forked from pool/virt-launcher-container
dcafd57833
- Update the container image for KubeVirt v0.59.0 OBS-URL: https://build.opensuse.org/request/show/1068624 OBS-URL: https://build.opensuse.org/package/show/Virtualization/virt-launcher-container?expand=0&rev=35
101 lines
3.4 KiB
Docker
101 lines
3.4 KiB
Docker
# Define the tags for OBS and build script builds:
|
|
#!BuildTag: %%TAGPREFIX%%/virt-launcher:%%PKG_VERSION%%
|
|
#!BuildTag: %%TAGPREFIX%%/virt-launcher:%%PKG_VERSION%%.%RELEASE%
|
|
#!BuildTag: %%TAGPREFIX%%/virt-launcher:%%PKG_VERSION%%-%%PKG_RELEASE%%
|
|
|
|
#!ExclusiveArch: x86_64 aarch64
|
|
|
|
# virt-launcher container image
|
|
# KUBEVIRTFROM defined in prjconf, e.g.
|
|
# BuildFlags: dockerarg:KUBEVIRTFROM=opensuse/tumbleweed
|
|
ARG KUBEVIRTFROM
|
|
FROM $KUBEVIRTFROM
|
|
# TARGETARCH defined in prjconf, to handle architecture specific bits
|
|
# since TARGETARCH is not defined in OBS builds yet. Default to amd64.
|
|
ARG TARGETARCH=amd64
|
|
|
|
# Mandatory labels for the build service:
|
|
# https://en.opensuse.org/Building_derived_containers
|
|
# labelprefix=%%LABELPREFIX%%
|
|
LABEL org.opencontainers.image.title="kubevirt virt-launcher container"
|
|
LABEL org.opencontainers.image.description="Container to host VM processes for kubevirt"
|
|
LABEL org.opencontainers.image.created="%BUILDTIME%"
|
|
LABEL org.opencontainers.image.version="%%PKG_VERSION%%.%RELEASE%"
|
|
LABEL org.openbuildservice.disturl="%DISTURL%"
|
|
LABEL org.opensuse.reference="%%REGISTRY%%/%%TAGPREFIX%%/virt-launcher:%%PKG_VERSION%%.%RELEASE%"
|
|
# endlabelprefix
|
|
|
|
RUN zypper -n install \
|
|
augeas \
|
|
augeas-lenses \
|
|
curl \
|
|
ethtool \
|
|
gawk \
|
|
iptables \
|
|
kubevirt-container-disk \
|
|
kubevirt-virt-launcher \
|
|
libcap-progs \
|
|
libvirt-client \
|
|
libvirt-daemon-driver-qemu \
|
|
ncat \
|
|
nftables \
|
|
qemu-hw-usb-redirect \
|
|
qemu-tools \
|
|
socat \
|
|
tar \
|
|
timezone \
|
|
vim-small \
|
|
xorriso
|
|
|
|
#!ArchExclusiveLine: x86_64
|
|
RUN if [ "$TARGETARCH" = "amd64" ]; then \
|
|
zypper -n install qemu-x86 ; \
|
|
fi;
|
|
|
|
#!ArchExclusiveLine: aarch64
|
|
RUN if [ "$TARGETARCH" = "arm64" ]; then \
|
|
zypper -n install \
|
|
qemu-arm \
|
|
qemu-uefi-aarch64 ; \
|
|
fi;
|
|
|
|
RUN zypper clean -a
|
|
|
|
RUN ln -s ncat /usr/bin/nc
|
|
|
|
RUN mkdir -p /usr/share/OVMF
|
|
|
|
#!ArchExclusiveLine: x86_64
|
|
RUN if [ "$TARGETARCH" = "amd64" ]; then \
|
|
ln -s ../qemu/ovmf-x86_64-code.bin /usr/share/OVMF/OVMF_CODE.fd && \
|
|
ln -s ../qemu/ovmf-x86_64-vars.bin /usr/share/OVMF/OVMF_VARS.fd && \
|
|
ln -s ../qemu/ovmf-x86_64-code.bin /usr/share/OVMF/OVMF_CODE.cc.fd && \
|
|
ln -s ../qemu/ovmf-x86_64-smm-ms-code.bin /usr/share/OVMF/OVMF_CODE.secboot.fd && \
|
|
ln -s ../qemu/ovmf-x86_64-smm-ms-vars.bin /usr/share/OVMF/OVMF_VARS.secboot.fd ; \
|
|
fi;
|
|
|
|
#!ArchExclusiveLine: aarch64
|
|
RUN if [ "$TARGETARCH" = "arm64" ]; then \
|
|
ln -s ../qemu/aavmf-aarch64-code.bin /usr/share/OVMF/AAVMF_CODE.fd && \
|
|
ln -s ../qemu/aavmf-aarch64-vars.bin /usr/share/OVMF/AAVMF_VARS.fd ; \
|
|
fi;
|
|
|
|
# KubeVirt expects virtiofsd to be installed in /usr/libexec
|
|
RUN ls /usr/libexec/virtiofsd || \
|
|
(mkdir -p /usr/libexec && ln -s ../lib/virtiofsd /usr/libexec/virtiofsd)
|
|
|
|
COPY augconf /augconf
|
|
|
|
RUN augtool -f /augconf
|
|
RUN cd /var && rm -rf run && ln -s ../run .
|
|
|
|
# Setup permissions and capabilities for non-root VMIs. KubeVirt sets
|
|
# XDG_* directories to /var/run.
|
|
RUN setcap 'cap_net_bind_service=+ep' /usr/bin/virt-launcher && \
|
|
setcap 'cap_net_bind_service=+ep' /usr/bin/virt-launcher-monitor && \
|
|
setcap 'cap_net_bind_service=+ep' /usr/bin/qemu-system-$(uname -m) && \
|
|
chmod 0755 /etc/libvirt && \
|
|
chown qemu:qemu /var/run
|
|
|
|
ENTRYPOINT [ "/usr/bin/virt-launcher-monitor" ]
|