virt-launcher-container/Dockerfile

99 lines
3.3 KiB
Docker

# SPDX-License-Identifier: Apache-2.0
# Define the tags for OBS and build script builds:
#!BuildTag: %%TAGPREFIX%%/virt-launcher:%%PKG_VERSION%%
#!BuildTag: %%TAGPREFIX%%/virt-launcher:%%PKG_VERSION%%.%RELEASE%
#!BuildTag: %%TAGPREFIX%%/virt-launcher:%%PKG_VERSION%%-%%PKG_RELEASE%%
#!ExclusiveArch: x86_64 aarch64
# virt-launcher container image
# KUBEVIRTFROM defined in prjconf, e.g.
# BuildFlags: dockerarg:KUBEVIRTFROM=opensuse/tumbleweed
ARG KUBEVIRTFROM
FROM $KUBEVIRTFROM
# Mandatory labels for the build service:
# https://en.opensuse.org/Building_derived_containers
# labelprefix=%%LABELPREFIX%%
LABEL org.opencontainers.image.title="kubevirt virt-launcher container"
LABEL org.opencontainers.image.description="Container to host VM processes for kubevirt"
LABEL org.opencontainers.image.created="%BUILDTIME%"
LABEL org.opencontainers.image.version="%%PKG_VERSION%%.%RELEASE%"
LABEL org.openbuildservice.disturl="%DISTURL%"
LABEL org.opensuse.reference="%%REGISTRY%%/%%TAGPREFIX%%/virt-launcher:%%PKG_VERSION%%.%RELEASE%"
# endlabelprefix
RUN zypper -n install \
augeas \
augeas-lenses \
curl \
ethtool \
gawk \
iptables \
kubevirt-container-disk \
kubevirt-virt-launcher \
libcap-progs \
libvirt-client \
libvirt-daemon-driver-qemu \
ncat \
nftables \
qemu-hw-usb-redirect \
qemu-img \
socat \
tar \
timezone \
vim-small \
virtiofsd \
xorriso
#!ArchExclusiveLine: x86_64
RUN if [ "$(uname -m)" = "x86_64" ]; then \
zypper -n install qemu-x86 ; \
fi;
#!ArchExclusiveLine: aarch64
RUN if [ "$(uname -m)" = "aarch64" ]; then \
zypper -n install \
qemu-arm \
qemu-uefi-aarch64 ; \
fi;
RUN zypper clean -a
RUN ln -s ncat /usr/bin/nc
RUN mkdir -p /usr/share/OVMF
#!ArchExclusiveLine: x86_64
RUN if [ "$(uname -m)" = "x86_64" ]; then \
ln -s ../qemu/ovmf-x86_64-code.bin /usr/share/OVMF/OVMF_CODE.fd && \
ln -s ../qemu/ovmf-x86_64-vars.bin /usr/share/OVMF/OVMF_VARS.fd && \
ln -s ../qemu/ovmf-x86_64-code.bin /usr/share/OVMF/OVMF_CODE.cc.fd && \
ln -s ../qemu/ovmf-x86_64-smm-ms-code.bin /usr/share/OVMF/OVMF_CODE.secboot.fd && \
ln -s ../qemu/ovmf-x86_64-smm-ms-vars.bin /usr/share/OVMF/OVMF_VARS.secboot.fd ; \
fi;
#!ArchExclusiveLine: aarch64
RUN if [ "$(uname -m)" = "aarch64" ]; then \
ln -s ../qemu/aavmf-aarch64-code.bin /usr/share/OVMF/AAVMF_CODE.fd && \
ln -s ../qemu/aavmf-aarch64-vars.bin /usr/share/OVMF/AAVMF_VARS.fd ; \
fi;
# KubeVirt expects virtiofsd to be installed in /usr/libexec
RUN ls /usr/libexec/virtiofsd || \
(mkdir -p /usr/libexec && ln -s ../lib/virtiofsd /usr/libexec/virtiofsd)
COPY augconf /augconf
RUN augtool -f /augconf
RUN cd /var && rm -rf run && ln -s ../run .
# Setup permissions and capabilities for non-root VMIs
RUN setcap 'cap_net_bind_service=+ep' /usr/bin/virt-launcher && \
setcap 'cap_net_bind_service=+ep' /usr/bin/virt-launcher-monitor && \
setcap 'cap_net_bind_service=+ep' /usr/bin/qemu-system-$(uname -m) && \
chmod 0755 /etc/libvirt
ENTRYPOINT [ "/usr/bin/virt-launcher-monitor" ]