-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy path010.libressl.buildah
63 lines (62 loc) · 3.48 KB
/
010.libressl.buildah
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
##Converts image from openssl to libressl
FROM crucible.lab:4000/oci/portage:latest
ARG REPO="https://server.lab/git"
ARG URI="crucible.lab:4000/oci/gentoo-stage3-amd64-hardened"
ARG NAMESPACE="nulllabs"
ARG REGISTRY="crucible.lab:4000/"
ARG CNAMESPACE="oci/"
ARG NAME="libressl"
LABEL $NAMESPACE.build-date="$BDATE" \
$NAMESPACE.name="$NAME" \
$NAMESPACE.maintainer="kbaegis@gmail.com" \
$NAMESPACE.description="Base container for libressl based images." \
$NAMESPACE.usage="https://$REPO/NullLabs/oci/src/master/$NAME/README.md" \
$NAMESPACE.url="https://$REPO/NullLabs/oci/src/master/$NAME/README.md" \
$NAMESPACE.vcs-url="https://services.home/git/NullLabs/oci/src/master/$NAME/" \
$NAMESPACE.vcs-ref="$GHEAD" \
$NAMESPACE.vendor="NullLabs" \
$NAMESPACE.version="beta-0.0.2" \
$NAMESPACE.schema-version="1.0" \
$NAMESPACE.docker.cmd="docker run -it --name $NAMESPACE-$NAME --privileged -l $NAMESPACE.image=$URI $URI:latest" \
$NAMESPACE.docker.cmd.devel="docker run -it --name $NAMESPACE-$NAME-tmp --privileged -l $NAMESPACE.image=$URI --rm --entrypoint=/bin/bash $URI:latest" \
$NAMESPACE.docker.cmd.test="docker run --entrypoint=/usr/local/bin/test.sh $URI:latest" \
$NAMESPACE.docker.cmd.debug="docker exec -it $NAMESPACE-$NAME bash" \
$NAMESPACE.docker.cmd.help="docker exec -it $NAMESPACE-$NAME /usr/local/bin/entrypoint.sh --help" \
$NAMESPACE.docker.params="" \
$NAMESPACE.cri.cmd="" \
$NAMESPACE.cri.cmd.devel="podman --cgroup-manager cgroupfs run --entrypoint=/bin/bash $URI:latest" \
$NAMESPACE.cri.cmd.test="podman --cgroup-manager cgroupfs run --entrypoint=/usr/local/bin/test.sh $URI:latest" \
$NAMESPACE.cri.cmd.debug="" \
$NAMESPACE.cri.cmd.help="" \
$NAMESPACE.cri.params=""
ENV GENESIS="$GENESISARG" \
SELF="$SELFARG"
ADD .x509/* /tmp/
RUN echo 'USE="${USE} libressl"' >> /etc/portage/make.conf \
&& echo 'USE="${USE} libressl"' >> /etc/portage/make.conf.bak \
&& mkdir -p /etc/portage/profile \
&& mkdir -p /etc/portage/package.mask \
&& echo "-libressl" >> /etc/portage/profile/use.stable.mask \
&& echo "dev-libs/libressl*" >> /etc/portage/package.accept_keywords \
&& echo 'dev-libs/openssl' >>/etc/portage/package.mask/libressl \
&& echo 'net-misc/curl ~amd64' >>/etc/portage/package.accept_keywords \
&& SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt emerge -f libressl \
&& SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt emerge -C openssl \
&& SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt emerge -1 libressl \
&& SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt emerge -1 openssh wget python:2.7 python:3.4 iputils \
&& echo CURL_SSL='libressl' >>/etc/portage/make.conf \
&& FETCHCOMMAND='wget -t 3 -T 60 --passive-ftp --no-check-certificate -O "${DISTDIR}/${FILE}" "${URI}"' RESUMECOMMAND='wget -c -t 3 -T 60 --passive-ftp --no-check-certificate -O "${DISTDIR}/${FILE}" "${URI}"' emerge @preserved-rebuild \
&& SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt emerge net-misc/curl \
&& $HOME/.build/rsync.sh \
&& SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt emerge --depclean --with-bdeps=n \
&& for i in $(ls /tmp/*.gpg);do gpg --import $i;done \
&& for i in $(ls /tmp/*.pem);do file=$(basename $i);cp $i /usr/local/share/ca-certificates/$file.crt;done \
&& update-ca-certificates \
&& mkdir ~/.ssh/ \
&& cp /tmp/docker_rsa* ~/.ssh/ \
&& cp /tmp/config ~/.ssh/ \
&& chmod 600 ~/.ssh/* \
&& mkdir -p /etc/portage/profile/ \
&& printf "\ndev-libs/openssl-1" >> /etc/portage/profile/package.provided \
&& $HOME/.build/rsync.sh
ENTRYPOINT ["/bin/bash"]