c92d845639
Refactor the workflows so that we can use build-push-action also for publishing. This is a precondition for switching to buildx, needed for multi-arch images. The trick needed for this is using an environment variable to control whether we should push when building the master branch, initializing it according to the tag status. Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
27 lines
1.2 KiB
Docker
27 lines
1.2 KiB
Docker
# This image builds Isar jobs using the kas tool
|
|
|
|
ARG KAS_TAG=latest
|
|
|
|
FROM ghcr.io/siemens/kas/kas:$KAS_TAG
|
|
|
|
ARG DEBIAN_FRONTEND=noninteractive
|
|
|
|
ENV LC_ALL=en_US.UTF-8
|
|
RUN echo 'deb http://deb.debian.org/debian buster-backports main' > /etc/apt/sources.list.d/buster-backports.list && \
|
|
echo "Package: qemu-user-static\nPin: release n=buster-backports\nPin-Priority: 501\n\nPackage: *\nPin: release n=buster-backports\nPin-Priority: -1" > /etc/apt/preferences.d/qemu-user-static && \
|
|
apt-get update && \
|
|
apt-get install -y -f --no-install-recommends \
|
|
autoconf automake gdisk libtool bash-completion \
|
|
sudo reprepro python3 binfmt-support e2fsprogs \
|
|
multistrap qemu-user-static debootstrap quilt && \
|
|
apt-get clean && \
|
|
rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
|
|
|
RUN echo "builder ALL=NOPASSWD: ALL" > /etc/sudoers.d/builder-nopasswd && \
|
|
chmod 660 /etc/sudoers.d/builder-nopasswd
|
|
|
|
RUN echo "Defaults env_keep += \"ftp_proxy http_proxy https_proxy no_proxy\"" \
|
|
> /etc/sudoers.d/env_keep && chmod 660 /etc/sudoers.d/env_keep
|
|
|
|
RUN sed -i 's|#!/bin/bash|\0\n\nupdate-binfmts --enable \&\& [ -f /proc/sys/fs/binfmt_misc/status ]|' /kas/container-entrypoint
|