WIP: Have the IPA 'ramdisk' as a separate OCI Image #379

Draft
nbelouin wants to merge 2 commits from nbelouin/Factory:container-ipa into main
Owner
No description provided.
nbelouin added 1 commit 2026-02-03 10:29:53 +01:00
Have the IPA 'ramdisk' as a separate OCI Image
Some checks failed
Check Release Manifest Local Charts Versions / Check Release Manifest Local Charts Versions (pull_request) Successful in -41s
Build PR in OBS / Build PR in OBS (pull_request_target) Failing after 1m45s
10792237fb
Signed-off-by: Nicolas Belouin <nicolas.belouin@suse.com>
nbelouin force-pushed container-ipa from 10792237fb to b89a8b46d0 2026-02-03 10:51:04 +01:00 Compare
nbelouin force-pushed container-ipa from b89a8b46d0 to 3746c16cd0 2026-02-03 11:04:57 +01:00 Compare
nbelouin force-pushed container-ipa from 3746c16cd0 to 3cb7064654 2026-02-03 11:28:32 +01:00 Compare
steven.hardy reviewed 2026-02-03 13:09:24 +01:00
@@ -10,0 +28,4 @@
# Example for an image requiring authentication on Docker Hub:
# TOKEN=$(curl -s "https://auth.docker.io/token?service=registry.docker.io&scope=repository:library/ubuntu:pull" | jq -r .token)
# get_manifest_type "https://registry-1.docker.io/v2/library/ubuntu/manifests/latest" -H "Authorization: Bearer "
#
Owner

While it's impressive to make this all work with only bash, do you think it will be robust enough?

I'm wondering if it's worth paying the small size cost of adding a tool which handles the registry interaction, for example the oras CLI tool is only about 11MB, I've not looked at alternatives.

While it's impressive to make this all work with only bash, do you think it will be robust enough? I'm wondering if it's worth paying the small size cost of adding a tool which handles the registry interaction, for example the `oras` CLI tool is only about 11MB, I've not looked at alternatives.
Author
Owner

Most of the heavy lifting is generated through Gemini here, but I wanted to check if the naive approach is sound. Reason being that I tried with skopeo and it worked, but without support for multi-arch, and it kept re-downloading more than needed every time.
I may try with oras, but I wanted to have a reference of a "working" solution to see the impact in term of size notably (might be small)

Most of the heavy lifting is generated through Gemini here, but I wanted to check if the naive approach is sound. Reason being that I tried with skopeo and it worked, but without support for multi-arch, and it kept re-downloading more than needed every time. I may try with oras, but I wanted to have a reference of a "working" solution to see the impact in term of size notably (might be small)
nbelouin force-pushed container-ipa from 3cb7064654 to 7a88e39c0b 2026-02-03 14:08:07 +01:00 Compare
nbelouin force-pushed container-ipa from 7a88e39c0b to c1fc6a899b 2026-02-03 14:10:10 +01:00 Compare
nbelouin force-pushed container-ipa from c1fc6a899b to 8d8339623d 2026-02-03 15:00:38 +01:00 Compare
nbelouin force-pushed container-ipa from 8d8339623d to 178de4f0c7 2026-02-03 15:57:42 +01:00 Compare
nbelouin force-pushed container-ipa from 178de4f0c7 to a8321c4f05 2026-02-04 11:53:21 +01:00 Compare
nbelouin force-pushed container-ipa from a8321c4f05 to 4d2bc86dfd 2026-02-04 15:21:43 +01:00 Compare
nbelouin force-pushed container-ipa from 4d2bc86dfd to f3bbd4ea18 2026-02-05 10:03:30 +01:00 Compare
nbelouin added 1 commit 2026-02-05 15:13:42 +01:00
ironic: Change how we inject CA certs in IPA image
Some checks failed
Check Release Manifest Local Charts Versions / Check Release Manifest Local Charts Versions (pull_request) Successful in -41s
Build PR in OBS / Build PR in OBS (pull_request_target) Failing after 3h2m12s
ebd102e640
Signed-off-by: Nicolas Belouin <nicolas.belouin@suse.com>
nbelouin force-pushed container-ipa from ebd102e640 to 4ab70d6359 2026-02-06 11:25:20 +01:00 Compare
nbelouin added 2 commits 2026-02-06 15:52:46 +01:00
Signed-off-by: Nicolas Belouin <nicolas.belouin@suse.com>
fixup! ironic: Change how we inject CA certs in IPA image
Some checks failed
Check Release Manifest Local Charts Versions / Check Release Manifest Local Charts Versions (pull_request) Successful in -35s
Build PR in OBS / Build PR in OBS (pull_request_target) Failing after 3h13m8s
fd75f171d0
Signed-off-by: Nicolas Belouin <nicolas.belouin@suse.com>
nbelouin added 1 commit 2026-02-06 15:57:36 +01:00
fixup! Have the IPA 'ramdisk' as a separate OCI Image
Some checks failed
Check Release Manifest Local Charts Versions / Check Release Manifest Local Charts Versions (pull_request) Successful in -38s
Build PR in OBS / Build PR in OBS (pull_request_target) Failing after 14m13s
880912bd11
Signed-off-by: Nicolas Belouin <nicolas.belouin@suse.com>
nbelouin force-pushed container-ipa from 880912bd11 to d7099ecff3 2026-02-06 16:13:18 +01:00 Compare
nbelouin force-pushed container-ipa from d7099ecff3 to d4136ea8df 2026-02-06 16:18:02 +01:00 Compare
nbelouin added 1 commit 2026-02-09 13:25:55 +01:00
fixup! ironic: Change how we inject CA certs in IPA image
All checks were successful
Check Release Manifest Local Charts Versions / Check Release Manifest Local Charts Versions (pull_request) Successful in 17s
Build PR in OBS / Build PR in OBS (pull_request_target) Successful in 2m0s
e961875ce7
Signed-off-by: Nicolas Belouin <nicolas.belouin@suse.com>
nbelouin force-pushed container-ipa from e961875ce7 to 9b36bc5db0 2026-02-09 16:01:27 +01:00 Compare
nbelouin force-pushed container-ipa from 9b36bc5db0 to 399a9c825c 2026-02-10 16:33:13 +01:00 Compare
All checks were successful
Check Release Manifest Local Charts Versions / Check Release Manifest Local Charts Versions (pull_request) Successful in 15s
Build PR in OBS / Build PR in OBS (pull_request_target) Successful in 37s
This pull request has changes conflicting with the target branch.
  • ironic-ipa-downloader-image/Dockerfile.aarch64
  • ironic-ipa-downloader-image/Dockerfile.x86_64
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u container-ipa:nbelouin-container-ipa
git checkout nbelouin-container-ipa
Sign in to join this conversation.
No Reviewers
No Label
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: suse-edge/Factory#379