forked from sysflow-telemetry/sf-collector
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Dockerfile.ubi.amd64
86 lines (71 loc) · 2.76 KB
/
Dockerfile.ubi.amd64
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
# syntax = docker/dockerfile:1.0-experimental
#
# Copyright (C) 2022 IBM Corporation.
#
# Authors:
# Frederico Araujo <frederico.araujo@ibm.com>
# Teryl Taylor <terylt@ibm.com>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#-----------------------
# Usage
#-----------------------
#
# 1. Add scripts/build/rhpassword and scripts/build/rhuser and update them
# with user/password for RHEL subscription manager
# 2. Build with Docker BuildKit:
#
# DOCKER_BUILDKIT=1 docker build --no-cache \
# --build-arg UBI_VER=8.4-206
# --secret id=rhuser,src=scripts/build/rhuser \
# --secret id=rhpassword,src=scripts/build/rhpassword \
# --target mods \
# -t ubi:mods-0.0.0 \
# -f Dockerfile.ubi.amd64 .
#
ARG UBI_VER
#-----------------------
# Stage: base
#-----------------------
FROM registry.access.redhat.com/ubi9/ubi:${UBI_VER} AS base
# To enable subscription manager on ubi9
# https://access.redhat.com/discussions/5889431
ENV SMDEV_CONTAINER_OFF=1
# Install Packages
# Copy in llvm 9.0 rpms. Falco's ebpf probe fails unless compiled with llvm 7 to 12 for now.
# https://github.com/falcosecurity/libs/issues/4
COPY ./scripts/dev/rpms /build/rpms
COPY ./scripts/installUBIDependency.sh /build/install.sh
RUN --mount=type=secret,id=rhuser,dst=/secret/rhuser --mount=type=secret,id=rhpassword,dst=/secret/rhpassword \
( export REGISTER_USER=$(cat /secret/rhuser) && export REGISTER_PASSWORD=$(cat /secret/rhpassword) && bash /build/install.sh base ) && \
rm -rf /build
#-----------------------
# Stage: mods
#-----------------------
FROM base AS mods
# environment and args
ARG INSTALL_PATH=/usr/local/sysflow
ENV PATH="$PATH:"${INSTALL_PATH}"/modules/bin"
ENV HOST_ROOT=/host
ENV HOME=/root
ARG MAKE_JOBS=1
ARG ARCH=x86_64
# build modules
COPY ./modules /build/modules
COPY ./makefile.* /build/
COPY ./docker-entry-ubi.sh /usr/local/sysflow/modules/bin/
RUN dnf -y install git && \
cd /build/modules && \
make INSTALL_PATH=${INSTALL_PATH} MAKE_JOBS=${MAKE_JOBS} install && \
make clean && rm -rf /build/modules && \
dnf -y remove git && dnf -y clean all && rm -rf /var/cache/dnf