41 lines
1.2 KiB
Docker
41 lines
1.2 KiB
Docker
ARG BASE="latest-alpine-jdk11"
|
|
|
|
FROM jenkins/inbound-agent:${BASE}
|
|
|
|
USER root
|
|
RUN echo "http://dl-cdn.alpinelinux.org/alpine/edge/testing" >> /etc/apk/repositories \
|
|
&& apk upgrade -U -a \
|
|
&& apk --no-cache add \
|
|
make \
|
|
fuse-overlayfs \
|
|
podman \
|
|
buildah \
|
|
aws-cli \
|
|
trivy
|
|
|
|
# Podman tweaks
|
|
ADD conf/containers.conf conf/registries.conf conf/storage.conf /etc/containers/
|
|
ADD --chown=jenkins:jenkins conf/podman-containers.conf /home/jenkins/.config/containers/containers.conf
|
|
|
|
RUN mkdir -p /var/lib/shared/overlay-images /var/lib/shared/overlay-layers \
|
|
/var/lib/shared/vfs-images /var/lib/shared/vfs-layers && \
|
|
touch /var/lib/shared/overlay-images/images.lock /var/lib/shared/overlay-layers/layers.lock \
|
|
/var/lib/shared/vfs-images/images.lock /var/lib/shared/vfs-layers/layers.lock
|
|
|
|
# Trivy html template
|
|
ADD --chown=jenkins:jenkins html.tpl /home/jenkins/agent
|
|
|
|
# Make docker in Jenkinsfiles work
|
|
RUN ln -s /usr/bin/podman /usr/bin/docker
|
|
|
|
# Rootless podman
|
|
RUN echo jenkins:100000:65536 > /etc/subuid \
|
|
&& echo jenkins:100000:65536 > /etc/subgid
|
|
|
|
ENV BUILDAH_ISOLATION=rootless
|
|
|
|
# Allow container layers to be stored in PVCs
|
|
VOLUME /home/jenkins/.local/share/containers
|
|
|
|
USER jenkins
|