
|
# Copy the entrypoint script
|
|
COPY docker-image-worker/podman-preauth.sh ./
|
|
|
|
# Copy the worker binary (from goreleaser build context)
|
|
COPY $TARGETPLATFORM/worker ./
|
|
|
|
USER runner
|
|
RUN sudo chown -R runner:runner /home/runner/.config \
|
|
&& sudo chmod +x podman-preauth.sh worker
|
|
|
|
ENTRYPOINT ["/home/runner/podman-preauth.sh"]
|
|
CMD ["bash", "-c"]
|