mirror of
https://gitlab.archlinux.org/archlinux/archlinux-docker.git
synced 2026-01-31 15:01:11 +01:00
89 lines
3.2 KiB
Makefile
89 lines
3.2 KiB
Makefile
DOCKER_USER:=pierres
|
|
BUILDDIR=build
|
|
PWD=$(shell pwd)
|
|
|
|
.PHONY: hooks
|
|
hooks:
|
|
mkdir -p alpm-hooks/usr/share/libalpm/hooks
|
|
find /usr/share/libalpm/hooks -exec ln -sf /dev/null $(PWD)/alpm-hooks{} \;
|
|
|
|
.PHONY: rootfs-base
|
|
rootfs-base: hooks
|
|
mkdir -vp $(BUILDDIR)/var/lib/pacman/
|
|
cp /usr/share/devtools/pacman-extra.conf rootfs/etc/pacman.conf
|
|
cat pacman-conf.d-noextract.conf >> rootfs/etc/pacman.conf
|
|
fakechroot -- fakeroot -- pacman -Sy -r $(BUILDDIR) \
|
|
--noconfirm --dbpath $(PWD)/$(BUILDDIR)/var/lib/pacman \
|
|
--config rootfs/etc/pacman.conf \
|
|
--noscriptlet \
|
|
--hookdir $(PWD)/alpm-hooks/usr/share/libalpm/hooks/ base
|
|
cp --recursive --preserve=timestamps --backup --suffix=.pacnew rootfs/* $(BUILDDIR)/
|
|
|
|
# remove passwordless login for root (see CVE-2019-5021 for reference)
|
|
sed -i -e 's/^root::/root:!:/' "$(BUILDDIR)/etc/shadow"
|
|
|
|
# fakeroot to map the gid/uid of the builder process to root
|
|
# fixes #22
|
|
fakeroot -- tar --numeric-owner --xattrs --acls --exclude-from=exclude -C $(BUILDDIR) -c . -f base.tar
|
|
rm -rf $(BUILDDIR) alpm-hooks
|
|
|
|
.PHONY: rootfs-base-devel
|
|
rootfs-base-devel: hooks
|
|
mkdir -vp $(BUILDDIR)/var/lib/pacman/
|
|
cp /usr/share/devtools/pacman-extra.conf rootfs/etc/pacman.conf
|
|
cat pacman-conf.d-noextract.conf >> rootfs/etc/pacman.conf
|
|
fakechroot -- fakeroot -- pacman -Sy -r $(BUILDDIR) \
|
|
--noconfirm --dbpath $(PWD)/$(BUILDDIR)/var/lib/pacman \
|
|
--config rootfs/etc/pacman.conf \
|
|
--noscriptlet \
|
|
--hookdir $(PWD)/alpm-hooks/usr/share/libalpm/hooks/ base base-devel
|
|
cp --recursive --preserve=timestamps --backup --suffix=.pacnew rootfs/* $(BUILDDIR)/
|
|
|
|
# remove passwordless login for root (see CVE-2019-5021 for reference)
|
|
sed -i -e 's/^root::/root:!:/' "$(BUILDDIR)/etc/shadow"
|
|
|
|
# fakeroot to map the gid/uid of the builder process to root
|
|
# fixes #22
|
|
fakeroot -- tar --numeric-owner --xattrs --acls --exclude-from=exclude -C $(BUILDDIR) -c . -f base-devel.tar
|
|
rm -rf $(BUILDDIR) alpm-hooks
|
|
|
|
base.tar.xz: rootfs-base
|
|
xz -9 -T0 -f base.tar
|
|
sha256sum base.tar.xz > base.tar.xz.SHA256
|
|
|
|
base-devel.tar.xz: rootfs-base-devel
|
|
xz -9 -T0 -f base-devel.tar
|
|
sha256sum base-devel.tar.xz > base-devel.tar.xz.SHA256
|
|
|
|
.PHONY: dockerfile-image-base
|
|
dockerfile-image-base: base.tar.xz
|
|
sed -e "s/TEMPLATE_ROOTFS_FILE/base.tar.xz/" \
|
|
-e "s/TEMPLATE_ROOTFS_URL/file:\/\/\/base.tar.xz/" \
|
|
-e "s/TEMPLATE_ROOTFS_HASH/$$(cat base.tar.xz.SHA256)/" \
|
|
Dockerfile.template > Dockerfile.base
|
|
|
|
.PHONY: dockerfile-image-base-devel
|
|
dockerfile-image-base-devel: base-devel.tar.xz
|
|
sed -e "s/TEMPLATE_ROOTFS_FILE/base-devel.tar.xz/" \
|
|
-e "s/TEMPLATE_ROOTFS_URL/file:\/\/\/base-devel.tar.xz/" \
|
|
-e "s/TEMPLATE_ROOTFS_HASH/$$(cat base-devel.tar.xz.SHA256)/" \
|
|
Dockerfile.template > Dockerfile.base-devel
|
|
|
|
.PHONY: docker-image-base
|
|
docker-image-base: dockerfile-image-base
|
|
docker build -f Dockerfile.base -t archlinux/archlinux:base .
|
|
|
|
.PHONY: docker-image-base-devel
|
|
docker-image-base-devel: dockerfile-image-base-devel
|
|
docker build -f Dockerfile.base-devel -t archlinux/archlinux:base-devel .
|
|
|
|
.PHONY: docker-push-base
|
|
docker-push-base:
|
|
docker login -u $(DOCKER_USER)
|
|
docker push archlinux/archlinux:base
|
|
|
|
.PHONY: docker-push-base-devel
|
|
docker-push-base-devel:
|
|
docker login -u $(DOCKER_USER)
|
|
docker push archlinux/archlinux:base-devel
|