mirror of
https://github.com/flatcar/scripts.git
synced 2025-09-26 08:01:14 +02:00
app-containers/docker: sync with Gentoo
Commit-Ref: 74214006c9
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
This commit is contained in:
Mathieu Tortuyaux
parent
ca129b1d96
commit
6bd9d82d32
@ -1,5 +1,2 @@
|
|||||||
DIST docker-24.0.5.tar.gz 14456089 BLAKE2B be13a4256787152cb35ddb96d80e97a5e5b587094f1c61d18158737a037c4e81b88c186098ba7416eb7778022ece07bc31ee55af13d3e3da8e0bbd5452ad027f SHA512 cde2e47e7658b153399ee29154ec21eebf54b292185e07d43b968895dcfdfead95e4507fefb713859a4540f21d8007116d3ebeaa1fb7ba305fb2a0449ba1bee6
|
DIST docker-26.1.0.tar.gz 16390376 BLAKE2B 6703e9b153c430bc28aed2e7de7bada0203353d61f0a2ce3d49ddbd017eab196a685dd1ab1e719a6b287813eb5fa4f2c612e2cf1ab95789d6e79ebe5dac7ace3 SHA512 47b6b9af9947016884614b6bc25977e1db281da95c9b8b34c753c21c664a737a893f9fa65d92cbb897735aae3893567e106e6bababb5507e069b1e0981e48d50
|
||||||
DIST docker-24.0.6.tar.gz 14462378 BLAKE2B bced8e687abac59254a9969df46f323a835627a724889e5966bea08df8766b4291914442001d1b573280c45ac4d357a673e98e8fba2b8d116a1dbd65424ccf78 SHA512 d9bf0ba756b1ebe69a44819d7c6aa5d66dad8db5bcc41233e2bfce8131334a2fe1af3972de7f602b7911231288d29aaea797b7a05b335c2d7214a613b27c4b63
|
DIST docker-27.0.3.tar.gz 16523895 BLAKE2B a86b2bf7ed85216f6a033a2fdb6cb0d545822570463b6b5f218052bf8e9ca3dde0e15ba4872da6370502a985e84ce704f810386b806e7dfb9d40d6d7b497d629 SHA512 bff7084f1bbe7fd6e4241d7172d3445b8ea36ef68ec5ee429a8ee27e1dfa81c1810d8ce07cb4c77f78037725c53d1de565e587d7f96994a653a09ce33e9bc344
|
||||||
DIST docker-24.0.7.tar.gz 14658649 BLAKE2B 73bad494640ef8cad2b9b991f94414d8bec4dd88b120b0f8238f74d01269c445270f45410ac2c78af074356c3ba60a7c550ab28f5da5924bdc6d8b99e85a1360 SHA512 08f22fcbce163c3ba8eb21302fd38ff04fd3f27067f5715a3c527ba2efe67f694fac80bfe6d6b5e22d06d98917e1685a9d3d9b58991f221354f637f4a8bdc526
|
|
||||||
DIST docker-25.0.1.tar.gz 15936052 BLAKE2B 32b24893c9b098b218b16548be074588ad98ed31c8b87ab3fa467f79e33e96ce94f694b86f2920b1166e64c153b1c2482cb602117f673d23f0fc5ccc9b28ae92 SHA512 816c888925cf609e7caa6e491b45614f69fdd7df5ed4f783d8a77cf86d9f46f4f457a95a943aa75ecddf99d080daf78bc0dba55e9648960dc539b1ae62052361
|
|
||||||
DIST docker-25.0.4.tar.gz 15953567 BLAKE2B 85398de80b14f21d611822a1714ac987d919cf6a2a8059d8a6d41c9b63fd63a04013e47e01021eccdbd107f1a3f8ee55dc1ecbc4b6c9cc20ff2854434e3b6af7 SHA512 07e724de305def32a1e32a724a8041be193745c4f0d549708723cf5d14b840f74648e83e790fd526e00a6c6fdb7e487ee4e5ed0752fbe172d673ab86fe8819d2
|
|
||||||
|
|||||||
@ -1,330 +0,0 @@
|
|||||||
# Copyright 1999-2023 Gentoo Authors
|
|
||||||
# Distributed under the terms of the GNU General Public License v2
|
|
||||||
|
|
||||||
EAPI=7
|
|
||||||
EGO_PN=github.com/docker/docker
|
|
||||||
MY_PV=${PV/_/-}
|
|
||||||
inherit linux-info systemd udev golang-vcs-snapshot
|
|
||||||
GIT_COMMIT=4ffc61430bbe6d3d405bdf357b766bf303ff3cc5
|
|
||||||
|
|
||||||
DESCRIPTION="The core functions you need to create Docker images and run Docker containers"
|
|
||||||
HOMEPAGE="https://www.docker.com/"
|
|
||||||
SRC_URI="https://github.com/moby/moby/archive/v${MY_PV}.tar.gz -> ${P}.tar.gz"
|
|
||||||
|
|
||||||
LICENSE="Apache-2.0"
|
|
||||||
SLOT="0"
|
|
||||||
KEYWORDS="amd64 ~arm arm64 ppc64 ~riscv ~x86"
|
|
||||||
IUSE="apparmor btrfs +container-init device-mapper overlay seccomp selinux"
|
|
||||||
|
|
||||||
DEPEND="
|
|
||||||
acct-group/docker
|
|
||||||
>=dev-db/sqlite-3.7.9:3
|
|
||||||
apparmor? ( sys-libs/libapparmor )
|
|
||||||
btrfs? ( >=sys-fs/btrfs-progs-3.16.1 )
|
|
||||||
device-mapper? ( >=sys-fs/lvm2-2.02.89[thin] )
|
|
||||||
seccomp? ( >=sys-libs/libseccomp-2.2.1 )
|
|
||||||
"
|
|
||||||
|
|
||||||
# https://github.com/moby/moby/blob/master/project/PACKAGERS.md#runtime-dependencies
|
|
||||||
# https://github.com/moby/moby/blob/master/project/PACKAGERS.md#optional-dependencies
|
|
||||||
RDEPEND="
|
|
||||||
${DEPEND}
|
|
||||||
>=net-firewall/iptables-1.4
|
|
||||||
sys-process/procps
|
|
||||||
>=dev-vcs/git-1.7
|
|
||||||
>=app-arch/xz-utils-4.9
|
|
||||||
dev-libs/libltdl
|
|
||||||
>=app-containers/containerd-1.7.1[apparmor?,btrfs?,device-mapper?,seccomp?]
|
|
||||||
!app-containers/docker-proxy
|
|
||||||
container-init? ( >=sys-process/tini-0.19.0[static] )
|
|
||||||
selinux? ( sec-policy/selinux-docker )
|
|
||||||
"
|
|
||||||
|
|
||||||
# https://github.com/docker/docker/blob/master/project/PACKAGERS.md#build-dependencies
|
|
||||||
BDEPEND="
|
|
||||||
>=dev-lang/go-1.16.12
|
|
||||||
dev-go/go-md2man
|
|
||||||
virtual/pkgconfig
|
|
||||||
"
|
|
||||||
# tests require running dockerd as root and downloading containers
|
|
||||||
RESTRICT="installsources strip test"
|
|
||||||
|
|
||||||
S="${WORKDIR}/${P}/src/${EGO_PN}"
|
|
||||||
|
|
||||||
# https://bugs.gentoo.org/748984 https://github.com/etcd-io/etcd/pull/12552
|
|
||||||
PATCHES=(
|
|
||||||
"${FILESDIR}/0001-Openrc-Depend-on-containerd-init-script.patch"
|
|
||||||
)
|
|
||||||
|
|
||||||
pkg_setup() {
|
|
||||||
# this is based on "contrib/check-config.sh" from upstream's sources
|
|
||||||
# required features.
|
|
||||||
CONFIG_CHECK="
|
|
||||||
~NAMESPACES ~NET_NS ~PID_NS ~IPC_NS ~UTS_NS
|
|
||||||
~CGROUPS ~CGROUP_CPUACCT ~CGROUP_DEVICE ~CGROUP_FREEZER ~CGROUP_SCHED ~CPUSETS ~MEMCG
|
|
||||||
~KEYS
|
|
||||||
~VETH ~BRIDGE ~BRIDGE_NETFILTER
|
|
||||||
~IP_NF_FILTER ~IP_NF_TARGET_MASQUERADE
|
|
||||||
~NETFILTER_XT_MATCH_ADDRTYPE
|
|
||||||
~NETFILTER_XT_MATCH_CONNTRACK
|
|
||||||
~NETFILTER_XT_MATCH_IPVS
|
|
||||||
~NETFILTER_XT_MARK
|
|
||||||
~IP_NF_NAT ~NF_NAT
|
|
||||||
~POSIX_MQUEUE
|
|
||||||
"
|
|
||||||
WARNING_POSIX_MQUEUE="CONFIG_POSIX_MQUEUE: is required for bind-mounting /dev/mqueue into containers"
|
|
||||||
|
|
||||||
if kernel_is lt 4 8; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~DEVPTS_MULTIPLE_INSTANCES
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is le 5 1; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~NF_NAT_IPV4
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is le 5 2; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~NF_NAT_NEEDED
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is ge 4 15; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~CGROUP_BPF
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# optional features
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~USER_NS
|
|
||||||
"
|
|
||||||
|
|
||||||
if use seccomp; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~SECCOMP ~SECCOMP_FILTER
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~CGROUP_PIDS
|
|
||||||
"
|
|
||||||
|
|
||||||
if kernel_is lt 6 1; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~MEMCG_SWAP
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is le 5 8; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~MEMCG_SWAP_ENABLED
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~!LEGACY_VSYSCALL_NATIVE
|
|
||||||
"
|
|
||||||
if kernel_is lt 5 19; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~LEGACY_VSYSCALL_EMULATE
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~!LEGACY_VSYSCALL_NONE
|
|
||||||
"
|
|
||||||
WARNING_LEGACY_VSYSCALL_NONE="CONFIG_LEGACY_VSYSCALL_NONE enabled: \
|
|
||||||
Containers with <=glibc-2.13 will not work"
|
|
||||||
|
|
||||||
if kernel_is le 4 5; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~MEMCG_KMEM
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is lt 5; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~IOSCHED_CFQ ~CFQ_GROUP_IOSCHED
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~BLK_CGROUP ~BLK_DEV_THROTTLING
|
|
||||||
~CGROUP_PERF
|
|
||||||
~CGROUP_HUGETLB
|
|
||||||
~NET_CLS_CGROUP ~CGROUP_NET_PRIO
|
|
||||||
~CFS_BANDWIDTH ~FAIR_GROUP_SCHED
|
|
||||||
~IP_NF_TARGET_REDIRECT
|
|
||||||
~IP_VS
|
|
||||||
~IP_VS_NFCT
|
|
||||||
~IP_VS_PROTO_TCP
|
|
||||||
~IP_VS_PROTO_UDP
|
|
||||||
~IP_VS_RR
|
|
||||||
"
|
|
||||||
|
|
||||||
if use selinux; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~SECURITY_SELINUX
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if use apparmor; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~SECURITY_APPARMOR
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# if ! is_set EXT4_USE_FOR_EXT2; then
|
|
||||||
# check_flags EXT3_FS EXT3_FS_XATTR EXT3_FS_POSIX_ACL EXT3_FS_SECURITY
|
|
||||||
# if ! is_set EXT3_FS || ! is_set EXT3_FS_XATTR || ! is_set EXT3_FS_POSIX_ACL || ! is_set EXT3_FS_SECURITY; then
|
|
||||||
# echo " $(wrap_color '(enable these ext3 configs if you are using ext3 as backing filesystem)' bold black)"
|
|
||||||
# fi
|
|
||||||
# fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~EXT4_FS ~EXT4_FS_POSIX_ACL ~EXT4_FS_SECURITY
|
|
||||||
"
|
|
||||||
|
|
||||||
# if ! is_set EXT4_FS || ! is_set EXT4_FS_POSIX_ACL || ! is_set EXT4_FS_SECURITY; then
|
|
||||||
# if is_set EXT4_USE_FOR_EXT2; then
|
|
||||||
# echo " $(wrap_color 'enable these ext4 configs if you are using ext3 or ext4 as backing filesystem' bold black)"
|
|
||||||
# else
|
|
||||||
# echo " $(wrap_color 'enable these ext4 configs if you are using ext4 as backing filesystem' bold black)"
|
|
||||||
# fi
|
|
||||||
# fi
|
|
||||||
|
|
||||||
# network drivers
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~VXLAN ~BRIDGE_VLAN_FILTERING
|
|
||||||
~CRYPTO ~CRYPTO_AEAD ~CRYPTO_GCM ~CRYPTO_SEQIV ~CRYPTO_GHASH
|
|
||||||
~XFRM ~XFRM_USER ~XFRM_ALGO ~INET_ESP
|
|
||||||
"
|
|
||||||
if kernel_is le 5 3; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~INET_XFRM_MODE_TRANSPORT
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~IPVLAN
|
|
||||||
"
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~MACVLAN ~DUMMY
|
|
||||||
"
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~NF_NAT_FTP ~NF_CONNTRACK_FTP ~NF_NAT_TFTP ~NF_CONNTRACK_TFTP
|
|
||||||
"
|
|
||||||
|
|
||||||
# storage drivers
|
|
||||||
if use btrfs; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~BTRFS_FS
|
|
||||||
~BTRFS_FS_POSIX_ACL
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if use device-mapper; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~BLK_DEV_DM ~DM_THIN_PROVISIONING
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~OVERLAY_FS
|
|
||||||
"
|
|
||||||
|
|
||||||
linux-info_pkg_setup
|
|
||||||
}
|
|
||||||
|
|
||||||
src_compile() {
|
|
||||||
export DOCKER_GITCOMMIT="${GIT_COMMIT}"
|
|
||||||
export GOPATH="${WORKDIR}/${P}"
|
|
||||||
export VERSION=${PV}
|
|
||||||
|
|
||||||
# setup CFLAGS and LDFLAGS for separate build target
|
|
||||||
# see https://github.com/tianon/docker-overlay/pull/10
|
|
||||||
export CGO_CFLAGS="-I${ESYSROOT}/usr/include"
|
|
||||||
export CGO_LDFLAGS="-L${ESYSROOT}/usr/$(get_libdir)"
|
|
||||||
|
|
||||||
# let's set up some optional features :)
|
|
||||||
export DOCKER_BUILDTAGS=''
|
|
||||||
for gd in btrfs device-mapper overlay; do
|
|
||||||
if ! use $gd; then
|
|
||||||
DOCKER_BUILDTAGS+=" exclude_graphdriver_${gd//-/}"
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
for tag in apparmor seccomp; do
|
|
||||||
if use $tag; then
|
|
||||||
DOCKER_BUILDTAGS+=" $tag"
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
# build binaries
|
|
||||||
./hack/make.sh dynbinary || die 'dynbinary failed'
|
|
||||||
}
|
|
||||||
|
|
||||||
src_install() {
|
|
||||||
dosym containerd /usr/bin/docker-containerd
|
|
||||||
dosym containerd-shim /usr/bin/docker-containerd-shim
|
|
||||||
dosym runc /usr/bin/docker-runc
|
|
||||||
use container-init && dosym tini /usr/bin/docker-init
|
|
||||||
dobin bundles/dynbinary-daemon/dockerd
|
|
||||||
dobin bundles/dynbinary-daemon/docker-proxy
|
|
||||||
|
|
||||||
newinitd contrib/init/openrc/docker.initd docker
|
|
||||||
newconfd contrib/init/openrc/docker.confd docker
|
|
||||||
|
|
||||||
systemd_dounit contrib/init/systemd/docker.{service,socket}
|
|
||||||
|
|
||||||
udev_dorules contrib/udev/*.rules
|
|
||||||
|
|
||||||
dodoc AUTHORS CONTRIBUTING.md NOTICE README.md
|
|
||||||
dodoc -r docs/*
|
|
||||||
|
|
||||||
# note: intentionally not using "doins" so that we preserve +x bits
|
|
||||||
dodir /usr/share/${PN}/contrib
|
|
||||||
cp -R contrib/* "${ED}/usr/share/${PN}/contrib"
|
|
||||||
}
|
|
||||||
|
|
||||||
pkg_postinst() {
|
|
||||||
udev_reload
|
|
||||||
|
|
||||||
elog
|
|
||||||
elog "To use Docker, the Docker daemon must be running as root. To automatically"
|
|
||||||
elog "start the Docker daemon at boot:"
|
|
||||||
if systemd_is_booted || has_version sys-apps/systemd; then
|
|
||||||
elog " systemctl enable docker.service"
|
|
||||||
else
|
|
||||||
elog " rc-update add docker default"
|
|
||||||
fi
|
|
||||||
elog
|
|
||||||
elog "To use Docker as a non-root user, add yourself to the 'docker' group:"
|
|
||||||
elog ' usermod -aG docker <youruser>'
|
|
||||||
elog
|
|
||||||
|
|
||||||
if use device-mapper; then
|
|
||||||
elog " Devicemapper storage driver has been deprecated"
|
|
||||||
elog " It will be removed in a future release"
|
|
||||||
elog
|
|
||||||
fi
|
|
||||||
|
|
||||||
if use overlay; then
|
|
||||||
elog " Overlay storage driver/USEflag has been deprecated"
|
|
||||||
elog " in favor of overlay2 (enabled unconditionally)"
|
|
||||||
elog
|
|
||||||
fi
|
|
||||||
|
|
||||||
if has_version sys-fs/zfs; then
|
|
||||||
elog " ZFS storage driver is available"
|
|
||||||
elog " Check https://docs.docker.com/storage/storagedriver/zfs-driver for more info"
|
|
||||||
elog
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
pkg_postrm() {
|
|
||||||
udev_reload
|
|
||||||
}
|
|
||||||
@ -1,331 +0,0 @@
|
|||||||
# Copyright 1999-2023 Gentoo Authors
|
|
||||||
# Distributed under the terms of the GNU General Public License v2
|
|
||||||
|
|
||||||
EAPI=7
|
|
||||||
EGO_PN=github.com/docker/docker
|
|
||||||
MY_PV=${PV/_/-}
|
|
||||||
inherit linux-info systemd udev golang-vcs-snapshot
|
|
||||||
GIT_COMMIT=1a7969545d73537545645f5cd2c79b7a77e7d39f
|
|
||||||
|
|
||||||
DESCRIPTION="The core functions you need to create Docker images and run Docker containers"
|
|
||||||
HOMEPAGE="https://www.docker.com/"
|
|
||||||
SRC_URI="https://github.com/moby/moby/archive/v${MY_PV}.tar.gz -> ${P}.tar.gz"
|
|
||||||
|
|
||||||
LICENSE="Apache-2.0"
|
|
||||||
SLOT="0"
|
|
||||||
KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86"
|
|
||||||
IUSE="apparmor btrfs +container-init device-mapper overlay seccomp selinux"
|
|
||||||
|
|
||||||
DEPEND="
|
|
||||||
acct-group/docker
|
|
||||||
>=dev-db/sqlite-3.7.9:3
|
|
||||||
apparmor? ( sys-libs/libapparmor )
|
|
||||||
btrfs? ( >=sys-fs/btrfs-progs-3.16.1 )
|
|
||||||
device-mapper? ( >=sys-fs/lvm2-2.02.89[thin] )
|
|
||||||
seccomp? ( >=sys-libs/libseccomp-2.2.1 )
|
|
||||||
"
|
|
||||||
|
|
||||||
# https://github.com/moby/moby/blob/master/project/PACKAGERS.md#runtime-dependencies
|
|
||||||
# https://github.com/moby/moby/blob/master/project/PACKAGERS.md#optional-dependencies
|
|
||||||
RDEPEND="
|
|
||||||
${DEPEND}
|
|
||||||
>=net-firewall/iptables-1.4
|
|
||||||
sys-process/procps
|
|
||||||
>=dev-vcs/git-1.7
|
|
||||||
>=app-arch/xz-utils-4.9
|
|
||||||
dev-libs/libltdl
|
|
||||||
>=app-containers/containerd-1.7.3[apparmor?,btrfs?,device-mapper?,seccomp?]
|
|
||||||
>=app-containers/runc-1.1.9[apparmor?,seccomp?]
|
|
||||||
!app-containers/docker-proxy
|
|
||||||
container-init? ( >=sys-process/tini-0.19.0[static] )
|
|
||||||
selinux? ( sec-policy/selinux-docker )
|
|
||||||
"
|
|
||||||
|
|
||||||
# https://github.com/docker/docker/blob/master/project/PACKAGERS.md#build-dependencies
|
|
||||||
BDEPEND="
|
|
||||||
>=dev-lang/go-1.16.12
|
|
||||||
dev-go/go-md2man
|
|
||||||
virtual/pkgconfig
|
|
||||||
"
|
|
||||||
# tests require running dockerd as root and downloading containers
|
|
||||||
RESTRICT="installsources strip test"
|
|
||||||
|
|
||||||
S="${WORKDIR}/${P}/src/${EGO_PN}"
|
|
||||||
|
|
||||||
# https://bugs.gentoo.org/748984 https://github.com/etcd-io/etcd/pull/12552
|
|
||||||
PATCHES=(
|
|
||||||
"${FILESDIR}/0001-Openrc-Depend-on-containerd-init-script.patch"
|
|
||||||
)
|
|
||||||
|
|
||||||
pkg_setup() {
|
|
||||||
# this is based on "contrib/check-config.sh" from upstream's sources
|
|
||||||
# required features.
|
|
||||||
CONFIG_CHECK="
|
|
||||||
~NAMESPACES ~NET_NS ~PID_NS ~IPC_NS ~UTS_NS
|
|
||||||
~CGROUPS ~CGROUP_CPUACCT ~CGROUP_DEVICE ~CGROUP_FREEZER ~CGROUP_SCHED ~CPUSETS ~MEMCG
|
|
||||||
~KEYS
|
|
||||||
~VETH ~BRIDGE ~BRIDGE_NETFILTER
|
|
||||||
~IP_NF_FILTER ~IP_NF_TARGET_MASQUERADE
|
|
||||||
~NETFILTER_XT_MATCH_ADDRTYPE
|
|
||||||
~NETFILTER_XT_MATCH_CONNTRACK
|
|
||||||
~NETFILTER_XT_MATCH_IPVS
|
|
||||||
~NETFILTER_XT_MARK
|
|
||||||
~IP_NF_NAT ~NF_NAT
|
|
||||||
~POSIX_MQUEUE
|
|
||||||
"
|
|
||||||
WARNING_POSIX_MQUEUE="CONFIG_POSIX_MQUEUE: is required for bind-mounting /dev/mqueue into containers"
|
|
||||||
|
|
||||||
if kernel_is lt 4 8; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~DEVPTS_MULTIPLE_INSTANCES
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is le 5 1; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~NF_NAT_IPV4
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is le 5 2; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~NF_NAT_NEEDED
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is ge 4 15; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~CGROUP_BPF
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# optional features
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~USER_NS
|
|
||||||
"
|
|
||||||
|
|
||||||
if use seccomp; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~SECCOMP ~SECCOMP_FILTER
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~CGROUP_PIDS
|
|
||||||
"
|
|
||||||
|
|
||||||
if kernel_is lt 6 1; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~MEMCG_SWAP
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is le 5 8; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~MEMCG_SWAP_ENABLED
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~!LEGACY_VSYSCALL_NATIVE
|
|
||||||
"
|
|
||||||
if kernel_is lt 5 19; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~LEGACY_VSYSCALL_EMULATE
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~!LEGACY_VSYSCALL_NONE
|
|
||||||
"
|
|
||||||
WARNING_LEGACY_VSYSCALL_NONE="CONFIG_LEGACY_VSYSCALL_NONE enabled: \
|
|
||||||
Containers with <=glibc-2.13 will not work"
|
|
||||||
|
|
||||||
if kernel_is le 4 5; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~MEMCG_KMEM
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is lt 5; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~IOSCHED_CFQ ~CFQ_GROUP_IOSCHED
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~BLK_CGROUP ~BLK_DEV_THROTTLING
|
|
||||||
~CGROUP_PERF
|
|
||||||
~CGROUP_HUGETLB
|
|
||||||
~NET_CLS_CGROUP ~CGROUP_NET_PRIO
|
|
||||||
~CFS_BANDWIDTH ~FAIR_GROUP_SCHED
|
|
||||||
~IP_NF_TARGET_REDIRECT
|
|
||||||
~IP_VS
|
|
||||||
~IP_VS_NFCT
|
|
||||||
~IP_VS_PROTO_TCP
|
|
||||||
~IP_VS_PROTO_UDP
|
|
||||||
~IP_VS_RR
|
|
||||||
"
|
|
||||||
|
|
||||||
if use selinux; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~SECURITY_SELINUX
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if use apparmor; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~SECURITY_APPARMOR
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# if ! is_set EXT4_USE_FOR_EXT2; then
|
|
||||||
# check_flags EXT3_FS EXT3_FS_XATTR EXT3_FS_POSIX_ACL EXT3_FS_SECURITY
|
|
||||||
# if ! is_set EXT3_FS || ! is_set EXT3_FS_XATTR || ! is_set EXT3_FS_POSIX_ACL || ! is_set EXT3_FS_SECURITY; then
|
|
||||||
# echo " $(wrap_color '(enable these ext3 configs if you are using ext3 as backing filesystem)' bold black)"
|
|
||||||
# fi
|
|
||||||
# fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~EXT4_FS ~EXT4_FS_POSIX_ACL ~EXT4_FS_SECURITY
|
|
||||||
"
|
|
||||||
|
|
||||||
# if ! is_set EXT4_FS || ! is_set EXT4_FS_POSIX_ACL || ! is_set EXT4_FS_SECURITY; then
|
|
||||||
# if is_set EXT4_USE_FOR_EXT2; then
|
|
||||||
# echo " $(wrap_color 'enable these ext4 configs if you are using ext3 or ext4 as backing filesystem' bold black)"
|
|
||||||
# else
|
|
||||||
# echo " $(wrap_color 'enable these ext4 configs if you are using ext4 as backing filesystem' bold black)"
|
|
||||||
# fi
|
|
||||||
# fi
|
|
||||||
|
|
||||||
# network drivers
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~VXLAN ~BRIDGE_VLAN_FILTERING
|
|
||||||
~CRYPTO ~CRYPTO_AEAD ~CRYPTO_GCM ~CRYPTO_SEQIV ~CRYPTO_GHASH
|
|
||||||
~XFRM ~XFRM_USER ~XFRM_ALGO ~INET_ESP
|
|
||||||
"
|
|
||||||
if kernel_is le 5 3; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~INET_XFRM_MODE_TRANSPORT
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~IPVLAN
|
|
||||||
"
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~MACVLAN ~DUMMY
|
|
||||||
"
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~NF_NAT_FTP ~NF_CONNTRACK_FTP ~NF_NAT_TFTP ~NF_CONNTRACK_TFTP
|
|
||||||
"
|
|
||||||
|
|
||||||
# storage drivers
|
|
||||||
if use btrfs; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~BTRFS_FS
|
|
||||||
~BTRFS_FS_POSIX_ACL
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if use device-mapper; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~BLK_DEV_DM ~DM_THIN_PROVISIONING
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~OVERLAY_FS
|
|
||||||
"
|
|
||||||
|
|
||||||
linux-info_pkg_setup
|
|
||||||
}
|
|
||||||
|
|
||||||
src_compile() {
|
|
||||||
export DOCKER_GITCOMMIT="${GIT_COMMIT}"
|
|
||||||
export GOPATH="${WORKDIR}/${P}"
|
|
||||||
export VERSION=${PV}
|
|
||||||
|
|
||||||
# setup CFLAGS and LDFLAGS for separate build target
|
|
||||||
# see https://github.com/tianon/docker-overlay/pull/10
|
|
||||||
export CGO_CFLAGS="-I${ESYSROOT}/usr/include"
|
|
||||||
export CGO_LDFLAGS="-L${ESYSROOT}/usr/$(get_libdir)"
|
|
||||||
|
|
||||||
# let's set up some optional features :)
|
|
||||||
export DOCKER_BUILDTAGS=''
|
|
||||||
for gd in btrfs device-mapper overlay; do
|
|
||||||
if ! use $gd; then
|
|
||||||
DOCKER_BUILDTAGS+=" exclude_graphdriver_${gd//-/}"
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
for tag in apparmor seccomp; do
|
|
||||||
if use $tag; then
|
|
||||||
DOCKER_BUILDTAGS+=" $tag"
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
# build binaries
|
|
||||||
./hack/make.sh dynbinary || die 'dynbinary failed'
|
|
||||||
}
|
|
||||||
|
|
||||||
src_install() {
|
|
||||||
dosym containerd /usr/bin/docker-containerd
|
|
||||||
dosym containerd-shim /usr/bin/docker-containerd-shim
|
|
||||||
dosym runc /usr/bin/docker-runc
|
|
||||||
use container-init && dosym tini /usr/bin/docker-init
|
|
||||||
dobin bundles/dynbinary-daemon/dockerd
|
|
||||||
dobin bundles/dynbinary-daemon/docker-proxy
|
|
||||||
|
|
||||||
newinitd contrib/init/openrc/docker.initd docker
|
|
||||||
newconfd contrib/init/openrc/docker.confd docker
|
|
||||||
|
|
||||||
systemd_dounit contrib/init/systemd/docker.{service,socket}
|
|
||||||
|
|
||||||
udev_dorules contrib/udev/*.rules
|
|
||||||
|
|
||||||
dodoc AUTHORS CONTRIBUTING.md NOTICE README.md
|
|
||||||
dodoc -r docs/*
|
|
||||||
|
|
||||||
# note: intentionally not using "doins" so that we preserve +x bits
|
|
||||||
dodir /usr/share/${PN}/contrib
|
|
||||||
cp -R contrib/* "${ED}/usr/share/${PN}/contrib"
|
|
||||||
}
|
|
||||||
|
|
||||||
pkg_postinst() {
|
|
||||||
udev_reload
|
|
||||||
|
|
||||||
elog
|
|
||||||
elog "To use Docker, the Docker daemon must be running as root. To automatically"
|
|
||||||
elog "start the Docker daemon at boot:"
|
|
||||||
if systemd_is_booted || has_version sys-apps/systemd; then
|
|
||||||
elog " systemctl enable docker.service"
|
|
||||||
else
|
|
||||||
elog " rc-update add docker default"
|
|
||||||
fi
|
|
||||||
elog
|
|
||||||
elog "To use Docker as a non-root user, add yourself to the 'docker' group:"
|
|
||||||
elog ' usermod -aG docker <youruser>'
|
|
||||||
elog
|
|
||||||
|
|
||||||
if use device-mapper; then
|
|
||||||
elog " Devicemapper storage driver has been deprecated"
|
|
||||||
elog " It will be removed in a future release"
|
|
||||||
elog
|
|
||||||
fi
|
|
||||||
|
|
||||||
if use overlay; then
|
|
||||||
elog " Overlay storage driver/USEflag has been deprecated"
|
|
||||||
elog " in favor of overlay2 (enabled unconditionally)"
|
|
||||||
elog
|
|
||||||
fi
|
|
||||||
|
|
||||||
if has_version sys-fs/zfs; then
|
|
||||||
elog " ZFS storage driver is available"
|
|
||||||
elog " Check https://docs.docker.com/storage/storagedriver/zfs-driver for more info"
|
|
||||||
elog
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
pkg_postrm() {
|
|
||||||
udev_reload
|
|
||||||
}
|
|
||||||
@ -1,331 +0,0 @@
|
|||||||
# Copyright 1999-2023 Gentoo Authors
|
|
||||||
# Distributed under the terms of the GNU General Public License v2
|
|
||||||
|
|
||||||
EAPI=7
|
|
||||||
EGO_PN=github.com/docker/docker
|
|
||||||
MY_PV=${PV/_/-}
|
|
||||||
inherit linux-info systemd udev golang-vcs-snapshot
|
|
||||||
GIT_COMMIT=311b9ff0aa93aa55880e1e5f8871c4fb69583426
|
|
||||||
|
|
||||||
DESCRIPTION="The core functions you need to create Docker images and run Docker containers"
|
|
||||||
HOMEPAGE="https://www.docker.com/"
|
|
||||||
SRC_URI="https://github.com/moby/moby/archive/v${MY_PV}.tar.gz -> ${P}.tar.gz"
|
|
||||||
|
|
||||||
LICENSE="Apache-2.0"
|
|
||||||
SLOT="0"
|
|
||||||
KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86"
|
|
||||||
IUSE="apparmor btrfs +container-init device-mapper overlay seccomp selinux"
|
|
||||||
|
|
||||||
DEPEND="
|
|
||||||
acct-group/docker
|
|
||||||
>=dev-db/sqlite-3.7.9:3
|
|
||||||
apparmor? ( sys-libs/libapparmor )
|
|
||||||
btrfs? ( >=sys-fs/btrfs-progs-3.16.1 )
|
|
||||||
device-mapper? ( >=sys-fs/lvm2-2.02.89[thin] )
|
|
||||||
seccomp? ( >=sys-libs/libseccomp-2.2.1 )
|
|
||||||
"
|
|
||||||
|
|
||||||
# https://github.com/moby/moby/blob/master/project/PACKAGERS.md#runtime-dependencies
|
|
||||||
# https://github.com/moby/moby/blob/master/project/PACKAGERS.md#optional-dependencies
|
|
||||||
RDEPEND="
|
|
||||||
${DEPEND}
|
|
||||||
>=net-firewall/iptables-1.4
|
|
||||||
sys-process/procps
|
|
||||||
>=dev-vcs/git-1.7
|
|
||||||
>=app-arch/xz-utils-4.9
|
|
||||||
dev-libs/libltdl
|
|
||||||
>=app-containers/containerd-1.7.3[apparmor?,btrfs?,device-mapper?,seccomp?]
|
|
||||||
>=app-containers/runc-1.1.9[apparmor?,seccomp?]
|
|
||||||
!app-containers/docker-proxy
|
|
||||||
container-init? ( >=sys-process/tini-0.19.0[static] )
|
|
||||||
selinux? ( sec-policy/selinux-docker )
|
|
||||||
"
|
|
||||||
|
|
||||||
# https://github.com/docker/docker/blob/master/project/PACKAGERS.md#build-dependencies
|
|
||||||
BDEPEND="
|
|
||||||
>=dev-lang/go-1.16.12
|
|
||||||
dev-go/go-md2man
|
|
||||||
virtual/pkgconfig
|
|
||||||
"
|
|
||||||
# tests require running dockerd as root and downloading containers
|
|
||||||
RESTRICT="installsources strip test"
|
|
||||||
|
|
||||||
S="${WORKDIR}/${P}/src/${EGO_PN}"
|
|
||||||
|
|
||||||
# https://bugs.gentoo.org/748984 https://github.com/etcd-io/etcd/pull/12552
|
|
||||||
PATCHES=(
|
|
||||||
"${FILESDIR}/0001-Openrc-Depend-on-containerd-init-script.patch"
|
|
||||||
)
|
|
||||||
|
|
||||||
pkg_setup() {
|
|
||||||
# this is based on "contrib/check-config.sh" from upstream's sources
|
|
||||||
# required features.
|
|
||||||
CONFIG_CHECK="
|
|
||||||
~NAMESPACES ~NET_NS ~PID_NS ~IPC_NS ~UTS_NS
|
|
||||||
~CGROUPS ~CGROUP_CPUACCT ~CGROUP_DEVICE ~CGROUP_FREEZER ~CGROUP_SCHED ~CPUSETS ~MEMCG
|
|
||||||
~KEYS
|
|
||||||
~VETH ~BRIDGE ~BRIDGE_NETFILTER
|
|
||||||
~IP_NF_FILTER ~IP_NF_TARGET_MASQUERADE
|
|
||||||
~NETFILTER_XT_MATCH_ADDRTYPE
|
|
||||||
~NETFILTER_XT_MATCH_CONNTRACK
|
|
||||||
~NETFILTER_XT_MATCH_IPVS
|
|
||||||
~NETFILTER_XT_MARK
|
|
||||||
~IP_NF_NAT ~NF_NAT
|
|
||||||
~POSIX_MQUEUE
|
|
||||||
"
|
|
||||||
WARNING_POSIX_MQUEUE="CONFIG_POSIX_MQUEUE: is required for bind-mounting /dev/mqueue into containers"
|
|
||||||
|
|
||||||
if kernel_is lt 4 8; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~DEVPTS_MULTIPLE_INSTANCES
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is le 5 1; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~NF_NAT_IPV4
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is le 5 2; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~NF_NAT_NEEDED
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is ge 4 15; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~CGROUP_BPF
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# optional features
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~USER_NS
|
|
||||||
"
|
|
||||||
|
|
||||||
if use seccomp; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~SECCOMP ~SECCOMP_FILTER
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~CGROUP_PIDS
|
|
||||||
"
|
|
||||||
|
|
||||||
if kernel_is lt 6 1; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~MEMCG_SWAP
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is le 5 8; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~MEMCG_SWAP_ENABLED
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~!LEGACY_VSYSCALL_NATIVE
|
|
||||||
"
|
|
||||||
if kernel_is lt 5 19; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~LEGACY_VSYSCALL_EMULATE
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~!LEGACY_VSYSCALL_NONE
|
|
||||||
"
|
|
||||||
WARNING_LEGACY_VSYSCALL_NONE="CONFIG_LEGACY_VSYSCALL_NONE enabled: \
|
|
||||||
Containers with <=glibc-2.13 will not work"
|
|
||||||
|
|
||||||
if kernel_is le 4 5; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~MEMCG_KMEM
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if kernel_is lt 5; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~IOSCHED_CFQ ~CFQ_GROUP_IOSCHED
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~BLK_CGROUP ~BLK_DEV_THROTTLING
|
|
||||||
~CGROUP_PERF
|
|
||||||
~CGROUP_HUGETLB
|
|
||||||
~NET_CLS_CGROUP ~CGROUP_NET_PRIO
|
|
||||||
~CFS_BANDWIDTH ~FAIR_GROUP_SCHED
|
|
||||||
~IP_NF_TARGET_REDIRECT
|
|
||||||
~IP_VS
|
|
||||||
~IP_VS_NFCT
|
|
||||||
~IP_VS_PROTO_TCP
|
|
||||||
~IP_VS_PROTO_UDP
|
|
||||||
~IP_VS_RR
|
|
||||||
"
|
|
||||||
|
|
||||||
if use selinux; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~SECURITY_SELINUX
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if use apparmor; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~SECURITY_APPARMOR
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# if ! is_set EXT4_USE_FOR_EXT2; then
|
|
||||||
# check_flags EXT3_FS EXT3_FS_XATTR EXT3_FS_POSIX_ACL EXT3_FS_SECURITY
|
|
||||||
# if ! is_set EXT3_FS || ! is_set EXT3_FS_XATTR || ! is_set EXT3_FS_POSIX_ACL || ! is_set EXT3_FS_SECURITY; then
|
|
||||||
# echo " $(wrap_color '(enable these ext3 configs if you are using ext3 as backing filesystem)' bold black)"
|
|
||||||
# fi
|
|
||||||
# fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~EXT4_FS ~EXT4_FS_POSIX_ACL ~EXT4_FS_SECURITY
|
|
||||||
"
|
|
||||||
|
|
||||||
# if ! is_set EXT4_FS || ! is_set EXT4_FS_POSIX_ACL || ! is_set EXT4_FS_SECURITY; then
|
|
||||||
# if is_set EXT4_USE_FOR_EXT2; then
|
|
||||||
# echo " $(wrap_color 'enable these ext4 configs if you are using ext3 or ext4 as backing filesystem' bold black)"
|
|
||||||
# else
|
|
||||||
# echo " $(wrap_color 'enable these ext4 configs if you are using ext4 as backing filesystem' bold black)"
|
|
||||||
# fi
|
|
||||||
# fi
|
|
||||||
|
|
||||||
# network drivers
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~VXLAN ~BRIDGE_VLAN_FILTERING
|
|
||||||
~CRYPTO ~CRYPTO_AEAD ~CRYPTO_GCM ~CRYPTO_SEQIV ~CRYPTO_GHASH
|
|
||||||
~XFRM ~XFRM_USER ~XFRM_ALGO ~INET_ESP
|
|
||||||
"
|
|
||||||
if kernel_is le 5 3; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~INET_XFRM_MODE_TRANSPORT
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~IPVLAN
|
|
||||||
"
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~MACVLAN ~DUMMY
|
|
||||||
"
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~NF_NAT_FTP ~NF_CONNTRACK_FTP ~NF_NAT_TFTP ~NF_CONNTRACK_TFTP
|
|
||||||
"
|
|
||||||
|
|
||||||
# storage drivers
|
|
||||||
if use btrfs; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~BTRFS_FS
|
|
||||||
~BTRFS_FS_POSIX_ACL
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if use device-mapper; then
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~BLK_DEV_DM ~DM_THIN_PROVISIONING
|
|
||||||
"
|
|
||||||
fi
|
|
||||||
|
|
||||||
CONFIG_CHECK+="
|
|
||||||
~OVERLAY_FS
|
|
||||||
"
|
|
||||||
|
|
||||||
linux-info_pkg_setup
|
|
||||||
}
|
|
||||||
|
|
||||||
src_compile() {
|
|
||||||
export DOCKER_GITCOMMIT="${GIT_COMMIT}"
|
|
||||||
export GOPATH="${WORKDIR}/${P}"
|
|
||||||
export VERSION=${PV}
|
|
||||||
|
|
||||||
# setup CFLAGS and LDFLAGS for separate build target
|
|
||||||
# see https://github.com/tianon/docker-overlay/pull/10
|
|
||||||
export CGO_CFLAGS="-I${ESYSROOT}/usr/include"
|
|
||||||
export CGO_LDFLAGS="-L${ESYSROOT}/usr/$(get_libdir)"
|
|
||||||
|
|
||||||
# let's set up some optional features :)
|
|
||||||
export DOCKER_BUILDTAGS=''
|
|
||||||
for gd in btrfs device-mapper overlay; do
|
|
||||||
if ! use $gd; then
|
|
||||||
DOCKER_BUILDTAGS+=" exclude_graphdriver_${gd//-/}"
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
for tag in apparmor seccomp; do
|
|
||||||
if use $tag; then
|
|
||||||
DOCKER_BUILDTAGS+=" $tag"
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
# build binaries
|
|
||||||
./hack/make.sh dynbinary || die 'dynbinary failed'
|
|
||||||
}
|
|
||||||
|
|
||||||
src_install() {
|
|
||||||
dosym containerd /usr/bin/docker-containerd
|
|
||||||
dosym containerd-shim /usr/bin/docker-containerd-shim
|
|
||||||
dosym runc /usr/bin/docker-runc
|
|
||||||
use container-init && dosym tini /usr/bin/docker-init
|
|
||||||
dobin bundles/dynbinary-daemon/dockerd
|
|
||||||
dobin bundles/dynbinary-daemon/docker-proxy
|
|
||||||
|
|
||||||
newinitd contrib/init/openrc/docker.initd docker
|
|
||||||
newconfd contrib/init/openrc/docker.confd docker
|
|
||||||
|
|
||||||
systemd_dounit contrib/init/systemd/docker.{service,socket}
|
|
||||||
|
|
||||||
udev_dorules contrib/udev/*.rules
|
|
||||||
|
|
||||||
dodoc AUTHORS CONTRIBUTING.md NOTICE README.md
|
|
||||||
dodoc -r docs/*
|
|
||||||
|
|
||||||
# note: intentionally not using "doins" so that we preserve +x bits
|
|
||||||
dodir /usr/share/${PN}/contrib
|
|
||||||
cp -R contrib/* "${ED}/usr/share/${PN}/contrib"
|
|
||||||
}
|
|
||||||
|
|
||||||
pkg_postinst() {
|
|
||||||
udev_reload
|
|
||||||
|
|
||||||
elog
|
|
||||||
elog "To use Docker, the Docker daemon must be running as root. To automatically"
|
|
||||||
elog "start the Docker daemon at boot:"
|
|
||||||
if systemd_is_booted || has_version sys-apps/systemd; then
|
|
||||||
elog " systemctl enable docker.service"
|
|
||||||
else
|
|
||||||
elog " rc-update add docker default"
|
|
||||||
fi
|
|
||||||
elog
|
|
||||||
elog "To use Docker as a non-root user, add yourself to the 'docker' group:"
|
|
||||||
elog ' usermod -aG docker <youruser>'
|
|
||||||
elog
|
|
||||||
|
|
||||||
if use device-mapper; then
|
|
||||||
elog " Devicemapper storage driver has been deprecated"
|
|
||||||
elog " It will be removed in a future release"
|
|
||||||
elog
|
|
||||||
fi
|
|
||||||
|
|
||||||
if use overlay; then
|
|
||||||
elog " Overlay storage driver/USEflag has been deprecated"
|
|
||||||
elog " in favor of overlay2 (enabled unconditionally)"
|
|
||||||
elog
|
|
||||||
fi
|
|
||||||
|
|
||||||
if has_version sys-fs/zfs; then
|
|
||||||
elog " ZFS storage driver is available"
|
|
||||||
elog " Check https://docs.docker.com/storage/storagedriver/zfs-driver for more info"
|
|
||||||
elog
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
pkg_postrm() {
|
|
||||||
udev_reload
|
|
||||||
}
|
|
||||||
@ -4,7 +4,7 @@
|
|||||||
EAPI=7
|
EAPI=7
|
||||||
EGO_PN=github.com/docker/docker
|
EGO_PN=github.com/docker/docker
|
||||||
MY_PV=${PV/_/-}
|
MY_PV=${PV/_/-}
|
||||||
inherit linux-info systemd udev golang-vcs-snapshot
|
inherit golang-vcs-snapshot linux-info systemd udev
|
||||||
GIT_COMMIT=061aa95809be396a6b5542618d8a34b02a21ff77
|
GIT_COMMIT=061aa95809be396a6b5542618d8a34b02a21ff77
|
||||||
|
|
||||||
DESCRIPTION="The core functions you need to create Docker images and run Docker containers"
|
DESCRIPTION="The core functions you need to create Docker images and run Docker containers"
|
||||||
@ -13,8 +13,8 @@ SRC_URI="https://github.com/moby/moby/archive/v${MY_PV}.tar.gz -> ${P}.tar.gz"
|
|||||||
|
|
||||||
LICENSE="Apache-2.0"
|
LICENSE="Apache-2.0"
|
||||||
SLOT="0"
|
SLOT="0"
|
||||||
KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86"
|
KEYWORDS="amd64 ~arm arm64 ppc64 ~riscv ~x86"
|
||||||
IUSE="apparmor btrfs +container-init overlay seccomp selinux"
|
IUSE="apparmor btrfs +container-init overlay seccomp selinux systemd"
|
||||||
|
|
||||||
DEPEND="
|
DEPEND="
|
||||||
acct-group/docker
|
acct-group/docker
|
||||||
@ -22,6 +22,7 @@ DEPEND="
|
|||||||
apparmor? ( sys-libs/libapparmor )
|
apparmor? ( sys-libs/libapparmor )
|
||||||
btrfs? ( >=sys-fs/btrfs-progs-3.16.1 )
|
btrfs? ( >=sys-fs/btrfs-progs-3.16.1 )
|
||||||
seccomp? ( >=sys-libs/libseccomp-2.2.1 )
|
seccomp? ( >=sys-libs/libseccomp-2.2.1 )
|
||||||
|
systemd? ( sys-apps/systemd )
|
||||||
"
|
"
|
||||||
|
|
||||||
# https://github.com/moby/moby/blob/master/project/PACKAGERS.md#runtime-dependencies
|
# https://github.com/moby/moby/blob/master/project/PACKAGERS.md#runtime-dependencies
|
||||||
@ -32,8 +33,7 @@ RDEPEND="
|
|||||||
sys-process/procps
|
sys-process/procps
|
||||||
>=dev-vcs/git-1.7
|
>=dev-vcs/git-1.7
|
||||||
>=app-arch/xz-utils-4.9
|
>=app-arch/xz-utils-4.9
|
||||||
dev-libs/libltdl
|
>=app-containers/containerd-1.7.15[apparmor?,btrfs?,seccomp?]
|
||||||
>=app-containers/containerd-1.7.12[apparmor?,btrfs?,seccomp?]
|
|
||||||
>=app-containers/runc-1.1.12[apparmor?,seccomp?]
|
>=app-containers/runc-1.1.12[apparmor?,seccomp?]
|
||||||
!app-containers/docker-proxy
|
!app-containers/docker-proxy
|
||||||
container-init? ( >=sys-process/tini-0.19.0[static] )
|
container-init? ( >=sys-process/tini-0.19.0[static] )
|
||||||
@ -54,6 +54,7 @@ S="${WORKDIR}/${P}/src/${EGO_PN}"
|
|||||||
# https://bugs.gentoo.org/748984 https://github.com/etcd-io/etcd/pull/12552
|
# https://bugs.gentoo.org/748984 https://github.com/etcd-io/etcd/pull/12552
|
||||||
PATCHES=(
|
PATCHES=(
|
||||||
"${FILESDIR}/0001-Openrc-Depend-on-containerd-init-script.patch"
|
"${FILESDIR}/0001-Openrc-Depend-on-containerd-init-script.patch"
|
||||||
|
"${FILESDIR}/docker-26.1.0-automagic-systemd.patch"
|
||||||
)
|
)
|
||||||
|
|
||||||
pkg_setup() {
|
pkg_setup() {
|
||||||
@ -237,11 +238,12 @@ src_compile() {
|
|||||||
export DOCKER_GITCOMMIT="${GIT_COMMIT}"
|
export DOCKER_GITCOMMIT="${GIT_COMMIT}"
|
||||||
export GOPATH="${WORKDIR}/${P}"
|
export GOPATH="${WORKDIR}/${P}"
|
||||||
export VERSION=${PV}
|
export VERSION=${PV}
|
||||||
|
tc-export PKG_CONFIG
|
||||||
|
|
||||||
# setup CFLAGS and LDFLAGS for separate build target
|
# setup CFLAGS and LDFLAGS for separate build target
|
||||||
# see https://github.com/tianon/docker-overlay/pull/10
|
# see https://github.com/tianon/docker-overlay/pull/10
|
||||||
export CGO_CFLAGS="-I${ESYSROOT}/usr/include"
|
CGO_CFLAGS+=" -I${ESYSROOT}/usr/include"
|
||||||
export CGO_LDFLAGS="-L${ESYSROOT}/usr/$(get_libdir)"
|
CGO_LDFLAGS+=" -L${ESYSROOT}/usr/$(get_libdir)"
|
||||||
|
|
||||||
# let's set up some optional features :)
|
# let's set up some optional features :)
|
||||||
export DOCKER_BUILDTAGS=''
|
export DOCKER_BUILDTAGS=''
|
||||||
@ -257,6 +259,8 @@ src_compile() {
|
|||||||
fi
|
fi
|
||||||
done
|
done
|
||||||
|
|
||||||
|
export SYSTEMD=$(usex systemd 1 0)
|
||||||
|
|
||||||
# build binaries
|
# build binaries
|
||||||
./hack/make.sh dynbinary || die 'dynbinary failed'
|
./hack/make.sh dynbinary || die 'dynbinary failed'
|
||||||
}
|
}
|
||||||
@ -4,8 +4,8 @@
|
|||||||
EAPI=7
|
EAPI=7
|
||||||
EGO_PN=github.com/docker/docker
|
EGO_PN=github.com/docker/docker
|
||||||
MY_PV=${PV/_/-}
|
MY_PV=${PV/_/-}
|
||||||
inherit linux-info systemd udev golang-vcs-snapshot
|
inherit golang-vcs-snapshot linux-info systemd udev
|
||||||
GIT_COMMIT=71fa3ab079ec13d17257f86fa92db8d7f24802f1
|
GIT_COMMIT=662f78c0b1bb5114172427cfcb40491d73159be2
|
||||||
|
|
||||||
DESCRIPTION="The core functions you need to create Docker images and run Docker containers"
|
DESCRIPTION="The core functions you need to create Docker images and run Docker containers"
|
||||||
HOMEPAGE="https://www.docker.com/"
|
HOMEPAGE="https://www.docker.com/"
|
||||||
@ -14,7 +14,7 @@ SRC_URI="https://github.com/moby/moby/archive/v${MY_PV}.tar.gz -> ${P}.tar.gz"
|
|||||||
LICENSE="Apache-2.0"
|
LICENSE="Apache-2.0"
|
||||||
SLOT="0"
|
SLOT="0"
|
||||||
KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86"
|
KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86"
|
||||||
IUSE="apparmor btrfs +container-init overlay seccomp selinux"
|
IUSE="apparmor btrfs +container-init overlay seccomp selinux systemd"
|
||||||
|
|
||||||
DEPEND="
|
DEPEND="
|
||||||
acct-group/docker
|
acct-group/docker
|
||||||
@ -22,6 +22,7 @@ DEPEND="
|
|||||||
apparmor? ( sys-libs/libapparmor )
|
apparmor? ( sys-libs/libapparmor )
|
||||||
btrfs? ( >=sys-fs/btrfs-progs-3.16.1 )
|
btrfs? ( >=sys-fs/btrfs-progs-3.16.1 )
|
||||||
seccomp? ( >=sys-libs/libseccomp-2.2.1 )
|
seccomp? ( >=sys-libs/libseccomp-2.2.1 )
|
||||||
|
systemd? ( sys-apps/systemd )
|
||||||
"
|
"
|
||||||
|
|
||||||
# https://github.com/moby/moby/blob/master/project/PACKAGERS.md#runtime-dependencies
|
# https://github.com/moby/moby/blob/master/project/PACKAGERS.md#runtime-dependencies
|
||||||
@ -32,9 +33,8 @@ RDEPEND="
|
|||||||
sys-process/procps
|
sys-process/procps
|
||||||
>=dev-vcs/git-1.7
|
>=dev-vcs/git-1.7
|
||||||
>=app-arch/xz-utils-4.9
|
>=app-arch/xz-utils-4.9
|
||||||
dev-libs/libltdl
|
>=app-containers/containerd-1.7.15[apparmor?,btrfs?,seccomp?]
|
||||||
>=app-containers/containerd-1.7.3[apparmor?,btrfs?,seccomp?]
|
>=app-containers/runc-1.1.12[apparmor?,seccomp?]
|
||||||
>=app-containers/runc-1.1.9[apparmor?,seccomp?]
|
|
||||||
!app-containers/docker-proxy
|
!app-containers/docker-proxy
|
||||||
container-init? ( >=sys-process/tini-0.19.0[static] )
|
container-init? ( >=sys-process/tini-0.19.0[static] )
|
||||||
selinux? ( sec-policy/selinux-docker )
|
selinux? ( sec-policy/selinux-docker )
|
||||||
@ -54,6 +54,7 @@ S="${WORKDIR}/${P}/src/${EGO_PN}"
|
|||||||
# https://bugs.gentoo.org/748984 https://github.com/etcd-io/etcd/pull/12552
|
# https://bugs.gentoo.org/748984 https://github.com/etcd-io/etcd/pull/12552
|
||||||
PATCHES=(
|
PATCHES=(
|
||||||
"${FILESDIR}/0001-Openrc-Depend-on-containerd-init-script.patch"
|
"${FILESDIR}/0001-Openrc-Depend-on-containerd-init-script.patch"
|
||||||
|
"${FILESDIR}/docker-26.1.0-automagic-systemd.patch"
|
||||||
)
|
)
|
||||||
|
|
||||||
pkg_setup() {
|
pkg_setup() {
|
||||||
@ -237,11 +238,12 @@ src_compile() {
|
|||||||
export DOCKER_GITCOMMIT="${GIT_COMMIT}"
|
export DOCKER_GITCOMMIT="${GIT_COMMIT}"
|
||||||
export GOPATH="${WORKDIR}/${P}"
|
export GOPATH="${WORKDIR}/${P}"
|
||||||
export VERSION=${PV}
|
export VERSION=${PV}
|
||||||
|
tc-export PKG_CONFIG
|
||||||
|
|
||||||
# setup CFLAGS and LDFLAGS for separate build target
|
# setup CFLAGS and LDFLAGS for separate build target
|
||||||
# see https://github.com/tianon/docker-overlay/pull/10
|
# see https://github.com/tianon/docker-overlay/pull/10
|
||||||
export CGO_CFLAGS="-I${ESYSROOT}/usr/include"
|
CGO_CFLAGS+=" -I${ESYSROOT}/usr/include"
|
||||||
export CGO_LDFLAGS="-L${ESYSROOT}/usr/$(get_libdir)"
|
CGO_LDFLAGS+=" -L${ESYSROOT}/usr/$(get_libdir)"
|
||||||
|
|
||||||
# let's set up some optional features :)
|
# let's set up some optional features :)
|
||||||
export DOCKER_BUILDTAGS=''
|
export DOCKER_BUILDTAGS=''
|
||||||
@ -257,6 +259,8 @@ src_compile() {
|
|||||||
fi
|
fi
|
||||||
done
|
done
|
||||||
|
|
||||||
|
export SYSTEMD=$(usex systemd 1 0)
|
||||||
|
|
||||||
# build binaries
|
# build binaries
|
||||||
./hack/make.sh dynbinary || die 'dynbinary failed'
|
./hack/make.sh dynbinary || die 'dynbinary failed'
|
||||||
}
|
}
|
||||||
@ -0,0 +1,13 @@
|
|||||||
|
https://bugs.gentoo.org/914076
|
||||||
|
https://github.com/moby/moby/issues/47770
|
||||||
|
--- a/hack/make.sh
|
||||||
|
+++ b/hack/make.sh
|
||||||
|
@@ -83,7 +83,7 @@ if [ ! "$GOPATH" ]; then
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
-if ${PKG_CONFIG} 'libsystemd' 2> /dev/null; then
|
||||||
|
+if [[ -n "$SYSTEMD" ]] && [[ "$SYSTEMD" == 1 ]] && ${PKG_CONFIG} 'libsystemd' 2> /dev/null; then
|
||||||
|
DOCKER_BUILDTAGS+=" journald"
|
||||||
|
fi
|
||||||
|
|
||||||
@ -21,10 +21,6 @@
|
|||||||
Makes the a staticly-linked init system tini available inside a
|
Makes the a staticly-linked init system tini available inside a
|
||||||
container.
|
container.
|
||||||
</flag>
|
</flag>
|
||||||
<flag name="device-mapper">
|
|
||||||
Enables dependencies for the "devicemapper" graph driver, including
|
|
||||||
necessary kernel flags.
|
|
||||||
</flag>
|
|
||||||
<flag name="overlay">
|
<flag name="overlay">
|
||||||
Enables dependencies for the "overlay" graph driver, including
|
Enables dependencies for the "overlay" graph driver, including
|
||||||
necessary kernel flags.
|
necessary kernel flags.
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user