You've already forked fedora-toolbox
forked from davejansen/fedora-bootc
Dave Jansen
1ceb8b2b51
Reviewed-on: https://davejansen.dev/davejansen/fedora-bootc/pulls/1 Update cron schedule so builds only run every three days Attempt: Add custom containers-policy.json Actually copy cosign.pub into the build context Move containers policy file to the right place Oops :D Ensure the correct tags are set with new builds Add my own registries.d policy file, too Temporarily stop removing system-installed Firefox I'm trying to debug why my system-installed-1Password-and-Firefox-flatpak "hack" doesn't work on my bootc image. Borrow certain `/etc/passwd` and `/etc/group` clean-up steps from `hhd-dev/rechunk` One step back Further reduce. Re-remove system-installed Firefox Attempt: Separate cleanup step Add some debug echos, trigger cleanup while mounts are present Temporarily only look at /etc/group Attempt to re-add (optionally) writing `passwd` changes I always forget. Sunk cost fallacy "Let's try this again" I give up. For now.
36 lines
1.2 KiB
Docker
36 lines
1.2 KiB
Docker
ARG FEDORA_BASE=42
|
|
|
|
# Allow build scripts to be referenced without being copied into the final image
|
|
FROM scratch AS ctx
|
|
COPY build_files /
|
|
COPY /sys_files /sys_files
|
|
COPY cosign.pub /cosign.pub
|
|
|
|
# Base Image
|
|
FROM quay.io/fedora-ostree-desktops/silverblue:$FEDORA_BASE
|
|
|
|
### [IM]MUTABLE /opt
|
|
## Some bootable images, like Fedora, have /opt symlinked to /var/opt, in order to
|
|
## make it mutable/writable for users. However, some packages write files to this directory,
|
|
## thus its contents might be wiped out when bootc deploys an image, making it troublesome for
|
|
## some packages. Eg, google-chrome, docker-desktop.
|
|
##
|
|
## Uncomment the following line if one desires to make /opt immutable and be able to be used
|
|
## by the package manager.
|
|
|
|
RUN rm /opt && mkdir /opt
|
|
|
|
### MODIFICATIONS
|
|
## make modifications desired in your image and install packages by modifying the build.sh script
|
|
## the following RUN directive does all the things required to run "build.sh" as recommended.
|
|
|
|
RUN --mount=type=bind,from=ctx,source=/,target=/ctx \
|
|
--mount=type=cache,dst=/var/cache \
|
|
--mount=type=cache,dst=/var/log \
|
|
--mount=type=tmpfs,dst=/tmp \
|
|
/ctx/build.sh && /ctx/cleanup.sh
|
|
|
|
### LINTING
|
|
## Verify final image and contents are correct.
|
|
RUN bootc container lint
|