e2f389ad5c
- Create an unprivileged user to run as non-root - Align the installed packages with the upstream OBS-URL: https://build.opensuse.org/request/show/1010513 OBS-URL: https://build.opensuse.org/package/show/Virtualization/cdi-cloner-container?expand=0&rev=17
37 lines
1.3 KiB
Docker
37 lines
1.3 KiB
Docker
# Defines the tag for OBS and build script builds:
|
|
#!BuildTag: %%TAGPREFIX%%/cdi-cloner:%%PKG_VERSION%%
|
|
#!BuildTag: %%TAGPREFIX%%/cdi-cloner:%%PKG_VERSION%%.%RELEASE%
|
|
#!BuildTag: %%TAGPREFIX%%/cdi-cloner:%%PKG_VERSION%%-%%PKG_RELEASE%%
|
|
|
|
#!ExclusiveArch: x86_64 aarch64
|
|
|
|
# cdi-cloner container image
|
|
# KUBEVIRTFROM defined in prjconf, e.g.
|
|
# BuildFlags: dockerarg:KUBEVIRTFROM=opensuse/tumbleweed
|
|
ARG KUBEVIRTFROM
|
|
FROM $KUBEVIRTFROM
|
|
|
|
# Mandatory labels for the build service:
|
|
# https://en.opensuse.org/Building_derived_containers
|
|
# labelprefix=%%LABELPREFIX%%
|
|
LABEL org.opencontainers.image.title="Cloner container for host assisted cloning"
|
|
LABEL org.opencontainers.image.description="Source and Target cloner image for host assisted cloning"
|
|
LABEL org.opencontainers.image.created="%BUILDTIME%"
|
|
LABEL org.opencontainers.image.version="%%PKG_VERSION%%.%RELEASE%"
|
|
LABEL org.openbuildservice.disturl="%DISTURL%"
|
|
LABEL org.opensuse.reference="%%REGISTRY%%/%%TAGPREFIX%%/cdi-cloner:%%PKG_VERSION%%.%RELEASE%"
|
|
# endlabelprefix
|
|
|
|
RUN zypper -n install \
|
|
containerized-data-importer-cloner \
|
|
curl \
|
|
shadow \
|
|
tar \
|
|
util-linux && \
|
|
zypper clean -a && \
|
|
useradd -u 1001 --create-home -s /bin/bash cdi-cloner
|
|
|
|
WORKDIR /home/cdi-cloner
|
|
USER 1001
|
|
ENTRYPOINT [ "/usr/bin/cloner_startup.sh" ]
|