ARG BASE="latest-alpine-jdk11" FROM jenkins/inbound-agent:${BASE} USER root RUN echo "http://dl-cdn.alpinelinux.org/alpine/edge/testing" >> /etc/apk/repositories \ && apk upgrade -U -a \ && apk --no-cache add \ make \ fuse-overlayfs \ podman \ buildah \ aws-cli \ trivy # Podman tweaks ADD conf/containers.conf conf/registries.conf conf/storage.conf /etc/containers/ ADD --chown=jenkins:jenkins conf/podman-containers.conf /home/jenkins/.config/containers/containers.conf RUN mkdir -p /var/lib/shared/overlay-images /var/lib/shared/overlay-layers \ /var/lib/shared/vfs-images /var/lib/shared/vfs-layers && \ touch /var/lib/shared/overlay-images/images.lock /var/lib/shared/overlay-layers/layers.lock \ /var/lib/shared/vfs-images/images.lock /var/lib/shared/vfs-layers/layers.lock # Trivy html template ADD --chown=jenkins:jenkins html.tpl /home/jenkins/ # Make docker in Jenkinsfiles work RUN ln -s /usr/bin/podman /usr/bin/docker # Rootless podman RUN echo jenkins:100000:65536 > /etc/subuid \ && echo jenkins:100000:65536 > /etc/subgid ENV BUILDAH_ISOLATION=rootless # Allow container layers to be stored in PVCs VOLUME /home/jenkins/.local/share/containers USER jenkins