Compare commits
2 Commits
d505c4e65f
...
7bcccf5fb3
| Author | SHA1 | Date | |
|---|---|---|---|
|
7bcccf5fb3
|
|||
|
32bbe1c2cd
|
@@ -49,7 +49,6 @@ jobs:
|
|||||||
tags: ${{ github.ref_name }}
|
tags: ${{ github.ref_name }}
|
||||||
context: ./containers/fedora
|
context: ./containers/fedora
|
||||||
containerfiles: ./containers/fedora/Containerfile
|
containerfiles: ./containers/fedora/Containerfile
|
||||||
oci: true
|
|
||||||
- name: Push
|
- name: Push
|
||||||
uses: redhat-actions/push-to-registry@v2
|
uses: redhat-actions/push-to-registry@v2
|
||||||
with:
|
with:
|
||||||
@@ -59,7 +58,7 @@ jobs:
|
|||||||
username: ${{ secrets.REGISTRY_USERNAME }}
|
username: ${{ secrets.REGISTRY_USERNAME }}
|
||||||
password: ${{ secrets.REGISTRY_TOKEN }}
|
password: ${{ secrets.REGISTRY_TOKEN }}
|
||||||
extra-args: |
|
extra-args: |
|
||||||
--compression-format=zstd:chunked
|
--compression-format=zstd
|
||||||
--compression-level=12
|
--compression-level=12
|
||||||
|
|
||||||
dependent-images:
|
dependent-images:
|
||||||
@@ -97,7 +96,6 @@ jobs:
|
|||||||
context: ./containers/${{ matrix.container }}
|
context: ./containers/${{ matrix.container }}
|
||||||
containerfiles: ./containers/${{ matrix.container }}/Containerfile
|
containerfiles: ./containers/${{ matrix.container }}/Containerfile
|
||||||
build-args: TAG=${{ github.ref_name }}
|
build-args: TAG=${{ github.ref_name }}
|
||||||
oci: true
|
|
||||||
- name: Push
|
- name: Push
|
||||||
if: steps.check.outputs.run == 'true'
|
if: steps.check.outputs.run == 'true'
|
||||||
uses: redhat-actions/push-to-registry@v2
|
uses: redhat-actions/push-to-registry@v2
|
||||||
@@ -108,5 +106,5 @@ jobs:
|
|||||||
username: ${{ secrets.REGISTRY_USERNAME }}
|
username: ${{ secrets.REGISTRY_USERNAME }}
|
||||||
password: ${{ secrets.REGISTRY_TOKEN }}
|
password: ${{ secrets.REGISTRY_TOKEN }}
|
||||||
extra-args: |
|
extra-args: |
|
||||||
--compression-format=zstd:chunked
|
--compression-format=zstd
|
||||||
--compression-level=12
|
--compression-level=12
|
||||||
|
|||||||
@@ -1,7 +1,8 @@
|
|||||||
FROM quay.io/fedora/fedora:43
|
FROM quay.io/fedora/fedora:43
|
||||||
|
|
||||||
# === install system packages ===
|
# === install system packages ===
|
||||||
RUN dnf update -y && \
|
RUN --mount=type=cache,target=/var/cache/dnf \
|
||||||
|
dnf update -y && \
|
||||||
dnf copr enable -y atim/lazygit && \
|
dnf copr enable -y atim/lazygit && \
|
||||||
dnf -y install procps ping bash-completion glibc-langpack-en \
|
dnf -y install procps ping bash-completion glibc-langpack-en \
|
||||||
host-spawn dbus-launch \
|
host-spawn dbus-launch \
|
||||||
@@ -10,8 +11,7 @@ RUN dnf update -y && \
|
|||||||
|
|
||||||
# === setup user ===
|
# === setup user ===
|
||||||
RUN useradd -ms /bin/bash user && \
|
RUN useradd -ms /bin/bash user && \
|
||||||
echo 'user ALL=NOPASSWD: ALL' > /etc/sudoers && \
|
echo 'user ALL=NOPASSWD: ALL' > /etc/sudoers
|
||||||
mkdir -p /run/user/1000 && chown user:user /run/user/1000
|
|
||||||
|
|
||||||
USER user
|
USER user
|
||||||
WORKDIR /home/user
|
WORKDIR /home/user
|
||||||
|
|||||||
@@ -2,6 +2,7 @@ ARG TAG
|
|||||||
FROM job79/fedora:${TAG}
|
FROM job79/fedora:${TAG}
|
||||||
USER root
|
USER root
|
||||||
|
|
||||||
RUN dnf -y install go && dnf clean all
|
RUN --mount=type=cache,target=/var/cache/dnf \
|
||||||
|
dnf -y install go && dnf clean all
|
||||||
|
|
||||||
USER user
|
USER user
|
||||||
|
|||||||
@@ -2,10 +2,10 @@ ARG TAG
|
|||||||
FROM job79/fedora:${TAG}
|
FROM job79/fedora:${TAG}
|
||||||
USER root
|
USER root
|
||||||
|
|
||||||
RUN dnf -y install kubectl k9s openssl age "$(curl -s https://api.github.com/repos/getsops/sops/releases/latest | jq -r '.assets[] | select(.name | test("sops-.*.x86_64.rpm$")) | .browser_download_url')" && \
|
RUN --mount=type=cache,target=/var/cache/dnf \
|
||||||
|
dnf -y install kubectl k9s openssl age "$(curl -s https://api.github.com/repos/getsops/sops/releases/latest | jq -r '.assets[] | select(.name | test("sops-.*.x86_64.rpm$")) | .browser_download_url')" && \
|
||||||
dnf clean all && \
|
dnf clean all && \
|
||||||
curl -sL https://talos.dev/install | sh && \
|
curl -sL https://talos.dev/install | sh && \
|
||||||
curl -s https://fluxcd.io/install.sh | bash && \
|
curl -s https://fluxcd.io/install.sh | bash
|
||||||
chmod 755 /run
|
|
||||||
|
|
||||||
USER user
|
USER user
|
||||||
|
|||||||
Reference in New Issue
Block a user