jenkins-podman/Dockerfile

53 lines
1.7 KiB
Docker
Raw Normal View History

2022-01-25 11:16:28 +00:00
ARG BASE="4.11.2-4-alpine-jdk17-preview"
2022-01-13 11:41:17 +00:00
FROM jenkins/inbound-agent:${BASE}
USER root
RUN echo "http://dl-cdn.alpinelinux.org/alpine/edge/testing" >> /etc/apk/repositories \
&& apk upgrade -U -a \
&& apk --no-cache add \
tini \
2022-01-13 11:41:17 +00:00
make \
2022-02-03 18:29:47 +00:00
yq \
2022-01-13 11:41:17 +00:00
fuse-overlayfs \
podman \
buildah \
aws-cli \
trivy
# Podman tweaks
ADD conf/containers.conf conf/registries.conf conf/storage.conf /etc/containers/
2022-01-14 00:23:18 +00:00
# Trivy html template
ADD --chown=jenkins:jenkins html.tpl /home/jenkins
# Rootless podman
2022-01-13 11:41:17 +00:00
ADD --chown=jenkins:jenkins conf/podman-containers.conf /home/jenkins/.config/containers/containers.conf
2022-01-14 00:23:18 +00:00
RUN mkdir -p /tmp/podman-run-1000 /var/lib/shared/overlay-images /var/lib/shared/overlay-layers \
2022-01-13 11:41:17 +00:00
/var/lib/shared/vfs-images /var/lib/shared/vfs-layers && \
touch /var/lib/shared/overlay-images/images.lock /var/lib/shared/overlay-layers/layers.lock \
2022-01-14 00:23:18 +00:00
/var/lib/shared/vfs-images/images.lock /var/lib/shared/vfs-layers/layers.lock && \
chown jenkins:jenkins /tmp/podman-run-1000 && chmod 700 /tmp/podman-run-1000
2022-01-13 11:41:17 +00:00
# Patch jenkins-agent to launch podman service
RUN sed -i -e 's/exec \$JAVA_BIN/podman system service -t0\&\n exec \$JAVA_BIN/' /usr/local/bin/jenkins-agent
2022-01-13 11:41:17 +00:00
# Make docker in Jenkinsfiles work
RUN ln -s /usr/bin/podman /usr/bin/docker
# Rootless podman
RUN echo jenkins:100000:65536 > /etc/subuid \
&& echo jenkins:100000:65536 > /etc/subgid
2022-01-14 00:23:18 +00:00
ENV XDG_RUNTIME_DIR=/tmp/podman-run-1000
2022-01-13 13:56:54 +00:00
ENV BUILDAH_ISOLATION=chroot
2022-01-14 00:23:18 +00:00
ENV TRIVY_TEMPLATE="@/home/jenkins/html.tpl"
USER jenkins
2022-01-13 11:41:17 +00:00
# Allow container layers to be stored in PVCs
VOLUME /home/jenkins/.local/share/containers
ENTRYPOINT ["/sbin/tini", "--", "/usr/local/bin/jenkins-agent"]